KubeWeekly #182

KubeWeeklyは毎週Kubernetesに関する興味深いニュースを提供しています。（https://kubeweekly.io/ ）この記事は 2019/08/28に発行された [Kube Weekly #182](https://kubeweekly.io/2019/08/28/kubeweekly-182/)を読んで、感じたことをメモ的にまとめたものです。
私の勘違いや説明不足による誤解もあるかと思いますので、この記事読んで「おっ」と思ったらURLを辿って本文を確認してください。

(過去のKubeWeekly読書メモは[こちら](https://qiita.com/tags/kubeweekly))


# The Headlines
## Office Hours for 28 August
<table>
<tr>
  <td colspan="2"><a href="https://discuss.kubernetes.io/t/office-hours-for-28-august/7559">Office Hours for 28 August</a></td>
</tr>
<tr>
  <td><img src="https://aws1.discourse-cdn.com/business6/uploads/kubernetes/original/1X/9d7268f40e32b387214eab6ed73fa246ee2659de.png"></td>
  <td>Hello everyone,  We normally do the 3rd Wednesday of every month but a bunch of us are travelling next week so we’re bumping this one out to August 28.  Office hours are a livestream that we do on the Kubernetes YouTube channel. Our panel of experts will take questions from #office-hours on slack and then answer them in real time.  If you’ve got good Kubernetes experience and want to share it with the community then you are also encouraged to sit on our panel of experts, ping me offlist and we’l...</td>
</tr>
</table>

毎月行われている Kubernetesのオフィスアワーのスレッド　通常は毎月第3水曜日に行われているらしい。

## At VMworld, VMware bets big on convergence of virtual machines and containers - SiliconANGLE
<table>
<tr>
  <td colspan="2"><a href="https://siliconangle.com/2019/08/27/vmworld-vmware-bets-big-convergence-virtual-machines-containers/">At VMworld, VMware bets big on convergence of virtual machines and containers - SiliconANGLE</a></td>
</tr>
<tr>
  <td><img src="https://d15shllkswkct0.cloudfront.net/wp-content/blogs.dir/1/files/2019/08/vmwarekubernetes.jpg"></td>
  <td>At VMworld, VMware bets big on convergence of virtual machines and containers - SiliconANGLE</td>
</tr>
</table>

VMWareの発表について。
Project Pacificが発表され、VMWareはVMからKubernetesに移行する顧客に対してもサービスを提供する算段のようだ。

# The Technical

## Week Ending August 25, 2019
<table>
<tr>
  <td colspan="2"><a href="http://lwkd.info/2019/20190827">Week Ending August 25, 2019</a></td>
</tr>
<tr>
  <td><img src="http://lwkd.info//images/logo.png"></td>
  <td>Developer News</td>
</tr>
</table>

8/25週のKubernetesの開発状況。
1.16にむけたコードフリーズは8/29

debugコンテナという仕組みがalphaとして利用できるようになるそうです。

## A Step-by-Step Guide to Continuous Deployment on Kubernetes - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/a-step-by-step-guide-to-continuous-deployment-on-kubernetes/">A Step-by-Step Guide to Continuous Deployment on Kubernetes - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2019/08/c795dfab-kilimanjaro-1025146_1920.jpg"></td>
  <td>Here is a detailed step by step account on how to deploy an app to Kubernetes. By the end of this article, you’ll have a working Kubernetes deployment and continuous delivery workflow, using the Semaphore CI/CD tools.</td>
</tr>
</table>

[Semaphoreci](https://semaphoreci.com/)をつかったCI/CDの設定方法の紹介。

## How does 'kubectl exec' work? · Erkan Erol
<table>
<tr>
  <td colspan="2"><a href="https://erkanerol.github.io/post/how-kubectl-exec-works/">How does 'kubectl exec' work? · Erkan Erol</a></td>
</tr>
<tr>
  <td><img src="https://www.gravatar.com/avatar/321108fd00753fd95baeddbc3abc8a76?s=200"></td>
  <td>Erkan Erol's Blog</td>
</tr>
</table>

