DevOps&SRE Library
17.8K subscribers
461 photos
4 videos
2 files
4.76K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://knd.gov.ru/license?id=67704b536aa9672b963777b3&registryType=bloggersPermission
Download Telegram
Kubernetes Usage Patterns
VERTICAL POD AUTOSCALING: THE DEFINITIVE GUIDE

https://povilasv.me/vertical-pod-autoscaling-the-definitive-guide
consoleme

ConsoleMe strives to be a multi-account AWS swiss-army knife, making AWS easier for your end-users and cloud administrators. It is designed to consolidate the management of multiple accounts into a single web interface. It allows your end-users and administrators to get credentials / console access to your different accounts, depending on their authorization level. It provides mechanisms for end-users and administrators to both request and manage permissions for IAM roles, S3 buckets, SQS queues, and SNS topics. A self-service wizard is also provided to guide users into requesting the permissions they desire.

https://github.com/Netflix/consoleme
Git stash doesn't have to be scary

https://jemma.dev/blog/git-stash
A better Kubernetes, from the ground up

https://blog.dave.tf/post/new-kubernetes
Securing Your GitHub Project

- Use a credential manager to protect your access credentials.
- Configure two-factor authentication (2FA).
- Enforce signed commits.
- Protect the release branch.
- Require pull request reviews and approvals.
- Scan source code for sensitive data leaks.
- Scrub leaked secrets from git history.
- Only use trusted GitHub Actions.
- Protect the secrets used by GitHub Actions.
- Review project dependencies for vulnerabilities.
- Patch dependencies with vulnerabilities.
- Scan project source code for vulnerabilities.
- Publish a security policy.
- Collaborate on fixes for security vulnerabilities in private forks.
- Publish maintainer advisories for security fixes.

https://marcinhoppe.com/securing-your-github-project
How to Set Environment Variables in Linux and Mac: The Missing Manual

Most articles only cover the basics so we've attempted to create the "missing manual" for using environment variables in Linux and Mac.

https://doppler.com/blog/how-to-set-environment-variables-in-linux-and-mac
CI/CD Workflow for AWS ECS via Terragrunt and GitHub Actions

Adopt Terraform to auto-provision infrastructure, and GitHub Flow to continuously test and deploy code

https://camillovisini.com/article/terragrunt-github-actions-aws-ecs
driftctl

Detect, track and alert on infrastructure drift

announcing: https://driftctl.com/2020/12/22/announcing-driftctl

code: https://github.com/cloudskiff/driftctl
The Mysterious Case of the Bad Gateway (502)

https://www.transposit.com/blog/2018.09.14-mysterious-case
upptime

Upptime is the open-source uptime monitor and status page, powered entirely by GitHub Actions and Issues.

https://github.com/upptime/upptime
Kernel privilege escalation: how Kubernetes container isolation impacts privilege escalation attacks

https://snyk.io/blog/kernel-privilege-escalation
Amazon: NOT OK - why we had to change Elastic licensing

https://www.elastic.co/blog/why-license-change-AWS