KubeWeekly #154

KubeWeeklyは毎週Kubernetesに関する興味深いニュースを提供しています。（http://bit.ly/kubeweekly ）この記事は 2018/10/31に発行された Kube Weekly #154 ( http://eepurl.com/dK4tGA ) を読んで、感じたことをメモ的にまとめたものです。
私の勘違いや説明不足による誤解もあるかと思いますので、この記事読んで「おっ」と思ったらURLを辿って本文を確認してください。


# Headline

## Tips for Your First Kubecon Presentation - Part 1
<table>
<tr>
  <td colspan="2"><a href="https://kubernetes.io/blog/2018/10/18/tips-for-your-first-kubecon-presentation---part-1/">Tips for Your First Kubecon Presentation - Part 1</a></td>
</tr>
<tr>
  
  <td>Author: Michael Gasch (VMware)
First of all, let me congratulate you to this outstanding achievement. Speaking at KubeCon, especially if it’s your first time, is a tremendous honor and experience. Well done!
Congrats to everyone who got Kubecon talks accepted! 👏👏👏
To everyone who got a rejection don't feel bad. Only 13% could be accepted. Keep trying. There will be other opportunities.
— Justin Garrison 🎃 (@rothgar) September 24, 2018</td>
</tr>
</table>

実際に登壇した人が語るKubeConで話すことになった人へ向けてのアドバイス。


## Kubernetes Podcast from Google
<table>
<tr>
  <td colspan="2"><a href="None">Kubernetes Podcast from Google</a></td>
</tr>
<tr>
  <td><img src="https://kubernetespodcast.com/_assets/images/Kubernetes-Podcast-Logo_1400x1400.png"></td>
  <td></td>
</tr>
</table>

Kubernetes PodCastの紹介。
Kubernetesコミュニティの発展について
（聞いていない）

## How do you keep up with Kubernetes?
<table>
<tr>
  <td colspan="2"><a href="https://dev.to/petermbenjamin/how-do-you-keep-up-with-kubernetes-2209">How do you keep up with Kubernetes?</a></td>
</tr>
<tr>
  <td><img src="https://res.cloudinary.com/practicaldev/image/fetch/s--FOC1u1Bm--/c_imagga_scale,f_auto,fl_progressive,h_500,q_auto,w_1000/https://cl.ly/f7496038a74f/download/Image%25202018-10-22%2520at%252010.40.33%2520AM.png"></td>
  <td>A collection of resources I use to stay up-to-date on Kubernetes</td>
</tr>
</table>

Kubernetesの情報をキャッチアップするための情報源について。
ポッドキャストやブログ、Changelogなどなど

# The Technical

## Meet kn—a Kubernetes native experience – Hacker Noon
<table>
<tr>
  <td colspan="2"><a href="https://hackernoon.com/meet-kn-a-kubernetes-native-experience-bd87239a11ff">Meet kn—a Kubernetes native experience – Hacker Noon</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/1*AUqUWXPTuz-SU9tldjDzrA.png"></td>
  <td>Recently,  I had a look at a bunch of shell scripts on my computer that I’m using to quickly ramp up a debug pod or publish a service in a…</td>
</tr>
</table>

`kn`というコマンドの紹介
kubectlをラップしてアプリケーション開発を簡単にするツールのようです。namespaceを自動で作成し、カレントディレクトリの中身をリモートにコピーしたりしてくれるようです。

## Why and how do we run Kubernetes on the Spot instances
<table>
<tr>
  <td colspan="2"><a href="https://medium.com/preply-engineering/why-and-how-do-we-run-kubernetes-on-the-spot-instances-c88d32fb9df3">Why and how do we run Kubernetes on the Spot instances</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/1*4lY-PyUy7RWswfZ92Wam8w.jpeg"></td>
  <td>I want to share our experience of running a Kubernetes cluster on AWS Spot instances, and the benefits and drawbacks of this approach.</td>
</tr>
</table>

AWSのSpot instanceでKubernetesを動作させる利点・欠点。
EKSは値段が高く、ちょっとしたお試しでKubernetesクラスタを作るのには向いていない。この記事ではKopsを使ってSpot instanceでKubernetesクラスタを構築する方法を紹介している。Cluster AutoscalerによりSpot instanceが落とされた時もクラスタサイズが復元するようにしている。
Spot instanceが終了される告知を検知して、事前にPodを退避させるコントローラの紹介 [GitHub - mumoshu/kube-spot-termination-notice-handler: Moved to https://github.com/kube-aws/kube-spot-termination-notice-handler](https://github.com/mumoshu/kube-spot-termination-notice-handler)

