Decluttering your Terraform code using for_each
https://jrpospos.blog/posts/2023/07/decluttering-your-terraform-code-using-for_each
https://jrpospos.blog/posts/2023/07/decluttering-your-terraform-code-using-for_each
Terraform Drift: The Bad, the Ugly and the Black Swan
What is Terraform Drift? What problems does it cause? And how can we fix it?https://dragondrop.cloud/2023/08/10/terraform-drift-the-bad-the-ugly-and-the-black-swan
AWS Single Sign-on, Terraform and Terragrunt
When working locally with the AWS CLI or with Terraform or Terragrunt, you will require a valid AWS configuration to be authorised to communicate with AWS services.https://levelup.gitconnected.com/aws-single-sign-on-terraform-and-terragrunt-a8c22bb7cfa8
It is recommended to leverage features such as Single Sign-On (SSO) and Role Based Access Controls (RBAC) when using your identity as the principal for interacting with AWS services.
Using SSO ensures that you are not storing a permanent access key and secret access key and that your sessions have a limited lifetime. Using permission sets (a form of RBAC) ensures that you create roles with only the minimum required permissions for relevant accounts and assume them when needed. This is one aspect of implmenting the principle of least privilege (PoLP).
In this guide it is assumed that you are making use of IAM Identity Center and that you are configured as a user. You should also have access to one or more accounts using permission sets. This guide will walk through accessing at least two accounts using the same login.
Exploring distributed vs centralized incident command models
In this blog post, we’ll talk about two incident management structure models — distributed and centralized, including the pros and cons of each, and examples of what each structure looks like in our community.https://firehydrant.com/blog/exploring-distributed-vs-centralized-incident-command-models
Postgres: The Graph Database You Didn't Know You Had
PostgreSQL (Postgres), is a powerful relational database that can store a wide range of data types and data structures. When it comes to storing graph data structures we might reach for a database marketed for that use case like Neo4J or Dgraph. Hold your horses! While Postgres is not generally thought of when working with graph data structures, it is perfectly capable to store and query graph data efficiently.https://www.dylanpaulus.com/posts/postgres-is-a-graph-database
Immutable-инфраструктура и ее преимущества
На Хабре появилась новая статья, посвященная строительству инфраструктуры с помощью незаменимых компонентов. Здесь рассмотрены основные преимущества и недостатки такого подхода, а также приведены конкретные примеры, где использование этого подхода является оптимальным.
https://habr.com/ru/companies/vk/articles/756152
На Хабре появилась новая статья, посвященная строительству инфраструктуры с помощью незаменимых компонентов. Здесь рассмотрены основные преимущества и недостатки такого подхода, а также приведены конкретные примеры, где использование этого подхода является оптимальным.
https://habr.com/ru/companies/vk/articles/756152
How to Convince Management to Invest in the Tools You Need
Get sign off on the tools you need, by making a business case that resonates.https://liblab.com/blog/how-to-convince-management-to-invest-in-tools-you-need
Transactions in a Microservice World
Typically, microservice-based applications distribute data widely, especially in cloud-based applications, resulting in distributed applications. This impacts the transactions within these applications. This white paper refreshes the concepts of classical and distributed transactions. Next, we explain how cloud-based applications are affected by distribution. Finally, we present compensation-based transactions as a reliable method for microservice-based application transactions, even in the cloud.https://wso2.com/whitepapers/transactions-in-a-microservice-world
CoreDNS Monitoring
Key metrics for CoreDNS monitoring: https://www.datadoghq.com/blog/coredns-metrics
Tools for collecting metrics and logs from CoreDNS: https://www.datadoghq.com/blog/coredns-monitoring-tools
Key metrics for CoreDNS monitoring: https://www.datadoghq.com/blog/coredns-metrics
Tools for collecting metrics and logs from CoreDNS: https://www.datadoghq.com/blog/coredns-monitoring-tools
hydra
