Sam Stoelinga
Open source contributor and Cloud Architect. Creator of websu.io and bgdestroyer.com
You are at one of those places that requires you to use a proxy to access your company wide Docker registry. Sometimes HTTP proxies are used to supposedly improve security or to workaround IP based rate limits. Well good luck, you're in for a ride on how to do this …
Continue reading »
Update 2023-03-27: Added instructions for clusters using Workload Identity
This blog post described how to deploy your own K8s cluster autoscaler instead of the cluster autoscaler that's bundled with GKE. This can be helpful in the rare case that the bundled GKE cluster autoscaler doesn't work for you.
Note that …
Continue reading »
An example use case that I've seen is where you have a K8s service exposed on the ClusterIP and you want to make that service accessible over a domain name that you don't control.
You can do to the following steps to set this up:
This might become a full blog post but for now read the steps here: https://github.com/samos123/gke-gcs-fuse-unprivileged
Continue reading »
You might be in a situation where you need to troubleshoot the networking stack on a container where you don't have the tools necessary. Or you might need to figure out which veth belongs to a container. For both these scenarios you will need to be able to get into …
Continue reading »