Introduction In the previous post, Config Controller and Config Connector were used to create a GKE Fleet and bootstrap the clusters with Anthos Config Management and Anthos Service Mesh. This deployment demonstrated how to declaratively provision a Fleet of clusters completely using a GitOps approach, and centralising configuration and operations into a single source-of-truth. In this post, the GKE clusters in the Fleet will continue provisioning using the enabled Anthos Configuration Management to reconcile their cluster configuration, security Constraints as well as addon components and app ..read more

Introduction As organisations continue to mature their cloud operating models, many of the principles and practices that have helped with the application delivery lifecycle have been adopted for infrastructure and platform solutions. Reconciling the observed state against the desired state from some source of truth is a staple of modern continuous deployment, however, this is often focused on workloads and configuration within a Kubernetes context. With infrastructure as code commonly represented in a DSL and applied by separate workflows, the mechanisms to orchestrate infrastructure, platform ..read more

Jetstack is delighted to announce a strategic partnership with DoiT International, a leading global provider of cloud technology and consulting services. This collaboration aims to deliver exceptional cloud-native consulting services to support DoiT’s growing customer base and maximise the benefits of their Kubernetes projects. Founded in 2011, DoiT International works with fast growing, digitally savvy companies to help them realise the potential of public cloud technology. Committed to solving both essential and advanced cloud challenges, DoiT provides intelligent technology that simplifies ..read more

And it’s over, another rendition of KubeCon has come and gone. This year’s KubeCon EU was in Amsterdam. Lovely city, if you get a chance to visit you should definitely take it. Thanks to all the talkers, sponsors and attendees for making our visit such a joyful one. It’s always interesting to meet and talk to the users of cert-manager and all the projects that we often advise our customers on within our professional services ..read more

At Jetstack Consult, we have seen a variety of setups for building, running, and storing containers. These are some things we recommend as best practices for creating and maintaining your container images. Key takeaways: Paint with small brushes: Keep your images minimal There is a backstage: Use multi-stage images Don’t be a copycat: Copy carefully The layers of a cake: Working with container layers Rooting for safety: Avoiding running things as root Contain your excitement: Store your containers in OCI registries Base-ing for success: Keep your base images up-to-date Top secret: Don’t store ..read more

Everybody working in cloud native is excited about visiting Amsterdam for KubeCon Europe 2023. As usual, Jetstack will be there. Don’t forget to follow us on LinkedIn and Twitter to get our latest updates. You should come listen to our talks: Tuesday Talking to Kubernetes with Rust 18:10 | Auditorium + Balcony, ground + first floor, Congress Centre James Laverack will be doing a lightning talk on using Rust to interface with Kubernetes ..read more

You’re woken in the night by your work phone buzzing on your nightstand, the full-brightness screen bathing your bedroom ceiling in cold light as the gaudy default ringtone drags you to your feet. Your partner rolls over and quickly goes back to sleep mumbling something that sounds like “you better get paid for this”. The cat looks at you as if this was somehow your fault. Maybe it is. You look at your clock, the dim red seven-segment display reading 3:04 in the morning ..read more

In this article, I give an in-depth overview of service meshes. Clarifying the great benefits it offers as well as the extra complexity. What is a service mesh? It’s a simple question, yet it is embarrassingly hard to give a simple answer. This is because service meshes are a complex evolution of about a dozen networking, security and operational challenges that are encountered when deploying microservices at the “web scale” of Netflix, Lyft, Twitter or Google ..read more

Virtual. Free. 100% Open Source Yes, it’s that time of the year again. KubeCon EU is just around the corner, so KubeCrash, the Amsterdam warm-up event, is here too! Join us on March 29 and 30 for a virtual, free, and 100% open source-focused conference. Over the two days we will focus on two themes: Zero Trust and Innovation. The event includes fantastic speakers from Xbox, Boeing, and Autodesk, CNCF project maintainers, plus support from other popular open source projects ..read more

You’ve probably heard of cert-manager - the easiest way to securely issue and renew TLS certificates in Kubernetes. cert-manager started its life at Jetstack, and we’re proud of how far it’s come; in just the past few months, we’ve achieved the incredible milestones of becoming a CNCF Incubating project while also reaching 10,000 GitHub Stars! Retrieving signed certificates is cert-manager’s job, and an important problem to solve - but it’s not the only problem when it comes to TLS ..read more