Software Security at Rocketship Pace
A deep dive into Afterpay's journey developing a modern code scanning program.https://www.afterpaytechblog.com/software-security-at-rocketship-pace
cosign
Container Signing, Verification and Storage in an OCI registry.https://github.com/sigstore/cosign
Balancing act: the current limits of AWS network load balancers
https://ably.com/blog/limits-aws-network-load-balancers
https://ably.com/blog/limits-aws-network-load-balancers
A Journey Into SRE
This blog is about how a group of hard-working individuals, with unique skills and working methods, managed to create a successful SRE team.https://www.algolia.com/blog/engineering/a-journey-into-sre
reproxy
Reproxy is simple edge HTTP(s) server / reverse proxy supporting various providers (docker, static, file). One or more providers supply information about requested server, requested url, destination url and health check url. Distributed as a single binary or as a docker container.https://github.com/umputun/reproxy
Its Steal Time!
После того, как администратор узнает про steal time, он может по-настоящему предъявить своему облачному провайдеру за то, что тот крадет процессорное время его виртуалки!https://alexzzz.ru/post/its-steal-time
Building the world's fastest website analytics
In March 2021, we moved all of our analytics data to the database of our dreams.
https://usefathom.com/blog/worlds-fastest-analyticsKubernetes Single Sign On - A detailed guide
In this series of posts we cover how to setup a comprehensive group based single sign on system for Kubernetes including the kubectl cli, any web application with ingress, a docker registry and gitea. We'll cover most of the common SSO models so adapting what's here to other applications such as Gitlab, Kibana, Grafana etc is simple.https://www.talkingquickly.co.uk/kubernetes-sso-a-detailed-guide
ngx_waf
A web application firewall module for nginx without complex configuration.
https://github.com/ADD-SP/ngx_wafPostgREST
PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.https://postgrest.org/en/stable
Provisioning Kubernetes clusters on Linode with Terraform
TL;DR: In this article, you will learn how to create Kubernetes clusters on Linode Kubernetes Engine (LKE) with the Linode CLI and Terraform. By the end of the tutorial, you will automate creating three clusters (dev, staging, and prod) (complete with an Ingress controller ready to serve live traffic).https://learnk8s.io/terraform-lke
git-xargs
git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command.https://github.com/gruntwork-io/git-xargs
How to compare the performance of different HashiCorp Vault backends
https://blog.flant.com/comparing-hashicorp-vault-backends-performance
https://blog.flant.com/comparing-hashicorp-vault-backends-performance
Winning with Docker Pinning
In this article, we explore how Docker tags work, the risks and benefits of using them, and a mechanism for pinning to specific digests to bring us closer to reproducible builds.https://blog.atomist.com/docker-image-tags
Nobody Cares About the Operating System Anymore
https://www.lastweekinaws.com/blog/nobody-cares-about-the-operating-system-anymore
https://www.lastweekinaws.com/blog/nobody-cares-about-the-operating-system-anymore
volcano
Volcano is a batch system built on Kubernetes. It provides a suite of mechanisms that are commonly required by many classes of batch & elastic workload including: machine learning/deep learning, bioinformatics/genomics and other "big data" applications. These types of applications typically run on generalized domain frameworks like TensorFlow, Spark, PyTorch, MPI, etc, which Volcano integrates with.https://github.com/volcano-sh/volcano