DevOps&SRE Library
17.8K subscribers
459 photos
4 videos
2 files
4.75K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://knd.gov.ru/license?id=67704b536aa9672b963777b3&registryType=bloggersPermission
Download Telegram
Maturing your Terraform workflow

These guidelines can help organizations mature their use of HashiCorp Terraform modules for scale and a faster release cadence.

https://www.hashicorp.com/blog/maturing-your-terraform-workflow
burrito

Burrito is a TACoS (Terraform Automation Collaboration Software) Kubernetes Operator.

https://github.com/padok-team/burrito
terraform-generator

Generate Terraform configurations with Node.js.

https://github.com/ahzhezhe/terraform-generator
When K8s pods are stuck mounting large volumes

Recently we ran into the following problem with our Loki deployment on AWS/EKS. On every deployment or restart of a Loki Pod, mounting the persistent volume took longer and longer. It started with a few minutes delay and ended up with nearly 25 minutes on our production cluster.

https://blog.devgenius.io/when-k8s-pods-are-stuck-mounting-large-volumes-2915e6656cb8
Develop on Kubernetes Series — Demystifying the For vs Owns vs Watches controller-builders in controller-runtime

https://yash-kukreja-98.medium.com/develop-on-kubernetes-series-demystifying-the-for-vs-owns-vs-watches-controller-builders-in-c11ab32a046e
Kube-Prometheus-Stack and ArgoCD 2.5 – Server-Side Apply to the Rescue!

https://blog.ediri.io/kube-prometheus-stack-and-argocd-25-server-side-apply-to-the-rescue
GKE with Consul Service Mesh

Using Consul Connect and Envoy to build a service mesh

https://joachim8675309.medium.com/gke-with-consul-service-mesh-36598242d278
kubegateway

Kube-gateway is a best practice for managing massive kubernetes clusters within ByteDance.

It is a layer 7 load balancing proxy specifically designed and customized for HTTP2 flow for kube-apiserver.

The goal is to provide flexible and stable flow governance solutions for massive large-scale kubernetes clusters (more than 1,000 nodes).

https://github.com/kubewharf/kubegateway
Bridge-To-Kubernetes

Bridge to Kubernetes extends the Kubernetes perimeter to your development computer allowing you to write, test, and debug microservice code while connected to your Kubernetes cluster with the rest of your application or services. You can simply run your code natively on your development workstation while connected to the Kubernetes cluster, allowing you to test your code changes in the context of the larger application.

https://github.com/Azure/Bridge-To-Kubernetes
kubegres

Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql pods with data replication and failover enabled out-of-the box. It brings simplicity when using PostgreSql considering how complex managing stateful-set's life-cycle and data replication could be with Kubernetes.

https://github.com/reactive-tech/kubegres
redis-operator

Redis Operator creates/configures/manages redis-failovers atop Kubernetes.

https://github.com/spotahome/redis-operator
configmap-reload

configmap-reload is a simple binary to trigger a reload when Kubernetes ConfigMaps or Secrets, mounted into pods, are updated. It watches mounted volume dirs and notifies the target process that the config map has been changed. It currently only supports sending an HTTP request, but in future it is expected to support sending OS (e.g. SIGHUP) once Kubernetes supports pod PID namespaces.

https://github.com/jimmidyson/configmap-reload
postgres-operator

PostgreSQL operator for Kubernetes

https://github.com/movetokube/postgres-operator
infisical

Infisical is an open-source, end-to-end encrypted platform for secret management: sync secrets across your team/infrastructure and prevent secret leaks.

https://github.com/Infisical/infisical