DevOps&SRE Library
19.9K subscribers
425 photos
1 video
2 files
5.59K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
kividb

KiviDB is a fast, multi-threaded alternative to Redis® and Valkey, written in Rust. It speaks the Redis protocol (RESP2 and RESP3), so existing Redis clients, redis-cli and libraries work unchanged, and it has full-text and vector search built in. It runs every core on a sharded in-memory key-value design, and persists to snapshots and an optional append-only file.


https://github.com/kividbio/kividb
Kubernetes сам не запускает контейнеры.

Между кластером и контейнером работает отдельный слой — контейнерный runtime. От его выбора зависят особенности инфраструктуры, производительность и безопасность.

На открытом уроке разберём, как Kubernetes взаимодействует с runtime через CRI, сравним containerd, CRI-O и Kata Containers и обсудим сценарии их применения.

10 ноября в 20:00 МСК. Урок проходит в преддверии старта курса «Инфраструктурная платформа на основе Kubernetes». Все участники получат скидку на обучение. Принять участие: https://vk.cc/d3jhjz

Реклама. ООО «Отус онлайн-образование», ОГРН 1177746618576, www.otus.ru, erid: 2VtzqufzAg5
SPACE

SPACE (Sandboxed Platform for Agentic Code Execution) is a sandbox platform for running code in isolated Firecracker microVMs. Applications use its HTTP API to create Linux environments, execute commands, collect output, and manage sandbox lifecycles.

Use SPACE when your application needs a separate execution environment for an agent, a user workspace, or a code-running job. Your application decides what to run and what results to keep; SPACE manages the sandbox, its processes, and the connection carrying command output.


https://github.com/perplexityai/SPACE
Go CPU and Memory Requests and Limits in Kubernetes

A small Go heap does not always mean low container memory usage. The heap shares the container's memory limit with goroutine stacks, runtime metadata, cgo allocations, and memory mapped directly from the operating system. Linux can kill a Go process even when its heap looks healthy.


https://learnkube.com/go-kubernetes-requests-limits
What gcloud start-iap-tunnel is doing while your SSH session hangs

A Wi-Fi toggle took an IAP tunnel almost three minutes to recover. Why the relay reconnect stalls, and what close codes 4033, 4003 and 4047 mean.


https://medium.com/google-cloud/what-gcloud-start-iap-tunnel-is-doing-while-your-ssh-session-hangs-138a52cd6df8
RDP to a Windows VM over IAP: serial port 4, NLA and a certificate nobody checks

Google says to verify the RDP thumbprint from serial port 1. On a real VM it was gone. How the password reaches you, what CredSSP protects, and the errors in between.


https://medium.com/google-cloud/rdp-to-a-windows-vm-over-iap-serial-port-4-nla-and-a-certificate-you-cant-check-90ec745f2df3
18 ноября пройдёт Positive AppSec Conf — первая конференция Positive Technologies по безопасной разработке.
Формат гибридный: офлайн в Кибердоме и онлайн-трансляция.

Практики AppSec и DevSecOps обсудят реальные кейсы и инциденты.

В программе:

🤖 ИИ пишет код быстрее, чем вы находите в нём дыры: как ускорить разработку и не нагенерировать уязвимость в прод
🔍 SAST/DAST/IaC-сканеры в пайплайне: где реально спасают, а где только шумят и создают иллюзию безопасности
⛓️ Атаки через цепочку поставок: почему одна уязвимость в open-source-библиотеке бьёт по сотням компаний сразу
🐛 Метрики AppSec: почему «сколько нашли уязвимостей» — плохой показатель и что считать вместо него
💸 Бюджет на безопасность: как обосновать его перед бизнесом, когда уязвимостей больше, а денег столько же

Конференция будет полезна DevOps- и DevSecOps-инженерам, AppSec-специалистам, архитекторам ИБ и CISO.

🗓 18 ноября, Кибердом (м. Улица 1905 года) + онлайн

Участие бесплатное, но регистрация проходит через подтверждение — подавайте заявку заранее.
codeg

Collaborative multi-agent AI coding workspace: aggregate sessions from Claude Code, Codex, OpenCode, Pi, Grok Build, etc. Desktop app, self-hosted server, or Docker.


https://github.com/spacering-net/codeg
difit

difit is a CLI tool that lets you view and review local git diffs with a GitHub-style viewer. In addition to clean visuals, comments can be copied as prompts for AI. The local code review tool for the AI era!


https://github.com/yoshiko-pg/difit
PaperPilot

PaperPilot is a PDF and document toolkit written in Rust.


https://github.com/KrushnaVardhanReddy/PaperPilot
Building Modelplane on Crossplane

The project is called Modelplane. It lets a platform team turn a pile of accelerators (across clouds, neoclouds, and on-premise) into one fleet. It also lets the ML teams they support deploy a model and get a stable, OpenAI-compatible endpoint without thinking about where it runs.


https://blog.crossplane.io/building-modelplane
Scaling Kubernetes Deployments to multiple Regions: A GitOps Reference Architecture

This article is the architecture I'd build to get from 2 to 25 regions without that fear: a GitOps-first model where each region is an independent, self-healing control loop, deployments are declarative commits, and rollback is a git revert scoped to exactly one region — fully isolated from every other.


https://medium.com/@vtulasinadh/scaling-kubernetes-deployments-to-multiple-regions-a-gitops-reference-architecture-ad18a55bdaac
How I Built a Kubernetes Rightsizer in 4 Days During Easter Vacation — and Cut k8s Costs by 36%

It became crystal clear that the only way to get real savings was to resize everything, all at once, cluster by cluster, automatically.


https://medium.com/@mcpunzo/how-i-built-a-kubernetes-rightsizer-in-4-days-during-easter-vacation-and-cut-k8s-costs-by-36-2c98c99b1956
How We Built Our Deployment Pipeline: GitOps, ArgoCD, and Kubernetes at Dodo Payments

We're Dodo Payments, a payment and billing infrastructure company. We process real money for businesses across multiple countries. That means PCI DSS compliance isn't optional - it's existential. And PCI requires something we didn't have: a complete, auditable trail of every change to our production environment.


https://dodopayments.com/engineering/deployment-pipeline-gitops-argocd-kubernetes
We Proved Multi-Cluster Kafka Works on Kubernetes… Here's Everything we Learned

We built a working prototype of Apache Kafka distributed across three independent Kubernetes clusters using Strimzi, Submariner, and Cilium, achieving zero-downtime failover when an entire cluster goes down.


https://aswin6303.medium.com/we-proved-multi-cluster-kafka-works-on-kubernetes-heres-everything-we-learned-853dd5f1c03c