## Orchestructure October 2018 - Exploring the Future of Helm with Matt Farina
<table>
<tr>
  <td colspan="2"><a href="https://www.youtube.com/watch?v=SQC_yuVAAhM">Signing Helm Charts & Helm v3</a></td>
</tr>
<tr>
  <td><img src="https://i.ytimg.com/vi/SQC_yuVAAhM/hqdefault.jpg"></td>
  <td>Helm, the defacto package manager for Kubernetes, is a powerful tool going through a period of breaking development. Join us as Matt Farina, a Helm Maintaine...</td>
</tr>
</table>

Helm v3の紹介動画、Chartの署名のYoutube動画
Tillerがなくなる、Luaが使えるようになる
（ちゃんと見ていない）


## v0.10 Release – Open Policy Agent
<table>
<tr>
  <td colspan="2"><a href="https://blog.openpolicyagent.org/v0-10-release-277da41b9ed1">v0.10 Release – Open Policy Agent</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/0*ObYhIUvRVTFYslDu"></td>
  <td>We’re excited to announce the v0.10.0 release of OPA. This release contains more than 60 commits from 8 authors across 5 organizations…</td>
</tr>
</table>

OpenPolicyAgentのv0.10がリリースされました。

- WebAssembry版ができた
- テストの仕組みが改善された
- 否定のルールが改良された

## Kubernetes the very hard way at Datadog
<table>
<tr>
  <td colspan="2"><a href="https://www.youtube.com/watch?v=2dsCwp_j0yQ">Kubernetes the very hard way at Datadog</a></td>
</tr>
<tr>
  <td><img src="https://i.ytimg.com/vi/2dsCwp_j0yQ/maxresdefault.jpg"></td>
  <td>Rob Boll and Laurent Bernaille share their experiences in running and building the Kubernetes clusters that power Datadog. Slides: https://www.slideshare.net...</td>
</tr>
</table>

Youtube動画
良いKubernetesクラスタを手作業で構築方法（よく見ていない）
あまり具体的な手法には触れておらず、推奨設定や、推奨コンポーネントを示しているようだ。

## Tutorial: Blue/Green Deployments with Kubernetes and Istio - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/tutorial-blue-green-deployments-with-kubernetes-and-istio/">Tutorial: Blue/Green Deployments with Kubernetes and Istio - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2018/10/4ae406b3-hyacinth-21687_640.jpg"></td>
  <td>The objective of this tutorial is to help you understand how to configure blue/green deployment of microservices running in Kubernetes with Istio. You don’t need to have any prerequisites to explore this scenario except a basic idea of deploying pods and services in Kubernetes. We will configure everything from Minikube to Istio to the sample application.</td>
</tr>
</table>

MinikubeとIstioを使ったBlue/Green Deploymentのチュートリアル。

## Understanding resource limits in kubernetes: memory
<table>
<tr>
  <td colspan="2"><a href="https://medium.com/@betz.mark/understanding-resource-limits-in-kubernetes-memory-6b41e9a955f9">Understanding resource limits in kubernetes: memory</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/1*Y5fChf8uc12MDZpYmiefSw.png"></td>
  <td>When I started working with kubernetes at scale I began encountering something that didn’t happen when I was just running experiments on…</td>
</tr>
</table>

Kubernetesのmemory limitとRequestについて、それがなんなのか、どのように実装されているかの紹介。
別の記事でCPUについても紹介している。

## Modernizing Applications for Kubernetes
<table>
<tr>
  <td colspan="2"><a href="https://dev.to/digitalocean/modernizing-applications-for-kubernetes-1hon">Modernizing Applications for Kubernetes</a></td>
</tr>
<tr>
  <td><img src="https://res.cloudinary.com/practicaldev/image/fetch/s--DKV23TKy--/c_imagga_scale,f_auto,fl_progressive,h_500,q_auto,w_1000/https://cl.ly/6f4305743701/Image%25202018-10-22%2520at%252012.06.14%2520PM.png"></td>
  <td>

Introduction

Modern stateless applications are built and designed to run in so...</td>
</tr>
</table>

