DevOps & SRE notes

Underlay and RDMA network solution of the Kubernetes, for bare metal, VM and any public cloud

https://github.com/spidernet-io/spiderpool

This article introduces a cost-effective strategy for combining AWS WAF with reactive infrastructure to block attackers without exceeding budget constraints. By leveraging the WAF-Ja3FingerPrint-Blacklist Terraform module, it dynamically reconfigures WAF rules based on traffic analysis, reducing the expense of advanced rules like Account Theft Protection while maintaining robust security.

https://dev.to/aws-builders/combine-aws-waf-with-reactive-infrastructure-to-block-attackers-and-dont-go-broke-in-the-process-2jpb

This post critiques the casual metaphors used to describe Facebook's 2021 outage, arguing that such language trivializes preventable engineering failures and undermines accountability. By examining historical disasters like the Grover Shoe Factory explosion, the article emphasizes the need for rigorous engineering standards to ensure safety and reliability in critical infrastructure.

https://www.flyingpenguin.com/?p=64164

Static Code Analyser for Infrastructure-as-Code languages such as CloudFormation and Terraform as well as DevOps like Docker and Kubernetes

https://github.com/SonarSource/sonar-iac

This driver allows Kubernetes to access NFS server on Linux node.

https://github.com/kubernetes-csi/csi-driver-nfs

isd (interactive systemd) – a better way to work with systemd units

https://github.com/isd-project/isd

Mercari's Microservices Platform Network team outlines the company's successful migration from Fastly to Cloudflare, emphasizing strategies to ensure minimal disruptions. This blogpost also introduces future initiatives like "CDN as a Service," aimed at empowering developers through tools such as CDN Kit and automated permission systems.

https://engineering.mercari.com/en/blog/entry/20241223-a-smooth-cdn-provider-migration-and-future-initiatives/

A K8s operator to reduce CO2 footprint of your clusters

https://github.com/kube-green/kube-green

A Kubernetes ConfigMap and Secrets reflector with a strong emphasis on security and performance

https://github.com/lab42/mirror/tree/main

Yan Cui dives into the complexities of end-to-end testing for microservices spanning bounded contexts, offering practical strategies for balancing team responsibilities and testing approaches. This article highlights tools like Pact, WireMock Cloud, and Cypress to streamline testing while fostering collaboration across diverse organizational structures.

https://theburningmonk.com/2024/12/how-to-e2e-test-microservices-across-bounded-contexts/

To bridge critical gaps in production issue resolution, this blogpost explores how observability was built using Google Cloud services. By leveraging tools like OpenTelemetry and Google Cloud Trace Explorer, the author demonstrates how traceability and logging enhancements can optimize debugging and system performance monitoring.

https://punits.dev/blog/building-observability-with-google-cloud-services/

The modern API client that lives in your terminal.

https://github.com/darrenburns/posting

kubectl plugin to duplicate resources in a Kubernetes cluster.

https://github.com/Telemaco019/duplik8s

Reflecting on the challenges of facilitating post-incident reviews, Will Gallego shares insights into what went wrong during a recent meeting and how over-reliance on familiar methods can hinder progress. This blogpost offers a candid look at the nuances of facilitation and the lessons learned from navigating complex team dynamics.

https://willgallego.com/2025/01/11/an-incident-review-of-an-incident-review/?utm_source=chatgpt.com

The journey beyond the staff engineer role requires new perspectives and skills. This blogpost explores what comes after reaching this level in your engineering career.

https://blog.alexewerlof.com/p/beyond-staff-engineer

KUbernetes Test TooL (kuttl)

https://github.com/kudobuilder/kuttl

A General-Purpose Versioned-Dependency Manager

https://github.com/opensourcecorp/vdm

Understanding the principles of OCC and isolation is essential for maintaining consistency in databases. This blogpost dives into these concepts and their real-world applications.

https://brooker.co.za/blog/2024/12/17/occ-and-isolation.html

Highly synchronized clocks play a crucial role in distributed systems. This blogpost explores how they enhance performance and reliability in cloud environments.

https://muratbuffalo.blogspot.com/2024/12/utilizing-highly-synchronized-clocks-in.html

Global control plane tracing for Kubernetes

https://github.com/kubewharf/kelemetry