Minimum Viable Kubernetes
So just for fun, let's see what the absolute bare minimum "Kubernetes cluster" actually looks like.https://eevans.co/blog/minimum-viable-kubernetes
Introducing the GitHub Availability Report
https://github.blog/2020-07-08-introducing-the-github-availability-report
https://github.blog/2020-07-08-introducing-the-github-availability-report
Running spot instances effectively with Amazon EKS
https://m.signalvnoise.com/running-spot-instances-effectively-with-amazon-eks
https://m.signalvnoise.com/running-spot-instances-effectively-with-amazon-eks
Bach
Bach is a Bash testing framework, can be used to test scripts that contain dangerous commands like rm -rf /. No surprises, no pain.https://github.com/bach-sh/bach
Deploying an AKS Cluster with Managed Identity using Terraform
https://www.chriswoolum.dev/aks-with-managed-identity-and-terraform
https://www.chriswoolum.dev/aks-with-managed-identity-and-terraform
CDK for Terraform: Enabling Python & TypeScript Support
https://www.hashicorp.com/blog/cdk-for-terraform-enabling-python-and-typescript-support
https://www.hashicorp.com/blog/cdk-for-terraform-enabling-python-and-typescript-support
Sinker
sinker syncs container images from one registry to another. This is useful in cases when you rely on images that exist in a public container registry, but need to pull from a private registry.https://github.com/plexsystems/sinker
Kustomize: Traefik v2.2 as a Kubernetes Ingress Controller
https://blog.tomarrell.com/post/traefik_v2_on_kubernetes
https://blog.tomarrell.com/post/traefik_v2_on_kubernetes
Porter: An Open Source Cloud Native Load Balancer in CNCF Landscape
Porter is an open source load balancer designed for bare metal Kubernetes clusters. It's implemented by physical switch, and uses BGP and ECMP to achieve the best performance and high availability.
https://itnext.io/porter-an-open-source-load-balancer-designed-for-bare-metal-kubernetes-clusters-870e1313b7f0
code: https://github.com/kubesphere/porter
Porter is an open source load balancer designed for bare metal Kubernetes clusters. It's implemented by physical switch, and uses BGP and ECMP to achieve the best performance and high availability.
https://itnext.io/porter-an-open-source-load-balancer-designed-for-bare-metal-kubernetes-clusters-870e1313b7f0
code: https://github.com/kubesphere/porter
k1s: The world's simplest Kubernetes dashboard
A simplistic Kubernetes dashboard implemented with 50 lines of Bash code.https://github.com/weibeld/k1s
Using kubectl via an SSH Tunnel
https://blog.scottlowe.org/2020/06/16/using-kubectl-via-an-ssh-tunnel
https://blog.scottlowe.org/2020/06/16/using-kubectl-via-an-ssh-tunnel
Blameless' SRE Journey
SRE is a practice adopted by best-in-class companies all over the world. As a software reliability platform purpose-built for SREs, Blameless strives to practice what we preach and utilizes SRE best practices daily to cultivate a culture of resilience.https://www.blameless.com/blog/blameless-sre-journey
However, this wasn’t always the case. In the early days of our company’s history (like many other companies at the beginning of their journeys), we often needed to move fast without looking through the lens of reliability and prioritize feature development and product-market fit over scalability and resilience. As you can imagine, this isn’t sustainable, and needed to make a change.
In this post, we will share our SRE journey and how we operationalized the best practices we hold dear.
Dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to starthttps://github.com/goodwithtech/dockle
k8s-crash-informer
This Kubernetes controller informs you when a Kubernetes Pod repeatedly dies (CrashLoopBackOff) while providing additional information like exit code and logs.https://github.com/lnsp/k8s-crash-informer
7 Pipeline Design Patterns for Continuous Delivery
- Pipelines as Codehttps://www.singlestoneconsulting.com/blog/7-pipeline-design-patterns-for-continuous-delivery
- Externalize Logic into Reusable Libraries
- Separate Build and Deploy Pipelines
- Trigger the Right Pipeline
- Fast Team Feedback
- Stable Internal Releases
- Buttoned Up Product Releases
Krane
Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.https://github.com/appvia/krane
SQLPad
A web app for writing and running SQL queries and visualizing the results. Supports Postgres, MySQL, SQL Server, ClickHouse, Crate, Vertica, Presto, SAP HANA, Snowflake, BigQuery, SQLite, and many others via ODBC.https://rickbergfalk.github.io/sqlpad