従来のアプリケーションをKubernetes向けに変更する際のStep by Stepの紹介。

[Architecting Applications for Kubernetes | DigitalOcean](https://www.digitalocean.com/community/tutorials/architecting-applications-for-kubernetes) にはKubernetes上で動かすアプリケーションのアーキテクチャについて紹介しており、その記事に対して、この記事はコードなどを提示し、より具体的に説明している。

## SRE: Resiliency: Bolt on Rate Limiting using Envoy – Dm03514 Tech Blog – Medium
<table>
<tr>
  <td colspan="2"><a href="https://medium.com/dm03514-tech-blog/sre-resiliency-bolt-on-sidecar-rate-limiting-with-envoy-sidecar-5381bd4a1137">SRE: Resiliency: Bolt on Rate Limiting using Envoy – Dm03514 Tech Blog – Medium</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/1*TYmy-voDS3_cWbp4iSUXkw.png"></td>
  <td>Rate-limiting is an effective and simple way to mitigate cascading failure and shared resource exhaustion. Envoy is a feature rich proxy…</td>
</tr>
</table>

envoyをプロキシとして利用しrate limitを実現する方法の紹介
[GitHub - lyft/ratelimit: Go/gRPC service designed to enable generic rate limit scenarios from different types of applications.](https://github.com/lyft/ratelimit) を使っている。

# Tooling Spotlight

## solo-io/kubesquash
<table>
<tr>
  <td colspan="2"><a href="https://github.com/solo-io/kubesquash">solo-io/kubesquash</a></td>
</tr>
<tr>
  <td><img src="https://github.com/solo-io/kubesquash/raw/master/images/KubeSquash.png"></td>
  <td>A debugger for Kubernetes applications. Contribute to solo-io/kubesquash development by creating an account on GitHub.</td>
</tr>
</table>

Kubernetes上で動いているアプリケーションに対してgdb、dlvなどを実行するツール

## astefanutti/kubebox
<table>
<tr>
  <td colspan="2"><a href="https://github.com/astefanutti/kubebox">astefanutti/kubebox</a></td>
</tr>
<tr>
  <td><img src="https://avatars2.githubusercontent.com/u/366207?s=400&v=4"></td>
  <td>⎈❏ Terminal and Web console for Kubernetes. Contribute to astefanutti/kubebox development by creating an account on GitHub.</td>
</tr>
</table>

CUIでグラフィカルにKubernetesの操作ができるツール

## dmathieu/dice
<table>
<tr>
  <td colspan="2"><a href="https://github.com/dmathieu/dice">dmathieu/dice</a></td>
</tr>
<tr>
  <td><img src="https://avatars3.githubusercontent.com/u/9347?s=400&v=4"></td>
  <td>Roll all instances within a kubernetes cluster, using a zero-downtime strategy. - dmathieu/dice</td>
</tr>
</table>

クラスタを構成するマシンを安全に再生成するコントローラ
Podをevictして、完全にいなくなったらNodeを削除する。AWSのみ対応。

## wagoodman/dive
<table>
<tr>
  <td colspan="2"><a href="https://github.com/wagoodman/dive">wagoodman/dive</a></td>
</tr>
<tr>
  <td><img src="https://avatars0.githubusercontent.com/u/590471?s=400&v=4"></td>
  <td>A tool for exploring each layer in a docker image. Contribute to wagoodman/dive development by creating an account on GitHub.</td>
</tr>
</table>

Dockerイメージの各レイヤーの様子を可視化するCUIツール

## OpenUnison/openunison-k8s-login-activedirectory
<table>
<tr>
  <td colspan="2"><a href="https://github.com/OpenUnison/openunison-k8s-login-activedirectory">OpenUnison/openunison-k8s-login-activedirectory</a></td>
</tr>
<tr>
  <td><img src="https://avatars3.githubusercontent.com/u/44305260?s=400&v=4"></td>
  <td>Login portal for Kubernetes using Active Directory.  Provides authentication and SSO for kubectl and for the dashboard. - OpenUnison/openunison-k8s-login-activedirectory</td>
</tr>
</table>

ActiveDirectoryで認証して、その結果をもとにkubernetes APIのTokenやkubernetes dashboardの認証を行うプロキシ。

# The Editorial

##  Journey to the CKA · Suraj Narwade 
<table>
<tr>
  <td colspan="2"><a href="None"> Journey to the CKA · Suraj Narwade </a></td>
</tr>
<tr>
  
