https://github.com/chrisns/k8s-exercise

k8s interview exercise
https://github.com/chrisns/k8s-exercise

docker kubernetes

Last synced: about 1 month ago
JSON representation

k8s interview exercise

• Host: GitHub
• URL: https://github.com/chrisns/k8s-exercise
• Owner: chrisns
• License: mit
• Created: 2019-11-18T09:59:42.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2023-07-04T15:34:57.000Z (over 1 year ago)
• Last Synced: 2024-10-03T06:09:35.020Z (about 2 months ago)
• Topics: docker, kubernetes
• Language: JavaScript
• Homepage:
• Size: 40 KB
• Stars: 4
• Watchers: 3
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Security: SECURITY.md

Awesome Lists containing this project

README

        
# Interview

## Exercise

- 🐳 dockerify the [app](./app)

- ☸ write a deployment and deploy to minikube

- 🍪 provide inbound access to the app

## Considerations / discussion points:

- The app is pretty flakey, so a:

  - small image will be important to improve startup time on rescheduling

  - aggressive checks will be needed to minimize bounced requests

  - multiple replicas will be needed to minimize dropped requests

- Network policy deny-all policy

- internal+external TLS, auth - how sidecar pattern might help with this

- How to run the app as non-privileged user

- Readonly FS

- How to inject secrets via env vars / files, which is better

- memory + cpu allocation right sizing

- autoscaling

## use minikube with ingress

```bash

minikube start --memory=4096 --addons=ingress

```

## maybe if one can find a way to make ingress work with network policies and a cni:

```bash

minikube start --network-plugin=cni --memory=4096 --addons=ingress

kubectl create -f https://raw.githubusercontent.com/cilium/cilium/v1.6/install/kubernetes/quick-install.yaml

```