Kubernetes Single Sign On - A detailed guide
In this series of posts we cover how to setup a comprehensive group based single sign on system for Kubernetes including the kubectl cli, any web application with ingress, a docker registry and gitea. We'll cover most of the common SSO models so adapting what's here to other applications such as Gitlab, Kibana, Grafana etc is simple.https://www.talkingquickly.co.uk/kubernetes-sso-a-detailed-guide
ngx_waf
A web application firewall module for nginx without complex configuration.
https://github.com/ADD-SP/ngx_wafPostgREST
PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.https://postgrest.org/en/stable
Provisioning Kubernetes clusters on Linode with Terraform
TL;DR: In this article, you will learn how to create Kubernetes clusters on Linode Kubernetes Engine (LKE) with the Linode CLI and Terraform. By the end of the tutorial, you will automate creating three clusters (dev, staging, and prod) (complete with an Ingress controller ready to serve live traffic).https://learnk8s.io/terraform-lke
git-xargs
git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command.https://github.com/gruntwork-io/git-xargs
How to compare the performance of different HashiCorp Vault backends
https://blog.flant.com/comparing-hashicorp-vault-backends-performance
https://blog.flant.com/comparing-hashicorp-vault-backends-performance
Winning with Docker Pinning
In this article, we explore how Docker tags work, the risks and benefits of using them, and a mechanism for pinning to specific digests to bring us closer to reproducible builds.https://blog.atomist.com/docker-image-tags
Nobody Cares About the Operating System Anymore
https://www.lastweekinaws.com/blog/nobody-cares-about-the-operating-system-anymore
https://www.lastweekinaws.com/blog/nobody-cares-about-the-operating-system-anymore
volcano
Volcano is a batch system built on Kubernetes. It provides a suite of mechanisms that are commonly required by many classes of batch & elastic workload including: machine learning/deep learning, bioinformatics/genomics and other "big data" applications. These types of applications typically run on generalized domain frameworks like TensorFlow, Spark, PyTorch, MPI, etc, which Volcano integrates with.https://github.com/volcano-sh/volcano
Advice for someone moving from SRE to backend engineering
https://shoreline.io/advice-for-someone-moving-from-sre-to-backend-engineering
https://shoreline.io/advice-for-someone-moving-from-sre-to-backend-engineering
How we scaled the GitHub API with a sharded, replicated rate limiter in Redis
https://github.blog/2021-04-05-how-we-scaled-github-api-sharded-replicated-rate-limiter-redis
https://github.blog/2021-04-05-how-we-scaled-github-api-sharded-replicated-rate-limiter-redis
Learning from incidents: getting Sidekiq ready to serve a billion jobs
https://tech.scribd.com/blog/2020/sidekiq-incident-learnings.html
https://tech.scribd.com/blog/2020/sidekiq-incident-learnings.html
Postgres is Out of Disk and How to Recover: The Dos and Don'ts
https://blog.crunchydata.com/blog/postgres-is-out-of-disk-and-how-to-recover-the-dos-and-donts
https://blog.crunchydata.com/blog/postgres-is-out-of-disk-and-how-to-recover-the-dos-and-donts
Trying out Cosign
Container image signing has been a bit of a gap in the security landscape, so I’m always interested in seeing new projects starting up which address it.https://raesene.github.io/blog/2021/03/21/Trying-out-cosign
Using Telepresence 2 for Kubernetes debugging and local development
https://codefresh.io/kubernetes-tutorial/telepresence-2-local-development
https://codefresh.io/kubernetes-tutorial/telepresence-2-local-development