K8s in Wonderland: Why? Many of Unknown Code in My Workload?

on YouTube ↗32m

" summary

Explains concrete Kubernetes defaults and why they exist, using kubectl explain and small scripts that actually pull images and measure behavior against Docker Hub rate limits and a Quay fallback. Demonstrates imagePullPolicy: Always/IfNotPresent/Never with tagged versus tagless images (tagged images don’t re-pull; tagless compare digests and re-download), shows timings for rolling updates with maxSurge 10/25/80% (25% is usually the best tradeoff in three-node clusters), and proves sessionAffinity: None vs ClientIP yields sticky routing; topologySpreadConstraint used; demos work end-to-end.

AI-written summary · about

" chapters (10)

1. 0:00Kubernetes unknown code
2. 3:32Image pull policy options
3. 10:00Image pull policy in dev
4. 13:34Demo: image pull policies
5. 18:05Max surge values explained
6. 21:43Choosing max surge values
7. 22:46Demo: max surge testing
8. 25:40Service config unknown code
9. 29:45Kubernetes best practices
10. 31:07Q&A

" related talks

• 59mKubernetes - going beyond the basicsShahid Iqbal · NDC Minnesota 2019
• 50mKubernetes - going beyond the basicsShahid Iqbal · NDC London 2019
• 01h 01mKubernetes – going beyond the basicsShahid Iqbal · NDC Sydney 2019
• 52mKubernetes - going beyond the basicsShahid Iqbal · NDC Porto 2019
• 19mTalk Deep DiveChris Kühl, Joe Thompson · Cloud Native Rejekts NA 2021
• 24mK8s Pod Scheduling - Deep DiveTsahi Duek · Cloud Native & OSS Day Tel Aviv 2019
• 48mThe Path Less Traveled: Abusing Kubernetes DefaultsDuffie Cooley, Ian Coldwater · Black Hat USA 2019
• 28mContaining Chaos with KubernetesTerrence Ryan · phpDay 2017