Try   HackMD

Office Hours January 2021

EU Edition

Panelists

Rachel Leekin, Chris Carty, Dan POP Papandrea, Saiyam Pathak

Person: Mostafa Elmenbawy (https://kubernetes.slack.com/archives/C6RFQ3T5H/p1609991530274100?thread_ts=1607960423.257700&cid=C6RFQ3T5H)

Question: What is recommended for on premise production cluster spanning multiple hosts?

Answer:

Person: Dinesh Shanmugam

Question:I performed manual certificate renewal on my k8s master using the kubectl alpha renew all which did update all the certificates. Post that I did a restart of my kubelet service but looks like my cluster went down. I am able to see my pods using kubectl get pods, but I am not able to schedule any new pods. I checked on the k8s API server - docker container logs and I see the following issue:

E0118 07:30:45.697275       1 authentication.go:104] Unable to authenticate the request due to an error: [x509: certificate signed by unknown authority, x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")] (edited)

Answer: Check systemd config files. Check individual components to confirm certs have propagated down to other services (scheduler, kubelet, etc)

Person: Achu Abebe

Question: Those of you who are CKA, would you please share some tips about the certificate? How important it is, etc..

Answer:

Person: Pavel Malinov

Question: What is your options and thoughts on CKS ?

Answer:

Person: vivek kumar sahu

Question: How to run GUI applications inside running containers (Docker) ?? I am getting this error.

Answer:

Person: Mostafa Elmenbawy

Question: What is the best practice to setup k8s on premise for a HA cluster of 4-8 nodes?

Answer:

Person: mindrunner

Question: Well, here a bomb from a newbie: Anyone have an oprem k8s install? and use Consul as a Service Mesh, What do you use as a LoadBalancer? (I can get ips from my network) I am reading up on using MetalLB in l2 mode

Answer:

Person: Long

Question: is the recommended CRI for future going to be containerd or cri-o ?

Answer:

Person: Pavel Malinov

Question: What do you think about the Elastic license ?Does moves like can affect kubernetes future ?

Answer:

Person: mindrunner

Question: I'm sorry I didn't get the name of the Engineer with a lot OPA experience. What is your workflow with OPA? Pre validation of YAMLs before the can get submitted to the API server? Continuous auditing of existing workloads How do we get the JSON submitted by our workloads to OPA for validation? (I'm just reading up on OPA) in prep for CKS, but this looks like a necessity for Enterpirse k8s

Answer:

Person: vivek kumar sahu

Question: I am sophomore. Learning Docker & K8's. Can you name some beginners projects using these tools.

Answer:

Person: Andrei

Question: What do you think about the following PR? https://github.com/kubernetes/kubernetes/pull/96594 Let's review this 3 line PR together online : )

Answer:

Person:

Question:

Answer:

Appendix

Intro Script

Welcome everyone to today’s Kubernetes Office Hours, where we answer your user questions live on the air with our esteemed panel of experts. You can find us in [#office-hours] on slack, and check the topic for the URL for the information.

  • Before we begin let’s start by introducing ourselves: (Give each panelist about a minute)
  • Before we start here are the ground rules:
    • This is a Kubernetes event so the Code of Conduct is in effect, please be excellent to each other.
    • This is a judgement-free zone, everyone had to start from somewhere so please help out your buddy by having a supportive environment in the channel.
    • While we will do our best to answer your questions the panel doesn’t have access to your cluster, so live debugging is off topic, but we will do our best to get you moving down the next step.
    • Panelists, you’re encouraged to expand on answers with your experiences and pro-tips.
    • Audience, you can help by pasting in URLs to official docs, blogs, or anything that might be relevant to the topic at hand.
    • Post your questions on [discuss.kubernetes.io].
    • You can also help us out by tweeting, spreading the word, and paying it forward.
    • This panel is made entirely of volunteers, if you want to rotate in please let us know, we love to have new people rotate in and help out.

Contest

The hack.md notes document will have a list of who has asked questions, roll a dice to see who won the shirts. On occasion if someone from the audience has been helpful feel free to give them a shirt as well, we want to reward people for helping others. Note: Multi-sided dice not included.

