Learn DevOps, Kubernetes & AWS — Simplified
By KP | TZoneLabs | DevOps & Cloud Engineering The fastest way to grant a pod too much power in Kubernetes is kubectl create clusterrolebinding temp –clusterrole=cluster-admin –serviceaccount=default:default. It works immediately, which is exactly the problem. Nobody circles back to fix it, and six months later a compromised pod can read every secret in the … Read more
By KP | TZoneLabs | DevOps & Cloud Engineering A PodDisruptionBudget doesn’t protect your application — it protects a number. That’s why a routine EKS managed node group upgrade recently stalled on us for 40 minutes and paged on-call at 2am, even though our minAvailable: 2 config was textbook. The PDB was doing exactly what … Read more
By KP | TZoneLabs | DevOps & Cloud Engineering Most engineers size EKS nodes by CPU and memory. We did too — until one day a pod sat in Pending, the node had plenty of compute free, and the events said something about failing to assign an IP. That was our introduction to the quietest … Read more
By KP | TZoneLabs | DevOps & Cloud Engineering Here is something nobody tells you when you start in DevOps: the error message is almost never the problem. It is just the messenger. A pod crashes — you blame the application. An API times out — you blame the network. A deployment fails — you … Read more
By KP | TZoneLabs | DevOps & Cloud Engineering We were in the middle of a production scaling event when everything went quiet — in the worst way possible. No crash. No alert. No obvious Kubernetes error. Just pods stuck in Pending, GitHub Actions deployment jobs timing out, and the entire team staring at dashboards … Read more
Organizations managing sensitive applications must ensure secure communication to maintain data privacy, even within internal services. Achieving end-to-end encryption on Amazon EKS in a Kubernetes environment comes with its own set of challenges:
Ever feel the pain of constantly copying and pasting short-lived AWS credentials? It’s time-consuming, error-prone, and frankly, annoying. But fear not, there’s a better way! This guide will show you how to set up AWS Single Sign-On (SSO), a magical tool that lets you access your AWS accounts with just a single login, saving you … Read more
What is Serverless? To understand what AWS Lambda is, let’s first learn about serverless architecture. Serverless architecture is a way to build and use apps and services without worrying about handling infrastructure. Even though your app still runs on servers, you don’t have to deal with setting up the server’s operating system, fixing issues, or … Read more
AWS provides a tool called AWS Systems Manager. Inside Systems Manager, there’s a feature called the Run command. This Run command helps us control things on our computers in the cloud. So, we’ll see how we can use AWS Systems Manager to tell our cloud computer to set up something called Nginx, which is like … Read more
As organizations grow, handling their cloud infrastructure becomes more complex and there’s a bigger need to keep things safe and organized. Using multiple AWS accounts is like having separate boxes for different things. For example: Production Account: This box holds important stuff and makes sure only authorized people can access it. Testing Account: Here, developers … Read more