DevOps&SRE Library
17.8K subscribers
462 photos
4 videos
2 files
4.75K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://knd.gov.ru/license?id=67704b536aa9672b963777b3&registryType=bloggersPermission
Download Telegram
Terratest

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code. It provides a variety of helper functions and patterns for common infrastructure testing tasks, including:

- Testing Terraform code
- Testing Packer templates
- Testing Docker images
- Executing commands on servers over SSH
- Working with AWS APIs
- Working with Azure APIs
- Working with GCP APIs
- Working with Kubernetes APIs
- Testing Helm Charts
- Making HTTP requests
- Running shell commands
- And much more

https://github.com/gruntwork-io/terratest
kubei

Kubei is a vulnerabilities scanning tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters. Kubei scans all images that are being used in a Kubernetes cluster, including images of application pods and system pods. It doesn’t scan the entire image registries and doesn’t require preliminary integration with CI/CD pipelines.

https://github.com/Portshift/Kubei
Running Percona Kubernetes Operator for Percona XtraDB Cluster with Kata Containers

https://www.percona.com/blog/2020/11/04/running-percona-kubernetes-operator-for-percona-xtradb-cluster-with-kata-containers
Bare Metal Operator

The Bare Metal Operator implements a Kubernetes API for managing bare metal hosts.

https://github.com/metal3-io/baremetal-operator
Correlation in Latency Analysis

This article was my response to Amazon’s writing assessment when I was interviewed.

https://rakyll.medium.com/correlation-in-latency-analysis-419357b93287
11 facts about real-world container use

Containers enable organizations to accelerate delivery cycles and rapidly scale their operations to meet the demands of today's fast-paced market. As more organizations migrate their workloads to containers, the container ecosystem is expanding and evolving to accommodate these increasingly dynamic environments. In this report, we examined more than 1.5 billion containers run by tens of thousands of Datadog customers to understand how image registries, service meshes, networking, and other technologies are being used in real-world container environments.

https://www.datadoghq.com/container-report
Series: Deploying ASP.NET Core applications to Kubernetes

https://andrewlock.net/series/deploying-asp-net-core-applications-to-kubernetes

Part 1 - An Introduction to Kubernetes: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-1-an-introduction-to-kubernetes
Part 2 - Configuring resources with YAML manifests: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-2-configuring-resources-with-yaml-manifests
Part 3 - An introduction to deploying applications with Helm: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-3-deploying-applications-with-helm
Part 4 - Creating a Helm chart for an ASP.NET Core app: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-4-creating-a-helm-chart-for-an-aspnetcore-app
Part 5 - Setting environment variables for ASP.NET Core apps in a Helm chart: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-5-setting-environment-variables-in-a-helm-chart
Part 6 - Adding health checks with Liveness, Readiness, and Startup probes: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-6-adding-health-checks-with-liveness-readiness-and-startup-probes
Part 7 - Running database migrations when deploying to Kubernetes: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-7-running-database-migrations
Part 8 - Running database migrations using jobs and init containers: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-8-running-database-migrations-using-jobs-and-init-containers
Part 9 - Monitoring Helm releases that use jobs and init containers: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-9-monitoring-helm-releases-that-use-jobs-and-init-containers
Part 10 - Creating an 'exec-host' deployment for running one-off commands: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-10-creating-an-exec-host-deployment-for-running-one-off-commands
Part 11 - Avoiding downtime in rolling deployments by blocking SIGTERM: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-11-avoiding-downtime-in-rolling-deployments-by-blocking-sigterm
Part 12 - Tips, tricks, and edge cases: https://andrewlock.net/deploying-asp-net-core-applications-to-kubernetes-part-12-tips-tricks-and-edge-cases
kraken

Kraken is a P2P-powered Docker registry that focuses on scalability and availability. It is designed for Docker image management, replication, and distribution in a hybrid cloud environment. With pluggable backend support, Kraken can easily integrate into existing Docker registry setups as the distribution layer.

Kraken has been in production at Uber since early 2018. In our busiest cluster, Kraken distributes more than 1 million blobs per day, including 100k 1G+ blobs. At its peak production load, Kraken distributes 20K 100MB-1G blobs in under 30 sec.

https://github.com/uber/kraken
Getting to the Core: Benchmarking Cloudflare’s Latest Server Hardware

https://blog.cloudflare.com/getting-to-the-core
Не хотелось бы оказаться Наташей в подобной ситуации? Как многие уже знают, этой осенью «Флант» представил свой Managed Kubernetes. Теперь можно получить кластеры K8s как услугу, размещая их в любой удобной инфраструктуре: у любимых российских и зарубежных облачных провайдеров, на своем железе (on-premises) и даже комбинируя эти варианты.

Все эти кластеры настраиваются согласно лучшим практикам известных специалистов и поставляются в по-настоящему готовом виде: внутри не просто «голый» Kubernetes, а интегрированная платформа, чтобы сразу запускать приложения в production. Продуманные (преднастроенные) метрики Prometheus и графики Grafana, автомасштабирование, усовершенствованный Nginx Ingress и балансировка трафика, автовыпуск SSL-сертификатов, веб-панель Kubernetes Dashboard… и вот это всё.

Плюс, конечно, поддержка от инженеров, которые специализируются именно на этом (а не ищут новую возможность продать свои облачные ресурсы). Всё это — по очень разумной цене, доступной не только для enterprise, но и небольшим компаниям и стартапам, уже понимающим, как им поможет Kubernetes.

Подробности (основные компоненты кластеров, онлайн-калькулятор, тарифы и уровни SLA) см. на сайте компании.
Ten Commandments of Egoless Programming

1. Understand and accept that you will make mistakes.
2. You are not your code.
3. No matter how much "karate" you know, someone else will always know more.
4. Don't rewrite code without consultation.
5. Treat people who know less than you with respect and patience.
6. The only constant in the world is change.
7. The only true authority stems from knowledge, not from position.
8. Fight for what you believe, but gracefully accept defeat.
9. Don't be "the guy in the room".
10. Critique code instead of people – be kind to the coder, not to the code.

https://blog.codonomics.com/2020/11/ten-commandments-of-egoless-programming.html
List of the best fonts for coding with live preview

https://devfonts.gafi.dev
kubectl-images

kubectl-images makes use of the kubectl command. It first calls kubectl get pods to retrieve pods details and filters out the container image information of each pod, then prints out the final result in a table view.

https://github.com/chenjiandongx/kubectl-images