Guide Overview#
The following guides are available to help you get going, based on common patterns and use cases we have seen over time. If you have ideas for more, feel free to let us know!
- Development Workflow Tips - tips for development environment workflows
- Troubleshooting - learn to troubleshoot some common issues
Automation#
- Default Gitlab Pipeline - learn about the default CI/CD pipeline we provide for basic Kubernetes manifest validation and when to use it
- Emails using the Virginia Tech Google SMTP Relay - requirements and instructions for the Virginia Tech Google SMTP Relay
Registries#
- Pulling Images from a Private Registry - learn how to create the necessary credentials to pull images from a private registry (minus ECR, which approaches credentialing in a different mannger)
- Pulling Images from ECR - learn how to populate the necessary credentials needed to pull images from ECR and ensure those secrets are always up-to-date
- Publishing and Deploying Helm Charts using Gitlab - learn how to publish and deploy Helm charts using Gilab pipelines and package registries
Resource Management#
- Adding Storage to Apps - learn how to add both ephemeral and persistent storage to your applications using volumes
- Choosing AWS Node Types - learn how to select and specify appropriate AWS node types for your workloads
- Intertenant App Communication - learn how to allow apps to talk between tenant namespaces
- Logging - learn to adjust the logging of your components for better observability
- Right-Sizing Pods - learn how to adjust resource limits for your workloads
- Triggering Reloads using Stakater - learn how to reload apps when config maps and secrets are updated.
- Vertical Pod Autoscaling - learn how to use Vertical Pod Autoscaler to automatically adjust workload resource limits based on usage
Security#
- Authentication - learn how to configure and utilize OAuth2 proxy
- Assuming an AWS IAM Role - learn how to run your applications using an IAM role configured in your own AWS account, letting you access additional cloud resources
- Creating Sealed Secrets - learn how to create sealed secrets
- Running as Non-root - learn how to run an non-root for security best practices
- Security Management using Trivy - learn how to leverage the built-in Trivy Operator to improve your security posture
- Sync Secrets from Vault - learn how to use secrets stored in Vault