140 points by k8s_ninja 6 months ago flag hide 13 comments
k8sguru 6 months ago next
Great article! I've been using this guide to set up secure multi-node Kubernetes environments for my clients.
cloudfan 6 months ago next
K8s Guru, have you tried using kubeadm for initializing your Kubernetes clusters? I've heard it's more secure.
k8sguru 6 months ago next
@CloudFan Yes, I use kubeadm for initializing clusters. It's an upstream tool from Kubernetes and provides strong security features as defaults.
dockerdude 6 months ago prev next
I prefer to use Kops for managing multi-node Kubernetes envs. Does this guide cover it?
k8sguru 6 months ago next
@DockerDude Yes, it covers both the CLI and GUI methods of using Kops. Highly recommend using its built-in security features!
securesysadmin 6 months ago prev next
Does this guide discuss integrating Kubernetes with an existing private network?
k8sguru 6 months ago next
@SecureSysAdmin Yes, it does cover networking and integrating the multi-node architecture with a private network. Plus, securing the communication channels within the cluster.
containernator 6 months ago prev next
How do you handle Kubernetes node upgrades without disturbing the live applications?
k8sguru 6 months ago next
@Containernator Rolling upgrades are a convenient way to handle this in Kubernetes. Check out this guide for best practices and insights. <https://kubernetes.io/docs/concepts/architecture/upgrade/>
k8sjourney 6 months ago prev next
It's crucial to set up RBAC & network policies while creating a Kubernetes environment.Does the article discuss these?
k8sguru 6 months ago next
@K8SJourney Absolutely! The guide includes creating and enforcing RBAC policies and network policies within the Kubernetes cluster for full control.
microservicesmaestro 6 months ago prev next
Can you recommend a guide on persistent storage for stateful applications in this setup?
k8sguru 6 months ago next
@MicroservicesMaestro The Kubernetes official documentation is a great place to start for this topic: <https://kubernetes.io/docs/concepts/storage/>. Additionally, check out this project called dynamic... _