DevOps & SRE notes

AWS Attack Path Management Tool - Walking on the Moon

https://github.com/hotnops/apeman

Monitoring inter-pod traffic at the Azure level is critical for performance and security. This article introduces Retina, an eBPF-based tool for enhanced visibility.

https://medium.com/@j.aslanov94/monitoring-inter-pod-traffic-at-the-az-level-with-ebpf-based-tool-retina-7a79818e305b

Building perfect infrastructure requires thoughtful design and the right tools. This blogpost explores how Pulumi helps achieve scalable, maintainable infrastructure.

https://www.pulumi.com/blog/your-perfect-infrastructure/

⎈ Multi pod and container log tailing for Kubernetes

https://github.com/stern/stern

A tool for working with stacked PRs on github.

https://github.com/modular/stack-pr

Migrating Terraform state from Terraform Cloud to S3 is a practical solution for enhanced flexibility and control. This article guides you through the migration process.
https://medium.com/aws-specialists/migrating-terraform-state-from-terraform-cloud-to-s3-86578bcdc7fa

Migrating from RDS to DynamoDB can be complex, but the dual-write strategy offers a reliable solution. This article walks through the process and key considerations.

https://dzone.com/articles/migration-from-rds-to-dynamodb-with-the-dual-write-strategy

Kubernetes in Kubernetes

https://github.com/rancher/k3k

git and git flow cheat sheet

https://github.com/arslanbilal/git-cheat-sheet

EC2 Auto Scaling is powerful but not a one-size-fits-all solution. This article explores its limitations and when to consider alternative approaches.

https://dzone.com/articles/why-ec2-autoscaling-isnt-a-silver-bullet

Understanding Kubernetes security threats requires a practical approach. This analysis breaks down the Kubernetes Threat Matrix and its real-world implications.

https://medium.com/beyond-devsecops/a-pragmatic-look-at-the-kubernetes-threat-matrix-d58504e926b5

Making on-call suck less for engineers

https://github.com/opslane/opslane

A cli tool to help discover deprecated apiVersions in Kubernetes

https://github.com/FairwindsOps/pluto

Managing Argo Workflows across multiple clusters can be challenging but rewarding. This piece explores how Kubestellar simplifies orchestration and scalability. #Kubernetes

https://dettori.medium.com/harnessing-the-power-of-multi-cluster-argo-workflows-with-kubestellar-9dd5582e76bb

Caching can be unpredictable, but understanding its nuances is essential for performance optimization. This story explores the challenges and quirks of caching at scale.
https://blog.cloudflare.com/sometimes-i-cache/

Easy and Repeatable Kubernetes Development

https://github.com/GoogleContainerTools/skaffold

Terraform runtime TUI 🫧

https://github.com/magodo/pipeform

Architectural work follows certain unwritten laws that shape decision-making and long-term success. This blogpost explores key principles that every architect should consider.

https://www.ufried.com/blog/laws_of_architectural_work/

Navigating Kubernetes network policies can be complex, but understanding them is crucial for security. This guide breaks down modern approaches to managing traffic within clusters.

https://buoyant.io/blog/a-guide-to-modern-kubernetes-network-policies

Asynchronous data replication for Kubernetes volumes

https://github.com/backube/volsync