`kubectl exec`を実行した時に何が起きているか？を実際のnodeでの調査と、ソースコードを示して説明している。

## kabachook/k8s-security
<table>
<tr>
  <td colspan="2"><a href="https://github.com/kabachook/k8s-security">kabachook/k8s-security</a></td>
</tr>
<tr>
  <td><img src="https://avatars1.githubusercontent.com/u/9118683?s=400&v=4"></td>
  <td>Kubernetes security notes and best practices. Contribute to kabachook/k8s-security development by creating an account on GitHub.</td>
</tr>
</table>

Kubernetesのセキュリティベストプラクティスが淡々と紹介されているGitHubリポジトリ。
注意すべきフラグや、各コンポーネントの通信先、設定ファイルの場所。などマニュアルに散りばめられている情報をうまくまとめてあり、有用そう。

## Announcing Linkerd 2.5: Helm support and RBAC-aware tap
<table>
<tr>
  <td colspan="2"><a href="https://linkerd.io/2019/08/20/announcing-linkerd-2.5/">Announcing Linkerd 2.5: Helm support and RBAC-aware tap</a></td>
</tr>
<tr>
  <td><img src="https://linkerd.io/uploads/diving-helmet.jpg"></td>
  <td>Today we&rsquo;re happy to announce the release of Linkerd 2.5! This release adds support for installation via Helm, hardens Linkerd&rsquo;s tap command to obey Kubernetes RBAC rules, improves Linkerd&rsquo;s CLI to report metrics during traffic splits, allows logging levels to be set dynamically, and much, much more.</td>
</tr>
</table>

Linkerdの2.5がリリースされました。Helmでのインストールがサポートされ、tapコマンド（tcpdumpのようなもの）がRBACに従うようになりました。
2.4から6週間しか経っていないのにもう2.5がリリースされており、開発の勢いを感じます。

## Cellery: A Code-First Approach to Deploy Applications on Kubernetes 
<table>
<tr>
  <td colspan="2"><a href="https://www.infoq.com/articles/cellery-code-first-kubernetes/">Cellery: A Code-First Approach to Deploy Applications on Kubernetes </a></td>
</tr>
<tr>
  <td><img src="https://res.infoq.com/articles/cellery-code-first-kubernetes/en/headerimage/cellery-code-first-kubernetes-h-1566554394447.jpg"></td>
  <td>Cellery is a code-first approach to building, integrating, running, and managing composite applications on Kubernetes, using a cell-based architecture. Learn what cells are, how Cellery works, and see how an existing Kubernetes application written by Google can be deployed, managed, and observed using Cellery.</td>
</tr>
</table>

Celleryという開発環境の紹介。Ballerinaを元にした言語でマイクロサービスの開発が簡単にできるようです。
この記事にある例だと型付きのmanifestのようなものをBallerinaで書くことができることがわかります。
（ロジック自体もBallerinaでかけるのかは、ここからはよくわかりませんでした。）

## [Post Mortem: Kubernetes Node OOM](https://www.bluematador.com/blog/post-mortem-kubernetes-node-oom)

プロダクションのKubernetesのNodeがOOMが発生したことについての記録。

[一度紹介されていました。](https://qiita.com/inajob/items/b6f7868b1353093a75a5#post-mortem-kubernetes-node-oom)

## Deploy a Single Node Kubernetes Instance in Seconds with MicroK8s - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/deploy-a-single-node-kubernetes-instance-in-seconds-with-microk8s/">Deploy a Single Node Kubernetes Instance in Seconds with MicroK8s - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2019/08/14b1c9ff-virus-4030721_1280.jpg"></td>
  <td>How to use Canonical's MicroK8s to quickly set up a single node Kubernetes instance.</td>
</tr>
</table>

Microk8sを使ってKubernetesクラスタを構築する方法を紹介。

## Netflix Discovers Severe Kubernetes HTTP/2 Vulnerabilities - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/netflix-discovers-severe-kubernetes-http-2-vulnerabilities/">Netflix Discovers Severe Kubernetes HTTP/2 Vulnerabilities - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2019/08/7ac06553-flood-943967_640.jpg"></td>
  <td>A set of severe vulnerabilities in the Golang implementation of HTTP/2 may put Kubernetes deployments under risk for attack.</td>
</tr>
</table>

Netflixのエンジニアが発見したHTTP/2の実装によるKubernetesの脆弱性についての紹介。

## Kubernetes Web UIs in 2019
<table>
<tr>
  <td colspan="2"><a href="https://srcco.de/posts/kubernetes-web-uis-in-2019.html">Kubernetes Web UIs in 2019</a></td>
</tr>
<tr>
  <td><img src="https://srcco.de/galleries/kubernetes-web-uis/kube-web-view-1.png"></td>
  <td>This post takes a look at different open source Kubernetes web UIs, my requirements, and why I created Kubernetes Web View to help with support and troubleshooting across multiple clusters.