Hydra: Column-oriented Postgres. Add scalable analytics to your project in minutes.https://github.com/hydradatabase/hydra
Terraform best practices for reliability at any scale
https://substrate.tools/blog/terraform-best-practices-for-reliability-at-any-scale
https://substrate.tools/blog/terraform-best-practices-for-reliability-at-any-scale
Configure Private Access In GCP Using Terraform
https://medium.com/@109manojsaini/configure-private-access-in-gcp-using-terraform-c6b2d2fcac76
https://medium.com/@109manojsaini/configure-private-access-in-gcp-using-terraform-c6b2d2fcac76
Confidently Automate AWS EKS Cluster Deployment with Terraform
https://guruspedia.com/confidently-automate-aws-eks-cluster-deployments-with-terraform
https://guruspedia.com/confidently-automate-aws-eks-cluster-deployments-with-terraform
Bare-metal Kubernetes
Part II: Cilium CNI & Firewalls: https://datavirke.dk/posts/bare-metal-kubernetes-part-2-cilium-and-firewalls
Part III: Encrypted GitOps with FluxCD: https://datavirke.dk/posts/bare-metal-kubernetes-part-3-encrypted-gitops-with-fluxcd
Part IV: Ingress, DNS and Certificates: https://datavirke.dk/posts/bare-metal-kubernetes-part-4-ingress-dns-certificates
Part V: Scaling Out: https://datavirke.dk/posts/bare-metal-kubernetes-part-5-scaling-out/
Part VI: Persistent Storage with Rook Ceph: https://datavirke.dk/posts/bare-metal-kubernetes-part-6-persistent-storage-with-rook-ceph
Part VII: Private Registry with Harbor: https://datavirke.dk/posts/bare-metal-kubernetes-part-7-private-registry-with-harbor
Part VIII: Containerizing our Work Environment: https://datavirke.dk/posts/bare-metal-kubernetes-part-8-containerizing-our-work-environment
I've been running a Kubernetes cluster on a mix of virtual and bare metal machines with Hetzner for about a year now, and while the setup has served me well, being a very exploratory exercise at the time it wasn't very well documented.Part I: Talos on Hetzner: https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talos-on-hetzner
To rectify this, and to get a chance to play with some tools I wasn't aware of at the time, I've decided to rebuild the cluster from scratch and document the process through these posts.
Part II: Cilium CNI & Firewalls: https://datavirke.dk/posts/bare-metal-kubernetes-part-2-cilium-and-firewalls
Part III: Encrypted GitOps with FluxCD: https://datavirke.dk/posts/bare-metal-kubernetes-part-3-encrypted-gitops-with-fluxcd
Part IV: Ingress, DNS and Certificates: https://datavirke.dk/posts/bare-metal-kubernetes-part-4-ingress-dns-certificates
Part V: Scaling Out: https://datavirke.dk/posts/bare-metal-kubernetes-part-5-scaling-out/
Part VI: Persistent Storage with Rook Ceph: https://datavirke.dk/posts/bare-metal-kubernetes-part-6-persistent-storage-with-rook-ceph
Part VII: Private Registry with Harbor: https://datavirke.dk/posts/bare-metal-kubernetes-part-7-private-registry-with-harbor
Part VIII: Containerizing our Work Environment: https://datavirke.dk/posts/bare-metal-kubernetes-part-8-containerizing-our-work-environment
cks
Opensource Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes Specialist (CKA ,CKS , CKAD) examshttps://github.com/ViktorUJ/cks
Fairness, Kubernetes Pricing, and Burstable CPUs
https://home.robusta.dev/blog/fairness-kubernetes-pricing-and-burstable-cpus
https://home.robusta.dev/blog/fairness-kubernetes-pricing-and-burstable-cpus
Five Helm Tools for Improving Kubernetes Quality of Life
https://home.robusta.dev/blog/top-five-helm-addon-tools-for-kubernetes
https://home.robusta.dev/blog/top-five-helm-addon-tools-for-kubernetes
How to Debug Kubernetes App Errors Like a Pro
Pt 1: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-1-3-34d61b31358e
Pt 2: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-2-3-88b32586959f
Pt 3: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-3-3-36fcfbc81e2f
Pt 1: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-1-3-34d61b31358e
Pt 2: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-2-3-88b32586959f
Pt 3: https://medium.com/@JJotah/how-to-debug-kubernetes-app-errors-like-a-pro-3-3-36fcfbc81e2f
Optimizing Interzone egress cost by compression and zone-aware traffic routing
https://medium.com/@nsivadeep/optimizing-interzone-egress-cost-by-compression-and-zone-aware-traffic-routing-f7ec3c133b44
https://medium.com/@nsivadeep/optimizing-interzone-egress-cost-by-compression-and-zone-aware-traffic-routing-f7ec3c133b44