The hottest Substack posts of Why This Kubernetes Thing? 🤔 (WhyK8s)

And their main takeaways
176 implied HN points 01 Dec 22
  1. In an imaginary world without Pods, it would be purposeful to create containers directly instead.
  2. Commonly misunderstood is that Pods do not define resource requirements, it is done on the container level.
  3. The main function of Pods is to schedule multiple containers together as one unit.
137 implied HN points 08 Dec 22
  1. Kubernetes networking allows all pods to communicate by default.
  2. Kubernetes was designed for running trusted code initially.
  3. NetworkPolicies in Kubernetes restrict pod communication based on rules.
39 implied HN points 13 Feb 23
  1. Traditional root user is too powerful and can lead to security vulnerabilities.
  2. Linux capabilities break down root's powers into categories for better security control.
  3. Even though containers run as root by default, capabilities can be added or removed to enhance security on Kubernetes.