Kubelet on Support Tools

Kubernetes v1.33: Critical Security Fix for Private Image Pull Vulnerability

Thu, 19 Jun 2025 09:00:00 -0500

Kubernetes v1.33 delivers a vital security enhancement that resolves a decade-old vulnerability in how private container images are accessed. This fix—addressing issue #18787—closes a security loophole that could allow unauthorized workloads to access cached private images without proper authentication.

RKE2 the Hard Way: Part 3 – Setting up containerd and kubelet

Tue, 01 Apr 2025 00:00:00 +0000

Part 3 – Setting up containerd and kubelet

In this part of the “RKE2 the Hard Way” training series, we will install and configure containerd (the container runtime) and kubelet (the Kubernetes node agent) on all our nodes. These components form the foundation of our Kubernetes cluster.

One of the key design decisions in RKE2 is to run the Kubernetes control plane components (etcd, kube-apiserver, kube-controller-manager, and kube-scheduler) as static pods managed by kubelet, rather than as systemd services. This approach simplifies deployment and maintenance, as kubelet manages the lifecycle of these critical components.

RKE2 the Hard Way: Part 7 – Setting up kubelet and kube-proxy on Worker Nodes

Tue, 01 Apr 2025 00:00:00 +0000

Part 7 – Setting up kubelet and kube-proxy on Worker Nodes

In this part of the “RKE2 the Hard Way” training series, we will configure kubelet to register with the Kubernetes API server and set up kube-proxy on our nodes. We already installed containerd and kubelet in Part 3, but now we need to finalize their configuration to connect to our Kubernetes control plane.

kubelet is the primary node agent that runs on each node. It ensures containers are running in a Pod and healthy.
kube-proxy maintains network rules on nodes. These network rules allow network communication to your Pods from inside or outside of your cluster.

✅ Note: In our setup, all nodes (node01, node02, node03) are both control plane and worker nodes. This is common for smaller clusters and provides high availability without needing separate worker nodes.

Deep Dive: Kubernetes Kubelet

Wed, 01 Jan 2025 00:00:00 -0500

The Kubelet is the primary node agent in Kubernetes, responsible for managing containers and maintaining node state. This deep dive explores its architecture, container lifecycle management, and internal operations.

Configure Kubelet Out of Resource Handling, or How to Stop EKS Kubernetes Nodes from Going Down

Sun, 15 Sep 2024 19:26:00 -0500

Managing resources effectively in Kubernetes is essential to avoid node crashes and resource starvation issues, especially in cloud environments like AWS EKS. Kubelet provides out-of-resource management capabilities that allow you to define eviction thresholds and reserve resources for system daemons, ensuring your EKS worker nodes remain operational.

In this post, we’ll explore how to configure Kubelet’s out-of-resource handling for EKS worker nodes using Amazon’s EKS-optimized AMI and Terraform.