Use Case</td>
</tr>
</table>

[先週紹介しました](https://qiita.com/inajob/items/6dd4aa6d1fc30ba1592a#kubernetes-web-uis-in-2019)。

# The Editorial

## 4 Different Approaches for Kubernetes in the Enterprise - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/4-different-approaches-for-kubernetes-in-the-enterprise/">4 Different Approaches for Kubernetes in the Enterprise - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2019/08/f58228f2-girl-2573111_1280.jpg"></td>
  <td>A discussion of the differet approaches of introducing Kubernetes to the enterprise.</td>
</tr>
</table>

EnterpriseでKubernetesを利用するための4つの方法を紹介。

- PaaS
- Cloud
- Managing Kubernetes for You
- Native Kubernetes Platforms

という分類でKubernetesクラスタの提供方法を紹介している。

## Introducing Konfig: A Kubernetes Friendly Rails Configuration Gem
<table>
<tr>
  <td colspan="2"><a href="https://blog.cloud66.com/introducing-konfig-a-kubernetes-friendly-rails-configuration-gem/">Introducing Konfig: A Kubernetes Friendly Rails Configuration Gem</a></td>
</tr>
<tr>
  <td><img src="https://blog.cloud66.com/content/images/2019/08/kubernetes-friendly-rails-configuration-gem-1.png"></td>
  <td>Today, we are very excited to introduce a new open source project called Konfig to the Cloud 66 family.  What is Konfig?Konfig is a new open-source project created and maintained by Cloud 66. In a nutshell, Konfig is a Kubernetes friendly Rails configuration gem.  What does that mean? While</td>
</tr>
</table>

Ruby on RailsでKubernetesのSecret経由での設定ファイルをうまく扱うgem

## Knative serverless Kubernetes bypasses FaaS to revive PaaS
<table>
<tr>
  <td colspan="2"><a href="https://searchitoperations.techtarget.com/news/252469607/Knative-serverless-Kubernetes-bypasses-FaaS-to-revive-PaaS">Knative serverless Kubernetes bypasses FaaS to revive PaaS</a></td>
</tr>
<tr>
  <td><img src="https://cdn.ttgtmedia.com/visuals/searchVirtualDesktop/app_virtualization_streaming/virtualdesktop_article_001.jpg"></td>
  <td>Knative serverless Kubernetes can be used for portable function-as-a-service, but its event-driven compute capabilities also go beyond FaaS, and can serve as the basis for Heroku-like PaaS platforms for developers, with deeper infrastructure control.</td>
</tr>
</table>

Knativeの紹介。Google Cloud Runを利用していたが、コスト的な面で見合わなくなったPerceptual IncがCroud Run on GKEに移行したエピソードの紹介。

## Weighing the Cost of Improper DevSecOps - DevOps.com
<table>
<tr>
  <td colspan="2"><a href="https://devops.com/weighing-the-cost-of-improper-devsecops/">Weighing the Cost of Improper DevSecOps - DevOps.com</a></td>
</tr>
<tr>
  <td><img src="https://devops.com/wp-content/uploads/2019/08/Cost-Improper-DevSecOps.jpg"></td>
  <td>In this article, we'll uncover some startling evidence on the state of Kubernetes vulnerabilities and discuss what companies can do to rectify.</td>
</tr>
</table>

Kubernetesクラスタから重要な情報が漏れ出さないようにするために気をつける点。
Secretの扱いやNetworkPolicyについては導入がうまく進んでいないようです。

