
Ep02 - Ask Me Anything about DevOps, Cloud, Kubernetes, Platform Engineering,... w/Scott Rosenberg
Source: YouTube · DevOps & AI Toolkit · published Dec 13, 2024 · 1:04:10
The main goal of the video is to provide practical, real-world guidance on Kubernetes best practices, particularly for enterprise environments, with a focus on architecture, tooling, and operational decisions. Scott emphasizes simplicity, standardization, and avoiding overcomplication when deploying Kubernetes.
Key Takeaways:
• Organize Kubernetes manifests per application in separate repositories, keeping source code and manifests separate to avoid cascading failures 2:05.
• Prefer pure YAML manifests in environment-specific repositories rather than Helm templates, to avoid complex templating and mental overhead 4:00.
• Avoid running monolithic or large applications in Kubernetes if they require direct hardware access or frequent manual updates—these are better suited to traditional deployment models 5:35.
• Use industry-standard tools (e.g., Prometheus, CNI from cloud providers) and avoid overloading clusters with tools—standardization improves observability and reduces troubleshooting complexity 25:50.
• For on-premises deployments, use vendor defaults (e.g., containerd in AWS, EKS) and avoid specialized runtimes like Kata or gVisor unless absolutely required due to overhead 46:06.
• Avoid using ECS on AWS; it has become overly complex and is less valuable than Kubernetes, which is now dominant in AWS and offers better ecosystem support 35:22.
Kubernetes is best used when it adds value—such as enabling dynamic scaling and robustness—but should not be over-applied to applications that don’t benefit from its features.
Sources:
- 2:05 Discussion on mani
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
okay we are live with the guest there is Scott okay uh the main reason why I invited the guest Scott here apart first of all he knows more about many things than I do second because there were some questions about uh on Prem kubernetes that we are going to go through and I know nothing about on Prem I'm A Cloud uh uh spoiled breath or something like that anyways scottt is here uh and we're going to go through questions both those that you're posting live so just start typing and those that you posted in some other threads comments in before this started so we're going we're going to mix and match right now uh Scott just you yell when when you when you know the answer and don't wait for me to say Scott what do you think or something like that okay so let's let's go through the first uh the …