Kudos to Datree, they now give the chance to use their tool on one #Kubernetes cluster ***FOR FREE!***

Also side note: if you have a deployment running with its own database (PostgreSQL, MariaDB, etc.), then the latest tag is always a bad idea. If the container's database schema changes, or if the database version is updated and doesn't support the older schema anymore (or the container depending on it has no real database migration strategy), then you're basically screwed.

@ChristianLempa one thing to know about the resources configuration limit is that this is used in the horizontal scaling mechanisms. If you do something like allocate a max of 1gb of ram as a resource limit we can create a HorizontalPodAutoscaler to control the deployments replica count based on how much of that 1gb of ram has been allocated. This is perfect for things like your ingress controllers and stateless web apps where if you see a spike in traffic your deployment replica counts tick up and new containers will help balance the load.

Security for the win!

You should have said that this is a sponsorship. I was listening only and had no idea I was listening to an ad. I think it is required by KZfaq rules

For setting the options in objects deployed by helm chart, you could create a kyverno mutate ClusterPolicy, that makes sure everything is set as you want. And btw. having nginx run in a non-root RO container is also achievable

Waited for this

@cristianlempa Thanks for great videos, did you still using k3s? is it more lightweght than microk8s for home and oracle free cloud maybe?

Hi, I think datree is not active any more. What alternative do you recommend for it ?

Sadly, datree has been abandoned/deprecated. Care to check on alternatives?

I did not know this was a sponsored video

Can we do everything you did in this video using the community version? Or are these apart of the paid versions of DaTree? Great Video!

Cool video. Whats is the plugin name of the Visual Studio Code that you are using? I like the autocompletion

Anyone knows the name of background music in introduction?

I never figured out how to disable the replica check without the dashboard (e.g. using yaml or config). Do you know how by any chance?

you should use SUSE neuvector

Is there a software like this, for docker?

Wait isn't being very lazy a trait of working in IT. After all not being lazy all these automation tools would be needed. 🙃😉