## VMworld 2019: VMware Goes All-In On Containers, Kubernetes And Multi-Clouds With Tanzu
<table>
<tr>
  <td colspan="2"><a href="https://www.forbes.com/sites/jeanbaptiste/2019/08/27/vmworld-2019-vmware-goes-all-in-on-containers-kubernetes-and-multicloud-with-tanzu/">VMworld 2019: VMware Goes All-In On Containers, Kubernetes And Multi-Clouds With Tanzu</a></td>
</tr>
<tr>
  <td><img src="https://thumbor.forbes.com/thumbor/600x315/https%3A%2F%2Fblogs-images.forbes.com%2Fjeanbaptiste%2Ffiles%2F2019%2F08%2Fvmware-kubernetes.jpg"></td>
  <td>Atherton Research's Principal Analyst and Futurist Jeb Su weighs in on VMware's latest Kubernetes-focused announcements at the 10th annual VMworld conference this week in San Francisco.</td>
</tr>
</table>

VMWorld2019の発表を受けて、VMWareがVMからコンテナに移行しつつあるぞ。という話。

## With Heptio and Pivotal, VMware Doubles Down on Kubernetes - The New Stack
<table>
<tr>
  <td colspan="2"><a href="https://thenewstack.io/with-heptio-and-pivotal-vmware-doubles-down-on-kubernetes/">With Heptio and Pivotal, VMware Doubles Down on Kubernetes - The New Stack</a></td>
</tr>
<tr>
  <td><img src="https://cdn.thenewstack.io/media/2019/08/ff13ef8c-vmworld-2.jpg"></td>
  <td>A wrapup of the first day's announcements at this year's VMworld 2019.</td>
</tr>
</table>

上の記事と同じくVMWorld2019の発表を受けてVMWareの戦略について考察する記事。
またコンテナに注力するために多くの企業を買収したことにも触れている。

## VMware is bringing VMs and containers together, taking advantage of Heptio acquisition – TechCrunch
<table>
<tr>
  <td colspan="2"><a href="http://social.techcrunch.com/2019/08/26/vmware-is-bringing-vms-and-containers-together-taking-advantage-of-heptio-acquisition/">VMware is bringing VMs and containers together, taking advantage of Heptio acquisition – TechCrunch</a></td>
</tr>
<tr>
  <td><img src="https://techcrunch.com/wp-content/uploads/2019/08/GettyImages-920359826.jpg?w=600"></td>
  <td>At VMworld today in San Francisco, VMware introduced a new set of services for managing virtual machines and containers in a single view. Called Tanzu, the product takes advantage of the knowledge the company gained when it acquired Heptio last year. As companies face an increasingly fragmented lan…</td>
</tr>
</table>

こちらもVMWareの今後の戦略について紹介している記事。

## Struggling to move workloads to the cloud? VMware's new tech may be the perfect on-ramp
<table>
<tr>
  <td colspan="2"><a href="https://www.techrepublic.com/article/struggling-to-move-workloads-to-the-cloud-vmwares-new-tech-may-be-the-perfect-on-ramp/">Struggling to move workloads to the cloud? VMware's new tech may be the perfect on-ramp</a></td>
</tr>
<tr>
  <td><img src="https://tr4.cbsistatic.com/hub/i/r/2019/01/11/a4895b2a-18cc-41f1-9884-37f68723f7b5/thumbnail/770x578/22bc068684dfa880e7a8c4996fb13466/kubernetes.jpg"></td>
  <td>VMware's new Project Pacific is a big step forward for VMware's Kubernetes offerings, but it's more important for what it does for CIOs.</td>
</tr>
</table>

VMWareが発表したProject Pacificとその戦略についての紹介。

## Introducing Kubernetes Academy Brought to You by VMware—A Free Cloud Native Education Platform - Cloud Native Apps Blog
<table>
<tr>
  <td colspan="2"><a href="https://blogs.vmware.com/cloudnative/2019/08/27/introducing-kubernetes-academy-free-cloud-native-education-platform/">Introducing Kubernetes Academy Brought to You by VMware—A Free Cloud Native Education Platform - Cloud Native Apps Blog</a></td>
</tr>
<tr>
  <td><img src="https://blogs.vmware.com/cloudnative/files/2019/08/Untitled-design-66.png"></td>
  <td>We’re excited to introduce Kubernetes Academy Brought to You by VMware—a free, product-agnostic Kubernetes and cloud native technology education platform. Kubernetes Academy provides an accessible learning path to advance your skill set, regardless of where you are on your Kubernetes journey.</td>
</tr>
</table>

VMWareが提供する **Kubernetes Academy**の紹介。
内容としては5ー8分程度の動画教材のようです。無料でできるようなので気になる人は見てみては？