How I joined Spotify as an Engineer From China — 2020 is a magical year. With Covid-19 raging around the world, people’s work and lifestyle have changed a lot. But the opportunities still exist, and my career ushered in a tremendous change. I moved from southern China to Sweden🇸🇪 and became a software engineer at Spotify. I have always wanted…

Build your container’s defense easier — A big part of security involves cluster management, within which container security is vital in building the cloud's defensive line. Containers should be built keeping in mind best design practices, such as being independent of multiple packages and deleting extra libraries and functions to keep the codebase minimal. …

Parsing Kubernetes YAML with yq — yq is a tool that mainly focuses on YAML data processing and highlighting. Its current 4.x version has made a huge upgrade based on 3.x, enabling us to query and operate YAML more efficiently. Though the argument that jq can play the similar role as yq has never ceased, I…

Build a cobra code generator to generate a kubectl plugin based on client-go in one step — In coding, we always try to adopt some code generators to avoid duplicating efforts and improve productiveness. Of course, there’s no exception in Go community, where various tools are developed and shared, such as the command-line tools provided by kubebuilder mentioned previously. As platform developers, we have provided our users…

What to choose for operator logging? — Let’s bring up our topic with an operator INFO log. Different from the most common print method fmt.Printf, it doesn’t print the concrete parameter information in the message but in the log separately, like a JSON string. {"severity":"INFO","eventTime":"2022-07-09T09:04:55.260Z","logger":"controller.opresource","message":"Deleting OpResource, because it is no longer in scope!","reconciler group":"op.spotify.com","reconciler …

Build a small and secure Go docker image — To finish deploying code in the cloud environment, the last step is to configure and deploy the pod’s container image. The destination is around the corner, but still, one issue remained to consider: Not every image is suitable for deployment but needs to meet two standards. Small enough. The image…

use, pitfalls, best practices, and interactions with generics — Years of coding in Go starts to convince me that Go is more of an FP (Functional Program) language than an OOP language, as which I used to regard it at the very beginning. Looking at the path behind me, I find plenty to share on Go interface. It was…

Walk through incident remediation using APF — Kubernetes has greatly lightened our burdens in handling the services of thousands of nodes with its features, one of which is that it can automatically recover the resources from failure to eventual consistency, that is, in some scenarios where some Pods or other resources are temporarily unavailable, Kubernetes supports them…

Play some magic with client-go DiscoveryClient — In the first episode of Kubernetes GraphQL Query in Go, we built the server code using GraphQL to query Pods in a cluster. However, such queries are poor in flexibility and scalability since the definitions of the related graphql.Feilds are all hard-coded, which needs refactoring. So here comes the episode…