Outro

(Note, the companies will change over time depending on the hosts)

  • Thanks to the following companies for supporting the community with developer volunteers: Carta, Civo, Equinix Metal, Giant Swarm, Microsoft, Red Hat, Spectrm, Phase 2, Sysdig, Weaveworks, Utility Warehouse, VMware and special thanks to CNCF for sponsoring the t-shirt giveaway.

And lastly, feel free to hang out in [#office-hours] afterwards, if the other channels are too busy for you and you’re looking for a friendly home, you’re more than welcome to pull up a chair and hang out.

Last changed by 
 
Kubernetes
Production grade container orchestration, made with love
0
535

Read more

Lessons Learned from 3 years of Kubernetes Office Hours

Date: 23 August 2020 Authors: Jorge Castro (VMware), Josh Berkus (Red Hat), Chris Carty (Google), Dan "POP" Papandrea (Sysdig), David McKay (Equinix Metal) Today we celebrate three years of the Kubernetes Office Hours. This is a monthly event where we take a panel of volunteers, stick them on a live stream, and then see how many questions we can field from the community. I started the show for one reason. I had recently started my Kubernetes journey and was learning all these new concepts while rewiring my traditional sysadmin brain to be more cloud native. So the idea was if I'm going to dig into this stuff and bother my new coworkers with silly questions, we might as well do it together and on the air to share our experiences and do it in a way that is fun and useful for others. Give away some tshirts, fame and fortune would surely follow. After 65 episodes we've decided to take a look at some of the more common problem areas that we've been tackling, and put together a quick summary for you on things where you might want to invest your attention. You will find many articles on "Top X things to know about Kubernetes". We've specifically avoided those and went back into our archives because what people think you need to know and what you actually need to know can be different.

Mar 18, 2021
Office Hours Feb 2021

EU Edition Panelists Person: Andrew Question: We're writing a controller with controller-runtime, and trying to use the Generation/ObservedGeneration pattern to avoid reconciling if there isn't any change (not using the predicate provided by controller-runtime for that purpose yet though). My question is how can that work with the possibility of a stale cache? When we write the ObservedGeneration to the Status of our CR, it triggers another reconcile immediately, but in some cases, the cache is stale and the CR it "Get"s still has the old Status, and therefore the old ObservedGeneration. What is the recommended strategy of dealing with this? Thanks! Person: Simone Baracchi Question: I'd like to configure my small cluster as "highly available" with no single master / single point of failure and make the best use of all the cluster resources. My current plan is to make 3 nodes run as masters and be able to schedule pods on the masters. From my research the issues in doing so are 1) security issues about sensitive data on master which could be read from malicious pods and 2) pods competing for resources (especially in case of a node failure). I'm not too concerned about security atm, and I can think of limiting the max number of pods / resources used. Is there any other red flag in doing so? Person: Jesper Berg Axelsen

Feb 17, 2021
Contributors Awards Ceremony Playbook

awards/ README.md -- list of everyone playbook.md Kubernetes has a tradition of yearly peer awards. These are commonly handed out during the end-of-year Contributor Summit. The CNCF typically has awards as part of KubeCon + CloudNativeCon, the Kubernetes awards are a compliment to those, and are meant to be peer awards. Ideals and Values Typically each SIG will nominate two(2) recipients for an award.

Feb 12, 2021
To CNFC Maintainers

(TODO: We need a derived version appropriate to send to cncf-maintainers list) Sub: You're invited to the Kubernetes Contributor Celebration in one week! TL;DR we would love to have fellow cloud native contributors to join in the fun. Register now to be the first to join our Discord and we'll see you next week! https://forms.gle/51tqQgxuHxLaeU1P8 The Kubernetes community would normally celebrate this year by meeting in person, and that's not in the cards for us. So we decided to throw something fun online. With a change of venue, and with a lack of physical room limitations there’s no reason we can’t grow this to include all our friends and family! All we ask is that you register for logistical purposes. Here's the overview:

Dec 4, 2020
Read more from Kubernetes
Published on HackMD