How to enforce TLS 1.2 or above to your GKE Load balancers

In this Blog, We are going to enforce the Google Kubernetes Engine(GKE) Load balancers to use TLS1.2 or above. As we know TLS 1.0 and TLS 1.1 are deprecated, We are going to create sslpolicy to use TLS1.2 and above.
    SSL Policy is created on the GCP project level and will be referenced inside GKE under FrontendConfig CRD. Here we are going to create SSL Policy, FrontendConfig, Ingress and how to test using curl

Continue reading

Configure HTTP Liveness and Readiness Probe in Kubernetes Deployment

Liveness and Readiness probes are required in Kubernetes deployment to prevent deadlock of your application deployed and zero missing request while pod is initializing. When probe is configured in kubernetes deployment, each pod will go through probe conditions.

Liveness and readiness probes will be applicable to new pod which is created by horizontal pod autoscaling (hpa)

We are going to learn how to configure probes in kubernetes deployment:

Liveness probe: It will take care of the container when it is in deadlock or application not running by restarting container
Readiness probe: It will take care of the pod when to join the service to serve traffic Continue reading

How to make Application highly available in Kubernetes

 

High availability (HA) is the ability to make our application continuously operational without any failures. By configuring Pod Anti-affinity and Pod disruption budget together will make stateful or stateless application pods to highly available during any of the below scenarios:

  1. Any one/many nodes is unavailable or under maintenance
  2. Cluster administrator deletes Kubernetes nodes by mistake
  3. Cluster administrator/User deletes your application pods by mistake

In this blog, We are going to configure both pod anti-affinity and Pod disruption budget for the kubernetes deployment Continue reading