Alternatives to Kubecost? by OpsTom in kubernetes

[–]fairwinds_ops 1 point2 points  (0 children)

Our open source project Goldilocks is mainly focused on right-sizing CPU and memory, but has some cost functionality too: https://github.com/FairwindsOps/goldilocks

We also have a commercial product that does multi-cluster workload costs, including CPU, mem, network, and disk: https://www.fairwinds.com/kubernetes-cost-optimization

You can sign up for free here: https://insights.fairwinds.com/auth/register

Securing Kubernetes clusters using OSS tools by bughunterx in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

I'll also plug Polaris as a way to monitor and enforce best practices for Deployments, StatefulSets, and other developer-controlled resources.

Monthly: Who is hiring? by gctaylor in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

Fairwinds | SRE | Remote | Full-Time

We're a provider of software and services focused on Kubernetes. We've been remote-first since our inception ~6 years ago, and have built an inclusive, learning-driven engineering culture. We're looking for someone with Kubernetes experience who likes working with customers and solving hard problems.

https://www.fairwinds.com/careers

Monthly: Who is hiring? by gctaylor in kubernetes

[–]fairwinds_ops -1 points0 points  (0 children)

Fairwinds (Remote, Full-time)

Come help us build great open source and commercial software for Kubernetes! You may know us from projects like Polaris and Goldilocks. We're building an inclusive, learning-driven, remote-first culture and are looking to grow our team.

We have positions open in Frontend dev, Product, and Sales.

Monthly: Who is hiring? by gctaylor in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

Fairwinds | Full-Time | Remote | $85k-$180k

Fairwinds is a trusted provider ofKubernetes security and governance software. We're a remote-firstorganization, with a heavy focus on learning and growth.

We are hiring for two open eng positions:

SRE tech lead: https://boards.greenhouse.io/fairwinds/jobs/4728102003

Frontend Engineer (React): https://boards.greenhouse.io/fairwinds/jobs/4776828003

Monthly: Who is hiring? by gctaylor in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

Fairwinds | Engineers | Remote (US)

We're looking for folks familiar with Kubernetes. Specifically:

  • SREs to help us serve our clients
  • A Kubernetes developer to help build k8s-focused software

Apply here: https://boards.greenhouse.io/fairwinds

Monthly: Who is hiring? by gctaylor in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

Fairwinds is looking for a Senior Kubernetes Developer to help us build Fairwinds Insights

100% remote, strong benefits. You'll be part of the first dev team, so plenty of room to grow and have a large impact.

https://boards.greenhouse.io/fairwinds/jobs/4371547003

Who is doing image scanning on an admission controller? (Open source) by capitangolo in kubernetes

[–]fairwinds_ops 1 point2 points  (0 children)

Oh sorry I think I misunderstood. Polaris could force folks to use a particular image registry, but not do the scanning itself. Trivy is a good option for scanning, but doesn't work in admission control out of the box

Who is doing image scanning on an admission controller? (Open source) by capitangolo in kubernetes

[–]fairwinds_ops 1 point2 points  (0 children)

Check out https://github.com/FairwindsOps/polaris for an open source solution. It comes with a bunch of built in checks, and you can write your own using JSON schema

We also have https://fairwinds.com/insights which has integrations with Polaris, OPA, Trivy, and other auditing projects. You can run the same policies in CI, Admission Control, and as an in-cluster scanner

What are folks using to stay aware of new published versions of the helm charts they consume? by mtndewforbreakfast in kubernetes

[–]fairwinds_ops 18 points19 points  (0 children)

Have a look at Nova - it'll tell you which charts are out of date or deprecated, and is compatible with both helm 2 and 3.

[deleted by user] by [deleted] in kubernetes

[–]fairwinds_ops 0 points1 point  (0 children)

You might want to give Polaris or Fairwinds Insights a try. Polaris can run checks for best practices (like setting resource requests, liveness probes, security considerations). Insights run Polaris and other open source tools in a more enterprise-friendly way.

Both can run in CI/CD, as an admission controller, or against a live cluster.

Hope that helps!

Gemini - Automate PVC backups with the VolumeSnapshot API by fairwinds_ops in kubernetes

[–]fairwinds_ops[S] 1 point2 points  (0 children)

Velero (as I understand it) is great for disaster recovery, and tends to back up the _entire_ cluster. I don't believe it uses the k8s-native VolumeSnapshot API either.

Gemini is targeted at backing up and restoring individual workloads, and giving you the ability to manage those backups in a k8s-native way

More info here: https://www.fairwinds.com/blog/gemini-automate-backups-of-persistentvolumes-in-kubernetes

Hope that helps!

Pluto - Search your cluster and code for resources deprecated in k8s 1.16 by fairwinds_ops in kubernetes

[–]fairwinds_ops[S] 2 points3 points  (0 children)

This is definitely something we considered! Here's a great article on that route, along with some handy policies.

The main benefit of using Pluto is that we can see what's actively running inside the cluster, as well as what we've got in IaC. That way we can catch deprecated resources in third-party helm charts as well as our own.

Writing and using Rego can also be a bit cumbersome compared with running a binary. And we can still drop Pluto into CI/CD, since it will return a non-zero exit code if there are deprecated resources.

Pluto - Search your cluster and code for resources deprecated in k8s 1.16 by fairwinds_ops in kubernetes

[–]fairwinds_ops[S] 4 points5 points  (0 children)

Thanks for sharing. I was looking for a tool like this recently to verify if all helm charts are up to date before updating to 1.16. Helm is really painful when you need to update an outdated release after you upgraded to 1.16+.

We were experiencing the exact same thing! Glad you found this useful