~/talk

Designing and Deploying Scalable and Secure Applications on Kubernetes

Talkat Øredev 2022 · 2022-11-08..11-10· [kubernetes, security]
links:none on file
slides:none on file

Practical checklist: use Deployment vs StatefulSet correctly (misused for SQL Server in examples), separate stateful from stateless, require at least two replicas, set resource requests/limits so the Horizontal Pod Autoscaler and Cluster Autoscaler behave, add readiness/liveness/startup probes and honor SIGTERM with ~30s prestop work, use Secrets and sealed Secrets by bitnami for Git workflows, emit Prometheus metrics and OpenTelemetry traces, apply PodDisruptionBudgets, network policies and pod affinity; the presenter counts 16 principles and reports an old predictive autoscaler built ~10–11 years ago that nobody adopted.

AI-written summary · about

  1. 0:00Start
  2. 10:11Separate secret from non-secret configuration
  3. 14:18Enable automatic scaling to ensure capacity management
  4. 19:49Use probes for automatic failure detection and recovery
  5. 30:34Prepare your application for observability
  6. 33:26Set Pod resource requests and limits appropriately
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.