DevOps&SRE Library
19.9K subscribers
425 photos
1 video
2 files
5.59K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
18 ноября пройдёт Positive AppSec Conf — первая конференция Positive Technologies по безопасной разработке.
Формат гибридный: офлайн в Кибердоме и онлайн-трансляция.

Практики AppSec и DevSecOps обсудят реальные кейсы и инциденты.

В программе:

🤖 ИИ пишет код быстрее, чем вы находите в нём дыры: как ускорить разработку и не нагенерировать уязвимость в прод
🔍 SAST/DAST/IaC-сканеры в пайплайне: где реально спасают, а где только шумят и создают иллюзию безопасности
⛓️ Атаки через цепочку поставок: почему одна уязвимость в open-source-библиотеке бьёт по сотням компаний сразу
🐛 Метрики AppSec: почему «сколько нашли уязвимостей» — плохой показатель и что считать вместо него
💸 Бюджет на безопасность: как обосновать его перед бизнесом, когда уязвимостей больше, а денег столько же

Конференция будет полезна DevOps- и DevSecOps-инженерам, AppSec-специалистам, архитекторам ИБ и CISO.

🗓 18 ноября, Кибердом (м. Улица 1905 года) + онлайн

Участие бесплатное, но регистрация проходит через подтверждение — подавайте заявку заранее.
codeg

Collaborative multi-agent AI coding workspace: aggregate sessions from Claude Code, Codex, OpenCode, Pi, Grok Build, etc. Desktop app, self-hosted server, or Docker.


https://github.com/spacering-net/codeg
difit

difit is a CLI tool that lets you view and review local git diffs with a GitHub-style viewer. In addition to clean visuals, comments can be copied as prompts for AI. The local code review tool for the AI era!


https://github.com/yoshiko-pg/difit
PaperPilot

PaperPilot is a PDF and document toolkit written in Rust.


https://github.com/KrushnaVardhanReddy/PaperPilot
Building Modelplane on Crossplane

The project is called Modelplane. It lets a platform team turn a pile of accelerators (across clouds, neoclouds, and on-premise) into one fleet. It also lets the ML teams they support deploy a model and get a stable, OpenAI-compatible endpoint without thinking about where it runs.


https://blog.crossplane.io/building-modelplane
Scaling Kubernetes Deployments to multiple Regions: A GitOps Reference Architecture

This article is the architecture I'd build to get from 2 to 25 regions without that fear: a GitOps-first model where each region is an independent, self-healing control loop, deployments are declarative commits, and rollback is a git revert scoped to exactly one region — fully isolated from every other.


https://medium.com/@vtulasinadh/scaling-kubernetes-deployments-to-multiple-regions-a-gitops-reference-architecture-ad18a55bdaac
How I Built a Kubernetes Rightsizer in 4 Days During Easter Vacation — and Cut k8s Costs by 36%

It became crystal clear that the only way to get real savings was to resize everything, all at once, cluster by cluster, automatically.


https://medium.com/@mcpunzo/how-i-built-a-kubernetes-rightsizer-in-4-days-during-easter-vacation-and-cut-k8s-costs-by-36-2c98c99b1956
How We Built Our Deployment Pipeline: GitOps, ArgoCD, and Kubernetes at Dodo Payments

We're Dodo Payments, a payment and billing infrastructure company. We process real money for businesses across multiple countries. That means PCI DSS compliance isn't optional - it's existential. And PCI requires something we didn't have: a complete, auditable trail of every change to our production environment.


https://dodopayments.com/engineering/deployment-pipeline-gitops-argocd-kubernetes
We Proved Multi-Cluster Kafka Works on Kubernetes… Here's Everything we Learned

We built a working prototype of Apache Kafka distributed across three independent Kubernetes clusters using Strimzi, Submariner, and Cilium, achieving zero-downtime failover when an entire cluster goes down.


https://aswin6303.medium.com/we-proved-multi-cluster-kafka-works-on-kubernetes-heres-everything-we-learned-853dd5f1c03c
Your Kubernetes Backup Restored Successfully. So Why Is the App Broken?

I spent a while building a backup-and-restore test environment with Velero, running MariaDB, PostgreSQL, and MongoDB under load, and learned that backing up databases on Kubernetes has two hard problems, not one. The first is getting a backup that isn't subtly corrupt. The second is getting that backup to restore somewhere else and actually run.


https://medium.com/@ishay7/your-kubernetes-backup-restored-successfully-so-why-is-the-app-broken-0685d0a43814
Deep Dive into Kubernetes Secrets Store CSI Driver

Following the Journey of a Secret from an External Secret Store to Your Pod.


https://medium.com/@agarwalaviral065/deep-dive-into-kubernetes-secrets-store-csi-driver-cf7f5e4e94c4
Zero Log Loss in Kubernetes: Why I Replaced a Single Fluentd DaemonSet with a Two-Layer Architecture

How separating log collection from log aggregation eliminated data loss during crashes, rolling updates, and infrastructure failures.


https://medium.com/@alexandreloureno_46066/your-kubernetes-cluster-is-probably-dropping-logs-mine-was-77966aced83b
Scale Kubernetes deployments to zero using KEDA

If you have a multi-cluster EKS deployment for your development, QA and staging environments, those generally don't need to run at 3AM. No one is using any of that, except for maybe a few cronjobs to refresh data. Everything else is wasted idle compute.


https://mijndertstuij.nl/posts/scale-to-zero-keda-cron-scaler