  <td></td>
</tr>
</table>

CKA取得の道のり。どんな準備をしたかなど。
参考資料や、知っておくべきコマンド、時間短縮のためのaliasの設定など。


## r/kubernetes - How good is EKS vs GCE ?
<table>
<tr>
  <td colspan="2"><a href="https://www.reddit.com/r/kubernetes/comments/9qg1wz/how_good_is_eks_vs_gce/">r/kubernetes - How good is EKS vs GCE ?</a></td>
</tr>
<tr>
  <td><img src="https://styles.redditmedia.com/t5_33f68/styles/communityIcon_w3qxa8j08vj01.png"></td>
  <td>30 votes and 63 comments so far on Reddit</td>
</tr>
</table>

EKSとGCEのどっちが良いかというreddit上での議論


## [Make an open source maintainer's day with this one weird trick | News and podcasts for developers | Changelog](https://changelog.com/posts/make-an-open-source-maintainers-day-with-this-one-weird-trick)

お世話になっているOSSにThanksを送ろうよ！という話。
例えばこんな感じ [Thanks! · Issue #360 · edgurgel/httpoison · GitHub](https://github.com/edgurgel/httpoison/issues/360)

## Effectively Managing Kubernetes with Cost Monitoring
<table>
<tr>
  <td colspan="2"><a href="https://medium.com/kubecost/effectively-managing-kubernetes-with-cost-monitoring-96b54464e419">Effectively Managing Kubernetes with Cost Monitoring</a></td>
</tr>
<tr>
  <td><img src="https://cdn-images-1.medium.com/max/1200/1*FBKl44ST1ymLM-SS4HIwCg.png"></td>
  <td>This is the first in a series of posts for managing Kubernetes costs. Article shows how to quickly setup monitoring for basic cost metrics.</td>
</tr>
</table>

Kubernetesのコストを表示するダッシュボードを作った話。

## Introducing Multicluster-Controller
<table>
<tr>
  <td colspan="2"><a href="https://admiralty.io/blog/introducing-multicluster-controller/">Introducing Multicluster-Controller</a></td>
</tr>
<tr>
  <td><img src="https://admiralty.io/static/bird-s-eye-view-boats-dock-1085718-half-92dbd92f902cacb135793990a2209882-16440.jpg"></td>
  <td>A Library for Building Hybrid and Multicloud Kubernetes Operators</td>
</tr>
</table>

マルチクラスタで動作するコントローラを作るためのライブラリの紹介。OperatorSDKやKubebuilderではマルチクラスタを意識したコントローラは作れないことから、開発したとのこと。
[GitHub - admiraltyio/multicluster-controller: A Library for Building Hybrid and Multicloud Kubernetes Operators](https://github.com/admiraltyio/multicluster-controller)

## Now Live: First Observability Practitioners Summit Schedule is Jam-Packed - Cloud Native Computing Foundation
<table>
<tr>
  <td colspan="2"><a href="https://www.cncf.io/blog/2018/10/18/observability-practitioners-summit-schedule/">Now Live: First Observability Practitioners Summit Schedule is Jam-Packed - Cloud Native Computing Foundation</a></td>
</tr>
<tr>
  <td><img src="https://www.cncf.io/wp-content/uploads/2018/10/Screen-Shot-2018-10-17-at-2.40.44-PM.png"></td>
  <td>Are you planning to attend KubeCon + CloudNativeCon Seattle, and want a deep dive into all things monitoring and observability? Arrive early so that you can attend the first-ever Observability...</td>
</tr>
</table>

Observability Practitioners Summitの紹介。このイベントはKubeCon+CloudNativeConのCommunity Events Dayの一部として実施されるようです。
発表のタイトルも紹介されています。

## Tips for Your First Kubecon Presentation - Part 2
<table>
<tr>
  <td colspan="2"><a href="https://kubernetes.io/blog/2018/10/26/tips-for-your-first-kubecon-presentation---part-2/">Tips for Your First Kubecon Presentation - Part 2</a></td>
</tr>
<tr>
  
  <td>Author: Michael Gasch (VMware)
Hello and welcome back to the second and final part about tips for KubeCon first-time speakers. If you missed the last post, please give it a read here.
The Day before the Show Tip #13 - Get enough sleep. I don’t know about you, but when I don’t get enough sleep (especially when beer is in the game), the next day my brain power is around 80% at best.</td>
</tr>
</table>

