Whoami — The quest of understanding GKE Workload Identity Federation
https://medium.com/google-cloud/whoami-the-quest-of-understanding-gke-workload-identity-federation-e951e5e4a03f
If you’re anything like me then using product features that you don’t fully understand always leaves you with a feeling of unease. Sure, using the feature might even be easy and cheerful at least as long as everything works as expected. We could even leave it at that. However, somewhere in between intrinsic engineering curiosity and the life experience that at some point in the future a deeper understanding will come in handy, we still have the desire to understand and debunk the magic.
https://medium.com/google-cloud/whoami-the-quest-of-understanding-gke-workload-identity-federation-e951e5e4a03f
Kubernetes Pod Policies — imagePullPolicy
https://decisivedevops.com/kubernetes-pod-policies-imagepullpolicy-fd939057a93f
When a pod is launched in Kubernetes, it starts with several policies. In this series, we will understand these policies, starting with imagePullPolicy.
https://decisivedevops.com/kubernetes-pod-policies-imagepullpolicy-fd939057a93f
Kubernetes Pod Policies — terminationMessagePolicy
https://decisivedevops.com/kubernetes-pod-policies-terminationmessagepolicy-c073eb936ef2
Learn practical uses of terminationMessagePolicy in Kubernetes for efficient container debugging and error diagnostics.
https://decisivedevops.com/kubernetes-pod-policies-terminationmessagepolicy-c073eb936ef2
Kubernetes Pod Policies — dnsPolicy
https://decisivedevops.com/kubernetes-pod-policies-dnspolicy-1a70064ec590
Learn key aspects of Kubernetes Pod Policies, focusing on dnsPolicy, including practical insights into configurations like ClusterFirst, Default, and more.
https://decisivedevops.com/kubernetes-pod-policies-dnspolicy-1a70064ec590
Monitor your K8S Cluster costs with kubecost
https://medium.com/@chaisarfati/monitor-your-k8s-cluster-costs-with-kubecost-4a9d64050466
Let’s install kubecost in 1 minute and get a fine grain report of your K8S expenses
https://medium.com/@chaisarfati/monitor-your-k8s-cluster-costs-with-kubecost-4a9d64050466
Waiting for hooks in ArgoCD
https://systemweakness.com/waiting-for-hooks-in-argocd-e5329ec0436c
ArgoCD is a fantastic tool to deploy applications via GitOps. You can defined all your kubernetes manifests in git and have ArgoCD watch them for changes. It’s a very popular product used to manage resources in kubernetes.
There are a couple syncing options that you can use, automated, self health or manually sync. I would love to see some kind of approval process in the future. Let’s build one.
https://systemweakness.com/waiting-for-hooks-in-argocd-e5329ec0436c
podinfo
https://github.com/stefanprodan/podinfo
Podinfo is a tiny web application made with Go that showcases best practices of running microservices in Kubernetes. Podinfo is used by CNCF projects like Flux and Flagger for end-to-end testing and workshops.
https://github.com/stefanprodan/podinfo
kubemod
https://github.com/kubemod/kubemod
KubeMod is a universal Kubernetes mutating operator.
It introduces ModRule - a custom Kubernetes resource that can intercept the deployment of any Kubernetes object and apply targeted modifications to it, or reject it before it is deployed to the cluster.
https://github.com/kubemod/kubemod
How we cut costs by 70% by moving from GCP and CockroachDB into Hetzner and PostgreSQL
https://blog.mikoto.io/building-your-own-cloud-for-fun-and-profit
https://blog.mikoto.io/building-your-own-cloud-for-fun-and-profit
flox
https://github.com/flox/flox
Flox is a virtual environment and package manager all in one. With Flox you create environments that layer and replace dependencies just where it matters, making them portable across the full software lifecycle.
https://github.com/flox/flox
drawdb
https://github.com/drawdb-io/drawdb
DrawDB is a robust and user-friendly database entity relationship (DBER) editor right in your browser. Build diagrams with a few clicks, export sql scripts, customize your editor, and more without creating an account.
https://github.com/drawdb-io/drawdb
redka
https://github.com/nalgeon/redka
Redka aims to reimplement the good parts of Redis with SQLite, while remaining compatible with Redis API.
https://github.com/nalgeon/redka
index_advisor
https://github.com/supabase/index_advisor
A PostgreSQL extension for recommending indexes to improve query performance.
https://github.com/supabase/index_advisor
Generating Infrastructure-as-Code From Existing Cloud Resources
https://www.massdriver.cloud/blogs/generating-infrastructure-as-code-from-existing-cloud-resources
Generating OpenTofu or Terraform from existing cloud resources is a tedious process fraught with gotchas. It's not a silver bullet for click-ops debt. This post will discuss caveats of tools and different approaches to generating IaC.
https://www.massdriver.cloud/blogs/generating-infrastructure-as-code-from-existing-cloud-resources
Lynx
https://github.com/Clivern/Lynx
Lynx is a Fast, Secure and Reliable Terraform Backend. It is built in Elixir with Phoenix framework.
https://github.com/Clivern/Lynx
Graceful shutdown in Kubernetes
https://learnk8s.io/graceful-shutdown
TL;DR: In this article, you will learn how to prevent broken connections when a Pod starts or shuts down. You will also learn how to shut down long-running tasks and connections gracefully.
https://learnk8s.io/graceful-shutdown
Hubble — Observability with Cilium CNI— Kubernetes
https://pankajtechblogs.dev/hubble-observability-with-cilium-kubernetes-6723a3056dfc
https://pankajtechblogs.dev/hubble-observability-with-cilium-kubernetes-6723a3056dfc
Instrument your app using the Datadog Operator and Admission Controller
https://blog.psa-dd.io/instrument-your-app-using-the-datadog-operator-and-admission-controller-a29d1973f7a7
https://blog.psa-dd.io/instrument-your-app-using-the-datadog-operator-and-admission-controller-a29d1973f7a7
alloy
https://github.com/grafana/alloy
Grafana Alloy is an open source OpenTelemetry Collector distribution with built-in Prometheus pipelines and support for metrics, logs, traces, and profiles.
https://github.com/grafana/alloy
Kubernetes Services : Achieving optimal performance is elusive
https://cloudybytes.medium.com/kubernetes-services-achieving-optimal-performance-is-elusive-5def5183c281
This blog is to share with readers the experiences and experimentation results while deploying an on-premise Kubernetes service project.
https://cloudybytes.medium.com/kubernetes-services-achieving-optimal-performance-is-elusive-5def5183c281
Kubernetes is just Linux
https://medium.com/@ericjalal.fi/kubernetes-is-just-linux-c4312666e27b
Linux and Kubernetes share several foundational concepts due to Kubernetes being designed to run and manage containerized applications, with containers themselves being a Linux feature. However, Kubernetes extends far beyond just wrapping Linux features; it provides orchestration capabilities that are not native to Linux; But still in the heart Kubernetes is a wrapper of Linux features.
https://medium.com/@ericjalal.fi/kubernetes-is-just-linux-c4312666e27b