Talk write-up: "How to build a PaaS for 1500 engineers"
https://srvaroa.github.io/paas/infrastructure/platform/kubernetes/cloud/2020/01/02/talk-how-to-build-a-paas-for-1500-engineers.html
https://srvaroa.github.io/paas/infrastructure/platform/kubernetes/cloud/2020/01/02/talk-how-to-build-a-paas-for-1500-engineers.html
Apache Kafka Made Simple: A First Glimpse of a Kafka Without ZooKeeper
https://www.confluent.io/blog/kafka-without-zookeeper-a-sneak-peek
https://www.confluent.io/blog/kafka-without-zookeeper-a-sneak-peek
Cloud lateral movement: Breaking in through a vulnerable container
https://sysdig.com/blog/lateral-movement-cloud-containers
https://sysdig.com/blog/lateral-movement-cloud-containers
The worst so-called “best practice” for Docker
https://pythonspeed.com/articles/security-updates-in-docker
https://pythonspeed.com/articles/security-updates-in-docker
Anthos on Bare Metal and Akri — Managing Leaf Devices on Edge Kubernetes Clusters from Cloud
https://itnext.io/anthos-on-bare-metal-and-akri-managing-leaf-devices-on-edge-kubernetes-clusters-from-cloud-222ff17dd7b8
https://itnext.io/anthos-on-bare-metal-and-akri-managing-leaf-devices-on-edge-kubernetes-clusters-from-cloud-222ff17dd7b8
Software Security at Rocketship Pace
A deep dive into Afterpay's journey developing a modern code scanning program.https://www.afterpaytechblog.com/software-security-at-rocketship-pace
cosign
Container Signing, Verification and Storage in an OCI registry.https://github.com/sigstore/cosign
Balancing act: the current limits of AWS network load balancers
https://ably.com/blog/limits-aws-network-load-balancers
https://ably.com/blog/limits-aws-network-load-balancers
A Journey Into SRE
This blog is about how a group of hard-working individuals, with unique skills and working methods, managed to create a successful SRE team.https://www.algolia.com/blog/engineering/a-journey-into-sre
reproxy
Reproxy is simple edge HTTP(s) server / reverse proxy supporting various providers (docker, static, file). One or more providers supply information about requested server, requested url, destination url and health check url. Distributed as a single binary or as a docker container.https://github.com/umputun/reproxy
Its Steal Time!
После того, как администратор узнает про steal time, он может по-настоящему предъявить своему облачному провайдеру за то, что тот крадет процессорное время его виртуалки!https://alexzzz.ru/post/its-steal-time
Building the world's fastest website analytics
In March 2021, we moved all of our analytics data to the database of our dreams.
https://usefathom.com/blog/worlds-fastest-analyticsKubernetes Single Sign On - A detailed guide
In this series of posts we cover how to setup a comprehensive group based single sign on system for Kubernetes including the kubectl cli, any web application with ingress, a docker registry and gitea. We'll cover most of the common SSO models so adapting what's here to other applications such as Gitlab, Kibana, Grafana etc is simple.http://www.talkingquickly.co.uk/kubernetes-sso-a-detailed-guide
ngx_waf
A web application firewall module for nginx without complex configuration.
https://github.com/ADD-SP/ngx_wafPostgREST
PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.https://postgrest.org/en/stable
Provisioning Kubernetes clusters on Linode with Terraform
TL;DR: In this article, you will learn how to create Kubernetes clusters on Linode Kubernetes Engine (LKE) with the Linode CLI and Terraform. By the end of the tutorial, you will automate creating three clusters (dev, staging, and prod) (complete with an Ingress controller ready to serve live traffic).https://learnk8s.io/terraform-lke