Maturing your Terraform workflow
These guidelines can help organizations mature their use of HashiCorp Terraform modules for scale and a faster release cadence.https://www.hashicorp.com/blog/maturing-your-terraform-workflow
burrito
Burrito is a TACoS (Terraform Automation Collaboration Software) Kubernetes Operator.https://github.com/padok-team/burrito
terraform-generator
Generate Terraform configurations with Node.js.https://github.com/ahzhezhe/terraform-generator
Kubernetes Security Best Practices
Part 1: Role Based Access Control (RBAC): https://engineering.dynatrace.com/blog/kubernetes-security-part-1-role-based-access-control-rbac
Part 2: Network Policies: https://medium.com/dynatrace-engineering/kubernetes-security-best-practices-part-2-network-policies-405b36ed9d94
Part 1: Role Based Access Control (RBAC): https://engineering.dynatrace.com/blog/kubernetes-security-part-1-role-based-access-control-rbac
Part 2: Network Policies: https://medium.com/dynatrace-engineering/kubernetes-security-best-practices-part-2-network-policies-405b36ed9d94
When K8s pods are stuck mounting large volumes
Recently we ran into the following problem with our Loki deployment on AWS/EKS. On every deployment or restart of a Loki Pod, mounting the persistent volume took longer and longer. It started with a few minutes delay and ended up with nearly 25 minutes on our production cluster.https://blog.devgenius.io/when-k8s-pods-are-stuck-mounting-large-volumes-2915e6656cb8
Develop on Kubernetes Series — Demystifying the For vs Owns vs Watches controller-builders in controller-runtime
https://yash-kukreja-98.medium.com/develop-on-kubernetes-series-demystifying-the-for-vs-owns-vs-watches-controller-builders-in-c11ab32a046e
https://yash-kukreja-98.medium.com/develop-on-kubernetes-series-demystifying-the-for-vs-owns-vs-watches-controller-builders-in-c11ab32a046e
ArgoCD at scale with ApplicationSet & Go Template
https://medium.com/@geoffrey.muselli/argocd-at-scale-with-applicationset-go-template-7f326d8a61f3
https://medium.com/@geoffrey.muselli/argocd-at-scale-with-applicationset-go-template-7f326d8a61f3
Kube-Prometheus-Stack and ArgoCD 2.5 – Server-Side Apply to the Rescue!
https://blog.ediri.io/kube-prometheus-stack-and-argocd-25-server-side-apply-to-the-rescue
https://blog.ediri.io/kube-prometheus-stack-and-argocd-25-server-side-apply-to-the-rescue
Deploying and Autoscaling Kubernetes with Knative
https://nearform.hashnode.dev/series-deploying-and-autoscaling-kubernetes-with-knative
https://nearform.hashnode.dev/series-deploying-and-autoscaling-kubernetes-with-knative
GKE with Consul Service Mesh
Using Consul Connect and Envoy to build a service meshhttps://joachim8675309.medium.com/gke-with-consul-service-mesh-36598242d278
kubegateway
Kube-gateway is a best practice for managing massive kubernetes clusters within ByteDance.https://github.com/kubewharf/kubegateway
It is a layer 7 load balancing proxy specifically designed and customized for HTTP2 flow for kube-apiserver.
The goal is to provide flexible and stable flow governance solutions for massive large-scale kubernetes clusters (more than 1,000 nodes).
Bridge-To-Kubernetes
Bridge to Kubernetes extends the Kubernetes perimeter to your development computer allowing you to write, test, and debug microservice code while connected to your Kubernetes cluster with the rest of your application or services. You can simply run your code natively on your development workstation while connected to the Kubernetes cluster, allowing you to test your code changes in the context of the larger application.https://github.com/Azure/Bridge-To-Kubernetes
kubegres
Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql pods with data replication and failover enabled out-of-the box. It brings simplicity when using PostgreSql considering how complex managing stateful-set's life-cycle and data replication could be with Kubernetes.https://github.com/reactive-tech/kubegres
redis-operator
Redis Operator creates/configures/manages redis-failovers atop Kubernetes.https://github.com/spotahome/redis-operator
configmap-reload
configmap-reload is a simple binary to trigger a reload when Kubernetes ConfigMaps or Secrets, mounted into pods, are updated. It watches mounted volume dirs and notifies the target process that the config map has been changed. It currently only supports sending an HTTP request, but in future it is expected to support sending OS (e.g. SIGHUP) once Kubernetes supports pod PID namespaces.https://github.com/jimmidyson/configmap-reload
infisical
Infisical is an open-source, end-to-end encrypted platform for secret management: sync secrets across your team/infrastructure and prevent secret leaks.https://github.com/Infisical/infisical
Terraform Provider Debugging: A step by step guide
https://medium.com/@narinderkaurmakkar1/terraform-provider-debugging-a-step-by-step-guide-8c6d771637a1
https://medium.com/@narinderkaurmakkar1/terraform-provider-debugging-a-step-by-step-guide-8c6d771637a1
Learn how to utilize Terraform modules from a different repository through GitHub Actions
https://medium.com/@olwethuphakade89/learn-how-to-utilize-terraform-modules-from-a-different-repository-through-github-actions-15cd74e94cf1
https://medium.com/@olwethuphakade89/learn-how-to-utilize-terraform-modules-from-a-different-repository-through-github-actions-15cd74e94cf1