実際に登壇した人が語るKubeConで話すことになった人へ向けてのアドバイス。（一番上で紹介した記事の続き。）

## Apache Kafka on Kubernetes – Could you? Should You? | Confluent
<table>
<tr>
  <td colspan="2"><a href="https://www.confluent.io/blog/apache-kafka-kubernetes-could-you-should-you">Apache Kafka on Kubernetes – Could you? Should You? | Confluent</a></td>
</tr>
<tr>
  <td><img src="https://www.confluent.io/wp-content/uploads/running-kafka-on-kubernetes-500x333px.jpg"></td>
  <td>Quite a few members of the community have questioned whether running Kafka on Kubernetes is a good idea. We'll explore when Kafka on Kubernetes is actually a good fit, and circumstances where running Kafka on Kubernetes might be more challenging.</td>
</tr>
</table>

KafkaをKubernetesで動かすことができるのか？動かすべきなのか？
Confluence Operatorを使うことでかんたんにKafkaをKubernetes上にデプロイすることができる。
statefulなkafkaのようなものを動かすためには、レイテンシの低いネットワークや永続ストレージなどが必要で、多くの挑戦が必要となるが、Kafkaのクラスタを複数運用するようなシチュエーションでは多くの利点があるでしょう、とのこと。


## The challenges of migrating 150+ microservices to Kubernetes
<table>
<tr>
  <td colspan="2"><a href="https://www.oreilly.com/ideas/the-challenges-of-migrating-150-microservices-to-kubernetes">The challenges of migrating 150+ microservices to Kubernetes</a></td>
</tr>
<tr>
  <td><img src="https://d3ucjech6zwjp8.cloudfront.net/1400x933/boxes-473889_1920_crop-31d417fa93c9d867b266f99e27984256.jpg"></td>
  <td>Sarah Wells explains how the Financial Times migrated microservices between container stacks without affecting production users.</td>
</tr>
</table>

動画の紹介、Financial Timesが150以上のマイクロサービスをKubernetesに移行した話（見ていない）

## Wikibon forecast: Multicloud, software robots and Kubernetes will take off in 2019 - SiliconANGLE
<table>
<tr>
  <td colspan="2"><a href="https://siliconangle.com/2018/10/17/get-ready-for-zero-trust-security-and-other-predictions-as-cloud-computing-dominates-the-2019-picture-predictionstech2019/">Wikibon forecast: Multicloud, software robots and Kubernetes will take off in 2019 - SiliconANGLE</a></td>
</tr>
<tr>
  <td><img src="https://d15shllkswkct0.cloudfront.net/wp-content/blogs.dir/1/files/2018/10/aziz-acharki-253909-unsplash.jpg"></td>
  <td>Wikibon forecast: Multicloud, software robots and Kubernetes will take off in 2019 - SiliconANGLE</td>
</tr>
</table>

クラウドネイティブ周りの将来予想。
[Digital Incite: Wikibon’s 2019 Predictions - Wikibon Research](https://wikibon.com/digital-incite-wikibons-2019-predictions/) の要約のようです。

多様なトピックが挙げられています。

- Zero-trust security takes off
- True private cloud rules
- Kubernetes enables multicloud
- CNCF shapes cloud futures
- AI gets containerized at the edge
- Multicloud spawns huge markets
- Software robots smooth cloud transition
- Matrix computing models emerge

# バックナンバー

- KubeWeekly #153 https://qiita.com/inajob/items/3037ccfc64b21dd45c64
- KubeWeekly #152 https://qiita.com/inajob/items/3566a7140c6d7f93f334
- KubeWeekly #151 https://qiita.com/inajob/items/5b3bb83dcb68818020c0
- KubeWeekly #150 https://qiita.com/inajob/items/bebd4fcca440ec695d34
- KubeWeekly #149 https://qiita.com/inajob/items/d007ba0114dfb5eb77e2
- KubeWeekly #148 https://qiita.com/inajob/items/4f153cb214fd622bdb89
- KubeWeekly #147 https://qiita.com/inajob/items/8148914d7e6b8afc186c
- KubeWeekly #143 https://qiita.com/inajob/items/b93257781552c61da173
- KubeWeekly #142 https://qiita.com/inajob/items/6eac1a856e95f18cd2ca
- KubeWeekly #141 https://qiita.com/inajob/items/7771e5a5a4409f433042