osiris
https://github.com/deislabs/osiris
Osiris enables greater resource efficiency within a Kubernetes cluster by allowing idling workloads to automatically scale-to-zero and allowing scaled-to-zero workloads to be automatically re-activated on-demand by inbound requests.
https://github.com/deislabs/osiris
Case Study: IT Modernization at Tidepool, an 8 part series
https://www.solo.io/blog/case-study-it-modernization-at-tidepool-an-8-part-series
Part 1: Migrating to Kubernetes - https://medium.com/@derrickburns/modernizing-tidepool-part-1-migrating-to-kubernetes-e3361379a3d6 -
https://www.solo.io/blog/case-study-it-modernization-at-tidepool-an-8-part-series
Part 1: Migrating to Kubernetes - https://medium.com/@derrickburns/modernizing-tidepool-part-1-migrating-to-kubernetes-e3361379a3d6 -
How they chose cloud hosted Kubernetes, migrating from Docker Compose to Kubernetes and the tools used to help the process.
Part 2: API Gateway - https://medium.com/@derrickburns/modernizing-tidepool-part-2-api-gateway-c6597b160fca - Discusses the required functionality, selection criteria and migration process from a custom solution to Gloo, our Kubernetes native API gateway built with Envoy Proxy.
Part 3: Continuous Delivery with GitOps - https://medium.com/@derrickburns/modernizing-tidepool-part-3-continuous-delivery-with-gitops-5b9c3b20c119 - As a way to manage implementing change to their running services, this article digs how GitOps is different than traditional configuration management and ideal for Kubernetes.
Part 4: Secrets Management - https://medium.com/@derrickburns/modernizing-tidepool-part-4-secrets-management-219db93aa809 - This post specifically addresses how they protect the system secrets that are used to encrypt data or verify identity within the context of their new Kubernetes environment.
Part 5: Using a Service Mesh - https://medium.com/@derrickburns/modernizing-tidepool-part-5-using-a-service-mesh-cd62788d3ec0 - As a healthcare company, HIPAA requires that all communication of protected health information (PHI) must be encrypted at flight and rest. Tidepool looked to Linkerd service mesh for mTLS across the intra-cluster communications.
Part 6: Migrating to a Hosted Mongodb - https://medium.com/@derrickburns/modernizing-tidepool-part-6-migrating-to-a-hosted-mongodb-dcd17ecbafb8 - Already a MongoDB user, the modernization initiative had the team take a fresh look at the performance, reliability and operational efficiency of their database as it has grown to over 2B records. This post details the migration from a self-hosted to a managed service from MongoDB.
Part 7: Logging - https://medium.com/@derrickburns/modernizing-tidepool-part-7-logging-aa3c9eff197c - All systems require observation and access to the logs created to understand what’s happening, especially when issues arise that need to be debugged. This post shows how the team has set up their logging systems today, their approach to looking at the right data, and how they are continuing to evolve.
Part 8: Provisioning - https://medium.com/@derrickburns/modernizing-tidepool-part-8-provisioning-6bdbe9519e0a - For anyone running Kubernetes in production or more than one cluster, this post details a provisioning process and available tools that can help with templating.
magicpak
https://github.com/coord-e/magicpak
magicpak enables you to build minimal docker images without any bothersome preparation such as static linking.
https://github.com/coord-e/magicpak
Regular Expressions for Regular Folk
https://refrf.shreyasminocha.me
This is an experimental “book” about regular expressions. It is largely visual and example-based, as opposed to most regex resources I found while I was learning. I also attempted to choose test cases that highlight some common gotchas. I think it’ll be worth your time.
https://refrf.shreyasminocha.me
Attack matrix for Kubernetes
https://www.microsoft.com/security/blog/2020/04/02/attack-matrix-kubernetes
https://www.microsoft.com/security/blog/2020/04/02/attack-matrix-kubernetes
Разбор задач DevOps инженера, который работает в криптовалютном проекте (криптокошелек)
Серия обучающих видео от Кирилла Семаева.
Задачи DevOps инженера на примере криптовалютных проектов - https://youtu.be/C_Fzl5d3XYY
Пример задач DevOps-инженера работающего с биткойном и прочими криптовалютами - https://youtu.be/oj-eoSpC6bs
Пример задачи Devops-инженера по стабилизации/оптимизации/ускорению приложения - https://youtu.be/shbXsBzNIcE
Серия обучающих видео от Кирилла Семаева.
Задачи DevOps инженера на примере криптовалютных проектов - https://youtu.be/C_Fzl5d3XYY
Пример задач DevOps-инженера работающего с биткойном и прочими криптовалютами - https://youtu.be/oj-eoSpC6bs
Пример задачи Devops-инженера по стабилизации/оптимизации/ускорению приложения - https://youtu.be/shbXsBzNIcE
Awesome-Kubernetes
https://github.com/ramitsurana/awesome-kubernetes
A curated list for awesome kubernetes sources
https://github.com/ramitsurana/awesome-kubernetes
Simulating Clock Skew in K8s Without Affecting Other Containers on the Node
https://pingcap.com/blog/simulating-clock-skew-in-k8s-without-affecting-other-containers-on-node
https://pingcap.com/blog/simulating-clock-skew-in-k8s-without-affecting-other-containers-on-node
Inside Kinvolk Labs: Investigating Kubernetes performance issues with BPF
https://kinvolk.io/blog/2020/04/inside-kinvolk-labs-investigating-kubernetes-performance-issues-with-bpf
https://kinvolk.io/blog/2020/04/inside-kinvolk-labs-investigating-kubernetes-performance-issues-with-bpf
An (Opinionated) Guide to Understanding Kubernetes Network Architecture
https://blog.getambassador.io/a-guide-to-understanding-kubernetes-network-architecture-e5e6fd7c5a2a
https://blog.getambassador.io/a-guide-to-understanding-kubernetes-network-architecture-e5e6fd7c5a2a
5 AWS Services You Should Avoid!
https://medium.com/teamzerolabs/5-aws-services-you-should-avoid-f45111cc10cd
https://medium.com/teamzerolabs/5-aws-services-you-should-avoid-f45111cc10cd
Encrypting and storing Kubernetes secrets in Git
https://crypt.codemancers.com/posts/2020-04-27-encrypting-and-storing-kubernetes-secrets-in-git
https://crypt.codemancers.com/posts/2020-04-27-encrypting-and-storing-kubernetes-secrets-in-git
Essential Kubernetes Extensions Explained
https://kublr.com/blog/essential-kubernetes-extensions-explained
https://kublr.com/blog/essential-kubernetes-extensions-explained
Multicluster-Scheduler and Argo (Workflows and CD): a Deep Dive
https://itnext.io/multicluster-scheduler-argo-workflows-across-kubernetes-clusters-ea98016499ca
https://itnext.io/multicluster-scheduler-argo-workflows-across-kubernetes-clusters-ea98016499ca
Building a Kubernetes-Based Platform: Progressive Delivery, the Edge, and Observability
https://www.getambassador.io/resources/building-kubernetes-based-platform
https://www.getambassador.io/resources/building-kubernetes-based-platform
Rolling Updates and Blue-Green Deployments with Kubernetes and HAProxy
https://www.haproxy.com/blog/rolling-updates-and-blue-green-deployments-with-kubernetes-and-haproxy
https://www.haproxy.com/blog/rolling-updates-and-blue-green-deployments-with-kubernetes-and-haproxy
Istio Service Mesh in 2020: Envoy In, Control Plane Simplified
https://blog.alcide.io/istio-service-mesh-in-2020
https://blog.alcide.io/istio-service-mesh-in-2020