DevOps&SRE Library
17.8K subscribers
460 photos
4 videos
2 files
4.75K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://knd.gov.ru/license?id=67704b536aa9672b963777b3&registryType=bloggersPermission
Download Telegram
Terraform Drift: The Bad, the Ugly and the Black Swan

What is Terraform Drift? What problems does it cause? And how can we fix it?

https://dragondrop.cloud/2023/08/10/terraform-drift-the-bad-the-ugly-and-the-black-swan
AWS Single Sign-on, Terraform and Terragrunt

When working locally with the AWS CLI or with Terraform or Terragrunt, you will require a valid AWS configuration to be authorised to communicate with AWS services.

It is recommended to leverage features such as Single Sign-On (SSO) and Role Based Access Controls (RBAC) when using your identity as the principal for interacting with AWS services.

Using SSO ensures that you are not storing a permanent access key and secret access key and that your sessions have a limited lifetime. Using permission sets (a form of RBAC) ensures that you create roles with only the minimum required permissions for relevant accounts and assume them when needed. This is one aspect of implmenting the principle of least privilege (PoLP).

In this guide it is assumed that you are making use of IAM Identity Center and that you are configured as a user. You should also have access to one or more accounts using permission sets. This guide will walk through accessing at least two accounts using the same login.

https://levelup.gitconnected.com/aws-single-sign-on-terraform-and-terragrunt-a8c22bb7cfa8
Exploring distributed vs centralized incident command models

In this blog post, we’ll talk about two incident management structure models — distributed and centralized, including the pros and cons of each, and examples of what each structure looks like in our community.

https://firehydrant.com/blog/exploring-distributed-vs-centralized-incident-command-models
Postgres: The Graph Database You Didn't Know You Had

PostgreSQL (Postgres), is a powerful relational database that can store a wide range of data types and data structures. When it comes to storing graph data structures we might reach for a database marketed for that use case like Neo4J or Dgraph. Hold your horses! While Postgres is not generally thought of when working with graph data structures, it is perfectly capable to store and query graph data efficiently.

https://www.dylanpaulus.com/posts/postgres-is-a-graph-database
Immutable-инфраструктура и ее преимущества

На Хабре появилась новая статья, посвященная строительству инфраструктуры с помощью незаменимых компонентов. Здесь рассмотрены основные преимущества и недостатки такого подхода, а также приведены конкретные примеры, где использование этого подхода является оптимальным.

https://habr.com/ru/companies/vk/articles/756152
How to Convince Management to Invest in the Tools You Need

Get sign off on the tools you need, by making a business case that resonates.

https://liblab.com/blog/how-to-convince-management-to-invest-in-tools-you-need
Transactions in a Microservice World

Typically, microservice-based applications distribute data widely, especially in cloud-based applications, resulting in distributed applications. This impacts the transactions within these applications. This white paper refreshes the concepts of classical and distributed transactions. Next, we explain how cloud-based applications are affected by distribution. Finally, we present compensation-based transactions as a reliable method for microservice-based application transactions, even in the cloud. 

https://wso2.com/whitepapers/transactions-in-a-microservice-world
CoreDNS Monitoring

Key metrics for CoreDNS monitoring:
https://www.datadoghq.com/blog/coredns-metrics

Tools for collecting metrics and logs from CoreDNS: https://www.datadoghq.com/blog/coredns-monitoring-tools
hydra

Hydra: Column-oriented Postgres. Add scalable analytics to your project in minutes.

https://github.com/hydradatabase/hydra
Confidently Automate AWS EKS Cluster Deployment with Terraform

https://guruspedia.com/confidently-automate-aws-eks-cluster-deployments-with-terraform
Bare-metal Kubernetes

I've been running a Kubernetes cluster on a mix of virtual and bare metal machines with Hetzner for about a year now, and while the setup has served me well, being a very exploratory exercise at the time it wasn't very well documented.

To rectify this, and to get a chance to play with some tools I wasn't aware of at the time, I've decided to rebuild the cluster from scratch and document the process through these posts.

Part I: Talos on Hetzner: https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talos-on-hetzner
Part II: Cilium CNI & Firewalls: https://datavirke.dk/posts/bare-metal-kubernetes-part-2-cilium-and-firewalls
Part III: Encrypted GitOps with FluxCD: https://datavirke.dk/posts/bare-metal-kubernetes-part-3-encrypted-gitops-with-fluxcd
Part IV: Ingress, DNS and Certificates: https://datavirke.dk/posts/bare-metal-kubernetes-part-4-ingress-dns-certificates
Part V: Scaling Out: https://datavirke.dk/posts/bare-metal-kubernetes-part-5-scaling-out/
Part VI: Persistent Storage with Rook Ceph: https://datavirke.dk/posts/bare-metal-kubernetes-part-6-persistent-storage-with-rook-ceph
Part VII: Private Registry with Harbor: https://datavirke.dk/posts/bare-metal-kubernetes-part-7-private-registry-with-harbor
Part VIII: Containerizing our Work Environment: https://datavirke.dk/posts/bare-metal-kubernetes-part-8-containerizing-our-work-environment
cks

Opensource Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes Specialist (CKA ,CKS , CKAD) exams

https://github.com/ViktorUJ/cks
Five Helm Tools for Improving Kubernetes Quality of Life

https://home.robusta.dev/blog/top-five-helm-addon-tools-for-kubernetes
AWS Notes

Amazon Web Services Educational and Information Channel

@aws_notes