kube-no-trouble
polaris
kube-no-trouble | polaris | |
---|---|---|
21 | 11 | |
3,183 | 3,184 | |
1.8% | 0.4% | |
7.0 | 7.0 | |
7 days ago | 3 days ago | |
Go | Go | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
kube-no-trouble
-
Mitigating disruption during Amazon EKS cluster upgrade with blue/green deployment
There are several tools that help us find out the API deprecations in our clusters. One of them is “kube-no-trouble” aka kubent. At the time I write this document, the latest ruleset is for 1.29 in kubent. I run kubent with target version of 1.29 and got the below result. As you can see, kubent shows the deprecated APIs.
-
Upgrading Hundreds of Kubernetes Clusters
We also leverage tools like Kubent, popeye, kdave, and Pluto to help us manage API deprecations (when Kubernetes deprecates features in updates) and ensure the overall health of our infrastructure.
- Best Practices for Upgrading Kubernetes?
-
Updating from 1.25.15 to 1.26.10
kubent has been my goto for this - you point it at your cluster, tell it the target version you want to use, and it'll let you know if you have any depreciated resources and what you'll need to change. It's simple to use, quick, and just does the job.
-
How do you handle continuous k8s cluster version upgrades in your organization?
You have to constantly run tools like https://github.com/doitintl/kube-no-trouble / https://github.com/FairwindsOps/pluto.
-
Upgrading our EKS from 1.21 to 1.22
A great tool for checking depreciations is kubent/kube-no-trouble: https://github.com/doitintl/kube-no-trouble
-
strategy to upgrade eks cluster
https://github.com/doitintl/kube-no-trouble can be used to check for deprecated/removed APIs - you'll need to fix these in your codebase. You should fix these before upgrading your cluster
- choose from Two strategies we can implement to upgrade eks cluster
- Amazon EKS now support Kubernetes version 1.25
-
eks cluster upgrade Anyone has done eks cluster upgrade to upgrade the cluster from 1.21 to 1.22 there are some api resources kind need to changed, which need changes in manifest file changes. how do we identify the helm charts that are using these resources ? https://docs.aws.amazon.com/eks/lat
Just upgraded a few clusters from 1.21 to 1.24 the past few weeks. Used kubent (Kube No Trouble https://github.com/doitintl/kube-no-trouble) before upgrading and reviewed the output. Pretty painless process all in all.
polaris
- Is OPA Gatekeeper the best solution for writing policies for k8s clusters?
-
Securing Kubernetes clusters using OSS tools
I'll also plug Polaris as a way to monitor and enforce best practices for Deployments, StatefulSets, and other developer-controlled resources.
-
All about Komodor :- A Kubernetes Troubleshooting Platform and more
It's open source repository is https://github.com/FairwindsOps/polaris
-
Monthly: Who is hiring?
Come help us build great open source and commercial software for Kubernetes! You may know us from projects like Polaris and Goldilocks. We're building an inclusive, learning-driven, remote-first culture and are looking to grow our team.
-
Top 6 Kubernetes Security Tools
Here's a link to Polaris on Github
-
NSA Kubernetes Hardening Guidance [pdf]
so... a lot of this can be done with Fairwind's OSS tool Polaris... https://github.com/FairwindsOps/polaris
feels good that we've been addressing this for a bit already tbh.
- Show HN: Polaris 4.0 – Policy for Kubernetes Resources
-
Looking for k8s security tools that run outside of the cluster
Polaris has various tools that run inside and outside your cluster: https://github.com/FairwindsOps/polaris
-
An automatic diagnostic tool for Kubernetes cluster
KubeEye is an open-source diagnostic tool for identifying various Kubernetes cluster issues automatically, such as misconfigurations, unhealthy components and node failures. It empowers cluster operators to manage and troubleshoot clusters in a timely and graceful manner. Developed in Go on the basis of Polaris and Node Problem Detector, KubeEye is equipped with a series of built-in rules for exception detection. Besides pre-defined rules, KubeEye also supports customized rules.
-
Top 20 useful k8s tools
Link : https://github.com/FairwindsOps/polaris
What are some alternatives?
kubepug - Kubernetes PreUpGrade (Checker)
kube-score - Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
pluto - A cli tool to help discover deprecated apiVersions in Kubernetes
datree - Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
silver-surfer - Kubernetes objects api-version compatibility checker and provides migration path for K8s objects and prepare it for cluster upgrades
gatekeeper - 🐊 Gatekeeper - Policy Controller for Kubernetes
gardener - Homogeneous Kubernetes clusters at scale on any infrastructure using hosted control planes.
popeye - 👀 A Kubernetes cluster resource sanitizer
Gravitational Teleport - The easiest, and most secure way to access and protect all of your infrastructure.
awesome-kubernetes-security - A curated list of awesome Kubernetes security resources
polaris - Shopify’s design system to help us work together to build a great experience for all of our merchants.
kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark