DevOps & SRE notes

Multi-tenancy in Kubernetes allows for better resource isolation and management across different teams or workloads within the same cluster. This article from Loft compares various multi-tenancy options in Kubernetes, including namespace-based isolation, virtual clusters, and physical cluster separation. Learn about the pros and cons of each approach and discover which solution might be the best fit for your use case, helping you achieve efficient and secure multi-tenancy in Kubernetes environments.

https://www.loft.sh/blog/comparing-multi-tenancy-options-in-kubernetes

Ensuring idempotence in CI/CD pipeline build steps is key to maintaining consistent and predictable deployments. This article explores the importance of idempotence and provides practical insights for achieving it in your workflows.

https://dev.to/tutunak/why-idempotence-matters-in-cicd-pipeline-build-steps-4ka

A simple and minimal command-line snippet manager

https://github.com/mehran-prs/snip

Simplifying and securing access to Azure resources is crucial for protecting cloud environments. This article from ITNEXT explores the differences between Managed Identity and Workload Identity in Azure, highlighting how each approach works for authentication and resource management. Learn how to choose the best method for securing your applications and services, and understand the advantages of each in terms of security, simplicity, and scalability.

https://itnext.io/simplify-secure-your-azure-resources-managed-identity-vs-workload-identity-fe49d133fc03

Storing configuration in container registries, rather than in Git, offers several advantages for managing cloud-native applications. This article by Brian Grant explores the benefits of using container registries for configuration storage, such as improved security, versioning, and integration with Kubernetes workflows. Learn how this approach can simplify configuration management, streamline updates, and enhance the security of your containerized applications.

https://medium.com/@bgrant0607/advantages-of-storing-configuration-in-container-registries-rather-than-git-b4266dc0c79f

Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

https://github.com/EwenQuim/entropy

Think tmux, then aim... lower

https://github.com/shell-pool/shpool

Interactive grep (for streaming)

https://github.com/ynqa/sig

Managing a container platform at scale requires robust tools and strategies. This article from Adi Does Code explores how Adidas handles their container platform, detailing the architecture, challenges, and solutions they've implemented to manage workloads efficiently. Learn about their approach to Kubernetes, automation, and monitoring, and how they optimize performance and reliability across their containerized infrastructure.

https://medium.com/adidoescode/adidas-how-we-are-managing-a-container-platform-1-3-6ce24e756490

Adopting a modular approach to CLI tools, particularly with Terraform, can greatly improve scalability and maintainability in infrastructure as code. This article from Leaner Cloud explores how to structure Terraform using modular building blocks, making it easier to manage complex cloud infrastructure. Learn best practices for organizing Terraform modules and creating reusable components to streamline deployments and improve collaboration.

https://leanercloud.beehiiv.com/p/adopting-model-cli-tools-terraform-building-blocks

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

https://github.com/parca-dev/parca

Organize Kubernetes manifests in TypeScript.

https://github.com/tommy351/kosko

Managing multiple environments in Kubernetes can be complex, but using tools like Flux and vCluster can streamline the process. This article by Fra Bernhardt explains how to set up a multi-environment Kubernetes infrastructure on AWS, leveraging Flux for GitOps-driven automation and vCluster for managing lightweight virtual clusters. Learn how this combination simplifies environment management and enhances scalability and flexibility in your DevOps workflows.

https://medium.com/@fra.bernhardt/streamlining-devops-multi-environment-kubernetes-setup-with-flux-and-vcluster-on-aws-6ee83457c08c

An app that helps you monitor your Kubernetes cluster, debug critical deployments, and gives recommendations for standard practices.

https://github.com/kubeshop/botkube

Backing up your Git repositories is essential for safeguarding code and ensuring availability in case of data loss or corruption. This article by Mathieu Larose provides a guide on how to effectively back up Git repositories, covering various strategies such as mirroring, automated backups, and cloud storage solutions. Learn the best practices to ensure your Git repositories are securely backed up and recoverable at all times.

https://mathieularose.com/git-backup

Understanding Kubernetes API groups and versions is key to managing resources and ensuring compatibility as Kubernetes evolves. This article from DevOps Voyager explores Kubernetes API groups and versions, detailing how they are structured and their importance in organizing and extending the Kubernetes API. Learn how to effectively navigate and use different API groups and versions to manage workloads and ensure backward compatibility in your clusters.

https://devopsvoyager.hashnode.dev/exploring-kubernetes-api-groups-and-versions

Kubernetes and virtual machines are both popular choices for deploying applications, but they serve different purposes and offer unique advantages. This article from iximiuz.com compares Kubernetes with virtual machines, highlighting their key differences in terms of resource management, scalability, and use cases. Learn which technology best suits your needs depending on your application's architecture and operational requirements.

https://iximiuz.com/en/posts/kubernetes-vs-virtual-machines/

Drive Terraform at terminal velocity.

https://github.com/leg100/pug

DevOps & SRE notes pinned a photo

🚀 Join our AWS Workshop on November 21st! 🚀

We are excited to announce that on Thursday, November 21st, we are hosting an AWS Workshop "One Observability Workshop", open to everyone!

☁️ November 21, 2024
☁️ Free of charge
☁️ Online
☁️ English

This workshop provides hands-on experience with a wide variety of tools AWS offers for monitoring and observability.

The workshop will be led by Sergey Kirgizov, an AWS expert and Cloud Engineering Manager I at EPAM Systems.

We will provide a dedicated training account for each participant who registers via the Google Form (https://forms.gle/EeEPVPNCUGfc18Qq7). However, you can also use your personal AWS account to participate.

IMPORTANT: Please make sure to complete the Google Form https://forms.gle/EeEPVPNCUGfc18Qq7 registration by 22:00 UTC+2 on November 20th.

Find out more details and register for the workshop via the link below:
https://wearecommunity.io/events/one-observability-workshop