DevOps&SRE Library
18.3K subscribers
456 photos
5 videos
2 files
4.93K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
10 Kubernetes Security Context settings you should understand

1. runAsNonRoot
2. runAsUser / runAsGroup
3. seLinuxOptions
4. seccompProfile
5. privileged / allowPrivilegeEscalation
6. capabilities
7. readonlyRootFilesystem
8. procMount
9. fsGroup / fsGroupChangePolicy
10. sysctls

https://snyk.io/blog/10-kubernetes-security-context-settings-you-should-understand
Migrate from Docker to Containerd in Kubernetes

https://kruyt.org/migrate-docker-containerd-kubernetes
Cloud Development Environments: Using Skaffold and Telepresence on Kubernetes for fast dev loops

Build and deploy microservices with Skaffold; Test against remote dependencies with Telepresence

https://blog.getambassador.io/super-fast-inner-development-loops-for-kubernetes-with-skaffold-and-telepresence-1cd3e42ba665
Как настроить автоматизированные интеграционные тесты во Vue приложении

https://medium.com/maddevs-io/kak-nastroit-avtomatizirovannye-integracionnye-testy-vo-vue-prilozhenii-aab0c07eaa9b
Tech Stack 101: How to choose a stack of technologies to fit your project

https://maddevs.io/blog/how-to-choose-a-stack-of-technologies-to-fit-your-project
HTTPWTF

HTTP is fundamental to modern development, from frontend to backend to mobile. But like any widespread mature standard, it's got some funky skeletons in the closet.

https://httptoolkit.tech/blog/http-wtf
Программистские заповеди от дяди Боба

https://medium.com/maddevs-io/programmers-oath-646e6d3f2136
K8GB - Kubernetes Global Balancer

A Global Service Load Balancing solution with a focus on having cloud native qualities and work natively in a Kubernetes context.

https://github.com/AbsaOSS/k8gb
Shifting Engineering Right: What security engineers can learn from DevSecOps

https://segment.com/blog/shifting-engineering-right
Key metrics for monitoring AWS Fargate

https://www.datadoghq.com/blog/aws-fargate-metrics

How to collect metrics and logs from AWS Fargate workloads

https://www.datadoghq.com/blog/tools-for-collecting-aws-fargate-metrics/
conprof - Continuous Profiling

Conprof is a continuous profiling project. Continuous profiling is the act of taking profiles of programs in a systematic way. Conprof collects, stores and makes profiles available to be queried over time.

https://github.com/conprof/conprof
4 things you didn’t know you could do with GitHub Actions

https://github.blog/2021-03-04-4-things-you-didnt-know-you-could-do-with-github-actions
Kubernetes deployment strategies

In Kubernetes there is few different way to release an application, you have to carefully choose the right strategy to make your infrastructure resilient.

- recreate: terminate the old version and release the new one
- ramped: release a new version on a rolling update fashion, one after the other
- blue/green: release a new version alongside the old version then switch traffic
- canary: release a new version to a subset of users, then proceed to a full rollout
- a/b testing: release a new version to a subset of users in a precise way (HTTP headers, cookie, weight, etc.). This doesn’t come out of the box with Kubernetes, it imply extra work to setup a smarter loadbalancing system (Istio, Linkerd, Traeffik, custom nginx/haproxy, etc).
- shadow: release a new version alongside the old version. Incoming traffic is mirrored to the new version and doesn't impact the response.

https://github.com/ContainerSolutions/k8s-deployment-strategies