Lightning Talk: Oh Sh*t! The Config Changed!
summary
Kubernetes configmaps and secrets often update in place so pods don’t restart, causing the majority of Pusher’s 2018 production incidents and recurring outages that happen three to six times in a year. The fix is Wave (github.com/pusher/wave): it watches Deployments/StatefulSets/DaemonSets, computes a hash of configmaps and secrets and injects that hash-on-pod into the podSpec so the Deployment controller rolls new pods. The tool is open source and it stops those config-induced outages.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:21THE BRIDGE DEPLOYMENT
- 2:43WHAT HAPPENED?
- 3:40INTRODUCING WAVE
- 4:36LIGHTER TIMES (SEE 2019)
related talks
36mKubernetes Confessions: Real Mistakes We’ve All Made (and What They Teach Us)
06mLightning Talk: OpenKruise: Advancing Kubernetes Workload Auto...
07mLightning Talk: Developer's Toolbox for Testing in Production
09mLightning Talk: Securing K8s Pods from Within: A Runtime Approach
11mLighting Talk - Deploying, Managing and Securing Applications on Kubernetes Without Knowing Kubernetes
33mKubernetes Security: Horror Stories to Help Secure Your Cluster
05mLightning Talk: 7 Tips for Tricks to Enjoy Your Kubernetes Journey
35mAutomate Secret Rotation in Kubernetes, Then Get Out of the Way!