DevOps & SRE notes

Over two decades of Site Reliability Engineering (SRE) practice have provided valuable insights into maintaining reliable and scalable systems. This article from Google delves into the lessons learned from 20 years of SRE, sharing key practices, challenges, and strategies that have shaped the discipline. Discover the principles that continue to drive successful SRE teams and how they can be applied to modern engineering practices.

https://sre.google/resources/practices-and-processes/twenty-years-of-sre-lessons-learned/

Advanced secret management is essential for securing sensitive data in Kubernetes environments. This article from Ediri.io explores the integration of Pulumi with the Secrets Store CSI Driver to enhance secret management on Kubernetes. Learn how to securely manage and automate secrets, leveraging Pulumi's infrastructure as code capabilities along with Kubernetes-native tools.


https://blog.ediri.io/advanced-secret-management-on-kubernetes-with-pulumi-secrets-store-csi-driver

Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON

https://github.com/johnkerl/miller

Generate documentation from Terraform modules in various output formats

https://github.com/terraform-docs/terraform-docs

Upgrading Kubernetes clusters can be a complex and costly endeavor, especially at scale. This article from Qovery explores the challenges and expenses involved in upgrading hundreds of Kubernetes clusters. Learn about the strategies, tools, and best practices to manage and minimize the costs while ensuring smooth and efficient upgrades.

https://www.qovery.com/blog/the-cost-of-upgrading-hundreds-of-kubernetes-clusters/

Automating secrets rotation is crucial for maintaining security in dynamic environments. This article by Canela Severo explains how to achieve true secrets auto-rotation using External Secrets Operator (ESO) and HashiCorp Vault. Discover the steps to set up and integrate these tools to ensure your secrets are rotated securely and efficiently, enhancing your overall security posture.

https://dev.to/canelasevero/true-secrets-auto-rotation-with-eso-and-vault-1g4o

Tired of pushing to test your .gitlab-ci.yml?

Run gitlab pipelines locally as shell executor or docker executor.

https://github.com/firecow/gitlab-ci-local

Run your GitHub Actions locally 🚀

https://github.com/nektos/act

Ensuring robust security at the cluster level in Kubernetes is paramount. This article from Faun discusses the Pod Security Admission Controller and its role in enforcing security policies across a Kubernetes cluster. Learn how to configure and implement this controller to enhance your cluster's security posture and protect your workloads effectively.

https://faun.pub/pod-security-admission-controller-cluster-level-bda83b80d916

Creating a Kubernetes Operator can significantly enhance the automation and management of your applications. This article from Dev Genius provides a step-by-step guide on how to develop a Kubernetes Operator, covering the essential concepts, tools, and best practices. Learn how to build and deploy your own Operator to streamline operations and improve efficiency in your Kubernetes environment.

https://blog.devgenius.io/how-to-create-a-kubernetes-operator-e2fb3c215e5b

Run your GitHub Actions locally 🚀

https://github.com/nektos/act

An operator to manage ephemeral Kubernetes resources 🐝

https://github.com/NCCloud/mayfly

A Private Terraform Registry

https://github.com/PacoVK/tapir

Terraform drift can lead to discrepancies between your infrastructure and code, posing significant challenges. This article from DragonDrop Cloud discusses the negative impacts of Terraform drift, examining the causes and potential solutions. Understand how to identify and mitigate drift to maintain consistent and reliable infrastructure.

https://dragondrop.cloud/2023/08/10/terraform-drift-the-bad-the-ugly-and-the-black-swan/

Understanding how to effectively use Terraform Check is crucial for maintaining infrastructure as code. This article from Masterpoint.io provides an in-depth look at Terraform Check, explaining its purpose, functionality, and best practices. Learn how to leverage this tool to ensure your Terraform configurations are error-free and compliant with best practices.

https://masterpoint.io/updates/understanding-terraform-check/

The easiest way to bootstrap a self-hosted High Availability Kubernetes cluster. A fully automated HA k3s etcd install with kube-vip, MetalLB, and more. Build. Destroy. Repeat.

https://github.com/techno-tim/k3s-ansible

The technical interview process is a crucial step in hiring top talent, especially in engineering and software development roles. This article from Semaphore CI outlines best practices for designing an effective technical interview process. Learn how to create a fair and comprehensive interview experience that accurately assesses candidates' skills, aligns with your company's needs, and promotes a positive candidate experience.

https://semaphoreci.com/blog/technical-interview-process

SaaS-simple deployment of Kubernetes - on your own hardware.
https://github.com/siderolabs/omni

KubeStellar - a flexible solution for challenges associated with multi-cluster configuration management for edge, multi-cloud, and hybrid cloud

https://github.com/kubestellar/kubestellar

Adopting automated testing is a critical transformation for engineering teams aiming to improve software quality and deployment speed. This article by Vaidik Kapoor explores the journey of adopting automated testing, discussing the benefits, challenges, and strategies for successful implementation. Learn how to integrate automated testing into your development pipeline to enhance efficiency, reduce errors, and accelerate delivery.

https://vaidik.in/engineering-transformations-adopting-automated-testing/