Testing Namespace Isolation using NetworkPolicy
A tutorial on using Kubernetes NetworkPolicy to isolate namespaces, preventing cross-namespace traffic while allowing internet access.
William Denniss is a cloud engineer focused on Google Kubernetes Engine (GKE) and Autopilot Compute Class. He writes about cluster management, VM optimization, failure simulations, and containerized workloads in production environments.
55 articles from this blog
A tutorial on using Kubernetes NetworkPolicy to isolate namespaces, preventing cross-namespace traffic while allowing internet access.
Explains how to use Kubernetes NetworkPolicy to isolate network traffic between namespaces and control Pod communication.
A guide on modifying IP masquerading rules in Google Kubernetes Engine (GKE) Autopilot to enable connectivity to services like Cloud SQL.
A guide to planning and optimizing IP address ranges for Google Kubernetes Engine (GKE) clusters in a VPC-native setup.
Explains how to add supplemental Pod IP ranges to Google Kubernetes Engine (GKE) clusters, including a practical demonstration.
Guide on enabling NET_ADMIN to run custom service meshes like LinkerD on Google Kubernetes Engine (GKE) Autopilot clusters.
A guide mapping Google Kubernetes Engine (GKE) Autopilot compute classes to specific machine types and configurations, including CPU and GPU options.
A technical guide on setting up and using Multi-cluster Services (MCS) to connect internal services across different Google Kubernetes Engine (GKE) clusters.
Explains a technique for strict pod co-location in Kubernetes using DaemonSets and Deployments with affinity rules.
A guide to reducing log ingestion costs in Google Kubernetes Engine (GKE) by creating exclusion filters in Cloud Logging.
Explains how to achieve 3-zone high availability deployments on GKE Autopilot using PodSpreadTopology constraints.
Explains how to use high-performance SSD ephemeral storage volumes for data processing in Google Kubernetes Engine (GKE) Autopilot pods.
A tutorial on deploying a GPU-accelerated TensorFlow Jupyter Notebook on Google Kubernetes Engine (GKE) Autopilot.
A technical guide on migrating a service in Google Kubernetes Engine (GKE) between clusters while preserving the same external IP address.
Best practices for setting up and scaling large Google Kubernetes Engine (GKE) Autopilot clusters, covering networking, quotas, and pre-warming.
A guide to provisioning temporary spare capacity in GKE Autopilot clusters using low-priority placeholder Jobs for anticipated scaling events.
Autopilot adds Scale-Out Compute Class for CPU-intensive workloads on GKE, supporting both x86 and Arm architectures.
A guide to building multi-architecture Docker images for Arm and x86 using Google Cloud Build and buildx.
A quickstart guide for running Arm-based workloads on Google Kubernetes Engine (GKE) Autopilot, covering setup, deployment, and troubleshooting.
Explains how to minimize pod disruption during node upgrades, repairs, and scale-downs in GKE Autopilot using PDBs, graceful termination, and maintenance windows.