DevOps&SRE Library
17.8K subscribers
461 photos
4 videos
2 files
4.76K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://knd.gov.ru/license?id=67704b536aa9672b963777b3&registryType=bloggersPermission
Download Telegram
consoleme

ConsoleMe strives to be a multi-account AWS swiss-army knife, making AWS easier for your end-users and cloud administrators. It is designed to consolidate the management of multiple accounts into a single web interface. It allows your end-users and administrators to get credentials / console access to your different accounts, depending on their authorization level. It provides mechanisms for end-users and administrators to both request and manage permissions for IAM roles, S3 buckets, SQS queues, and SNS topics. A self-service wizard is also provided to guide users into requesting the permissions they desire.

https://github.com/Netflix/consoleme
Git stash doesn't have to be scary

https://jemma.dev/blog/git-stash
A better Kubernetes, from the ground up

https://blog.dave.tf/post/new-kubernetes
Securing Your GitHub Project

- Use a credential manager to protect your access credentials.
- Configure two-factor authentication (2FA).
- Enforce signed commits.
- Protect the release branch.
- Require pull request reviews and approvals.
- Scan source code for sensitive data leaks.
- Scrub leaked secrets from git history.
- Only use trusted GitHub Actions.
- Protect the secrets used by GitHub Actions.
- Review project dependencies for vulnerabilities.
- Patch dependencies with vulnerabilities.
- Scan project source code for vulnerabilities.
- Publish a security policy.
- Collaborate on fixes for security vulnerabilities in private forks.
- Publish maintainer advisories for security fixes.

https://marcinhoppe.com/securing-your-github-project
How to Set Environment Variables in Linux and Mac: The Missing Manual

Most articles only cover the basics so we've attempted to create the "missing manual" for using environment variables in Linux and Mac.

https://doppler.com/blog/how-to-set-environment-variables-in-linux-and-mac
CI/CD Workflow for AWS ECS via Terragrunt and GitHub Actions

Adopt Terraform to auto-provision infrastructure, and GitHub Flow to continuously test and deploy code

https://camillovisini.com/article/terragrunt-github-actions-aws-ecs
driftctl

Detect, track and alert on infrastructure drift

announcing: https://driftctl.com/2020/12/22/announcing-driftctl

code: https://github.com/cloudskiff/driftctl
The Mysterious Case of the Bad Gateway (502)

https://www.transposit.com/blog/2018.09.14-mysterious-case
upptime

Upptime is the open-source uptime monitor and status page, powered entirely by GitHub Actions and Issues.

https://github.com/upptime/upptime
Kernel privilege escalation: how Kubernetes container isolation impacts privilege escalation attacks

https://snyk.io/blog/kernel-privilege-escalation
Amazon: NOT OK - why we had to change Elastic licensing

https://www.elastic.co/blog/why-license-change-AWS
A Vim Guide for Intermediate Users

https://thevaluable.dev/vim-intermediate
Provisioning Kubernetes clusters on GCP with Terraform and GKE

TL;DR: In this article you will learn how to create clusters on the GCP Google Kubernetes Engine (GKE) with the gcloud CLI and Terraform. By the end of the tutorial, you will automate creating three clusters (dev, staging, prod) complete with the GKE Ingress in a single click.

https://learnk8s.io/terraform-gke
image-service

Dragonfly image service, providing fast, secure and easy access to container images.

https://github.com/dragonflyoss/image-service