SBN

Kubernetes in 10 Seconds

Sonatype’s DJ Schleen (@djschleen) demonstrates Kubernetes in 10 seconds:

He creates a full Kubernetes cluster, installed locally, ready to deploy workloads on in less than 10 seconds.

K3s is a really exciting product,” says DJ, “It’s minimal, it’s small, it installs quick, it can run on a Raspberry PI.” He adds: “I wanted to share how quickly a Developer can bring up a local development environment where they can experiment, learn, or deploy code for local testing.”

“I’m building a workshop which will walk attendees through the process of creating an end-to-end, lightweight DevSecOps pipeline. The environment can be spun up with code in a few minutes. We’ll be able to follow an application through the full pipeline lifecycle.”

K3s is a Certified Kubernetes Distribution designed to run on resource-constrained devices (such as a Raspberry Pi). It’s a great platform for local development and for playing with Kubernetes. The distribution removes all alpha features, plugins, legacy code, and more to produce a 40mb binary that can run with only 512mb of memory and 200mb of disk space. It is ideal for anything from a small device to a desktop.

However, DJ cautions: the K3s install uses root access to install and run the cluster. This poses a security risk. It’s highly recommended to not pipe downloaded shell scripts to sh or bash — especially when running as root. (“Download, review, then use,” says DJ.)

There are other alternatives when installing so it’s recommended to read the instructions. Please review the warnings in the Gibhub Gist before attempting to run this in your own environment. The target machine for the installer should not be publicly accessible from the Internet.

Feel free to send feedback to DJ via DM on Twitter (@djschleen). 

.

Recent Articles (Read more...)

*** This is a Security Bloggers Network syndicated blog from Sonatype Blog authored by Katie McCaskey. Read the original post at: https://blog.sonatype.com/kubernetes-in-10-seconds

Secure Guardrails