Field Notes
Experience from real life projects
-
Optimize CPU and Memory for Kubernetes Pod
ReadWhen optimizing workload performance, it is important to understand how on earth operating system allocates CPU and memory to processes. This helps understand how to…
-
EKS impression
ReadI’ve worked on a few AKS projects previously. Since I joined AWS I wanted to put aside some time to check out EKS (Elastic Kubernetes…
-
Istio Operation Gotchas
ReadIn this post I discuss a few aspects when putting istio in operation. Installation Istio installation can be confusing, due to architectural and guideline changes…
-
Service Proxy – from Nginx to Envoy
ReadUpdate (Nov 20, 2022): 1. Envoy’s configuration schema can be hard to get used to. It is lacking examples because the documentation is mostly generated.…
-
Istio External Authorization via OIDC
ReadIstio service mesh allows application developers to offload non-core features to infrastructure layer. We explored authentication and authorization with Istio in a basic lab. In…
-
Istio Authentication and Authorization
ReadApplications running on Kubernetes platform seeks to offload common non-business features to the platform. Istio helps Kubernetes bridge that gap. It can enforce mTLS communication,…