Breaking down and fixing etcd cluster
https://itnext.io/breaking-down-and-fixing-etcd-cluster-d81e35b9260d
https://itnext.io/breaking-down-and-fixing-etcd-cluster-d81e35b9260d
10 Kubernetes Security Context settings you should understand
1. runAsNonRoot
2. runAsUser / runAsGroup
3. seLinuxOptions
4. seccompProfile
5. privileged / allowPrivilegeEscalation
6. capabilities
7. readonlyRootFilesystem
8. procMount
9. fsGroup / fsGroupChangePolicy
10. sysctls
https://snyk.io/blog/10-kubernetes-security-context-settings-you-should-understandAWS Cost Allocation Guide: Tagging Best Practices
https://www.duckbillgroup.com/blog/aws-cost-allocation-guide-tagging-best-practices
https://www.duckbillgroup.com/blog/aws-cost-allocation-guide-tagging-best-practices
Migrate from Docker to Containerd in Kubernetes
https://kruyt.org/migrate-docker-containerd-kubernetes
https://kruyt.org/migrate-docker-containerd-kubernetes
Cloud Development Environments: Using Skaffold and Telepresence on Kubernetes for fast dev loops
Build and deploy microservices with Skaffold; Test against remote dependencies with Telepresencehttps://blog.getambassador.io/super-fast-inner-development-loops-for-kubernetes-with-skaffold-and-telepresence-1cd3e42ba665
Как настроить автоматизированные интеграционные тесты во Vue приложении
https://medium.com/maddevs-io/kak-nastroit-avtomatizirovannye-integracionnye-testy-vo-vue-prilozhenii-aab0c07eaa9b
https://medium.com/maddevs-io/kak-nastroit-avtomatizirovannye-integracionnye-testy-vo-vue-prilozhenii-aab0c07eaa9b
Hassle-free multi-tenant K8S clusters management using Argo CD
https://blog.argoproj.io/hassle-free-multi-tenant-k8s-clusters-management-using-argo-cd-7dd35619046a
https://blog.argoproj.io/hassle-free-multi-tenant-k8s-clusters-management-using-argo-cd-7dd35619046a
Tech Stack 101: How to choose a stack of technologies to fit your project
https://maddevs.io/blog/how-to-choose-a-stack-of-technologies-to-fit-your-project
https://maddevs.io/blog/how-to-choose-a-stack-of-technologies-to-fit-your-project
HTTPWTF
HTTP is fundamental to modern development, from frontend to backend to mobile. But like any widespread mature standard, it's got some funky skeletons in the closet.https://httptoolkit.tech/blog/http-wtf
K8GB - Kubernetes Global Balancer
A Global Service Load Balancing solution with a focus on having cloud native qualities and work natively in a Kubernetes context.https://github.com/AbsaOSS/k8gb
3 Things to know when moving to public cloud
https://blog.mangoteque.com/blog/2021/02/22/3-things-to-know-when-moving-to-public-cloud
https://blog.mangoteque.com/blog/2021/02/22/3-things-to-know-when-moving-to-public-cloud
Shifting Engineering Right: What security engineers can learn from DevSecOps
https://segment.com/blog/shifting-engineering-right
https://segment.com/blog/shifting-engineering-right
Key metrics for monitoring AWS Fargate
https://www.datadoghq.com/blog/aws-fargate-metrics
How to collect metrics and logs from AWS Fargate workloads
https://www.datadoghq.com/blog/tools-for-collecting-aws-fargate-metrics/
https://www.datadoghq.com/blog/aws-fargate-metrics
How to collect metrics and logs from AWS Fargate workloads
https://www.datadoghq.com/blog/tools-for-collecting-aws-fargate-metrics/
conprof - Continuous Profiling
Conprof is a continuous profiling project. Continuous profiling is the act of taking profiles of programs in a systematic way. Conprof collects, stores and makes profiles available to be queried over time.https://github.com/conprof/conprof
4 things you didn’t know you could do with GitHub Actions
https://github.blog/2021-03-04-4-things-you-didnt-know-you-could-do-with-github-actions
https://github.blog/2021-03-04-4-things-you-didnt-know-you-could-do-with-github-actions
Kubernetes deployment strategies
In Kubernetes there is few different way to release an application, you have to carefully choose the right strategy to make your infrastructure resilient.https://github.com/ContainerSolutions/k8s-deployment-strategies
- recreate: terminate the old version and release the new one
- ramped: release a new version on a rolling update fashion, one after the other
- blue/green: release a new version alongside the old version then switch traffic
- canary: release a new version to a subset of users, then proceed to a full rollout
- a/b testing: release a new version to a subset of users in a precise way (HTTP headers, cookie, weight, etc.). This doesn’t come out of the box with Kubernetes, it imply extra work to setup a smarter loadbalancing system (Istio, Linkerd, Traeffik, custom nginx/haproxy, etc).
- shadow: release a new version alongside the old version. Incoming traffic is mirrored to the new version and doesn't impact the response.