DevOps & SRE notes

This article explores the integration of Varnish with Istio in a Kubernetes environment to achieve efficient caching and load balancing. By leveraging Istio's consistent hash-based load balancing, Varnish instances can be optimized to handle requests of the same type, ensuring that equivalent requests are routed to the same Varnish instance, thus maintaining high cache effectiveness and reducing latency.

https://medium.com/hamburger-berater-team/varnish-sharding-with-istio-in-kubernetes-402f313919aa

Just a little golang TUI to track git tag releases on github

https://github.com/jonaburg/nodebro

🙌 OpenHands: Code Less, Make More

https://github.com/All-Hands-AI/OpenHands

This post delves into the process of automating container image updates using Flux and GitHub Actions, highlighting how these tools can streamline application management by ensuring that applications always run with the latest and most secure images. By leveraging GitOps principles, users can automate the update of image tags in their Git repository, reducing manual errors and enhancing deployment efficiency across different environments.

https://dev.to/infracloud/automatic-image-update-to-git-using-flux-and-github-actions-3c4f

This essay examines the shift in AWS's strategy as it begins to deprecate numerous services, marking the end of its "Everything Cloud" era. By focusing on core infrastructure services like EC2 and S3, AWS aims to optimize its offerings and redirect resources to more profitable areas, although this move introduces uncertainty about the longevity of new services.

https://newsletter.goodtechthings.com/p/the-end-of-the-everything-cloud

eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.

https://github.com/loxilb-io/loxilb

~ TUI tool for docker ~

https://github.com/pommee/Pocker

This piece discusses how FinOps can transform IT cost centers into value drivers by optimizing financial management and operations. By implementing FinOps practices, organizations can shift from merely managing costs to driving business value through better resource allocation, improved forecasting, and enhanced collaboration between IT and finance teams.

https://thenewstack.io/finops-can-turn-it-cost-centers-into-a-value-driver/

This essay delves into the practical aspects of Kubernetes security using a hands-on training simulator developed by ControlPlane. The simulator offers a unique approach to learning container and Kubernetes security by deploying a vulnerable cluster in AWS and guiding users through scenarios to identify and fix security vulnerabilities, all in a fun Capture-the-Flag format.

https://blog.palark.com/kubernetes-security-practical-training-simulator/

Automated resources sizing tool for containers in kubernetes

https://github.com/unagex/kondense

A task runner / simpler Make alternative written in Go

https://github.com/go-task/task

This tutorial explores the integration of Kluctl with Cluster API, showcasing how Kluctl can efficiently manage Kubernetes clusters by leveraging its templating and deployment capabilities. By using Kluctl, users can manage multiple workload clusters with a unified CLI, benefiting from features like templating, which simplifies the management of complex deployments without requiring extensive copy-pasting or patching. The tutorial demonstrates setting up a local environment using Kind and deploying a workload cluster with Kluctl.

https://kluctl.io/blog/2024/03/13/cluster-api-kluctl/

This blogpost explores the deployment of large language models (LLMs) using a combination of Google Kubernetes Engine (GKE), Google Gemma, and the Ollama framework, highlighting the benefits of customization, flexibility, and cost-effectiveness. By leveraging these tools, users can achieve seamless and efficient LLM deployment while maintaining control over their data and environment.

https://medium.com/google-cloud/gke-gemma-ollama-the-power-trio-for-flexible-llm-deployment-5f1fa9223477

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

https://github.com/pythops/oryx

Terrateam is an open-source GitOps CI/CD platform for automating infrastructure workflows. It integrates with GitHub to orchestrate Terraform, OpenTofu, CDKTF, Terragrunt, and Pulumi operations via pull requests.

https://github.com/terrateamio/terrateam

The kubectx for operators.

https://github.com/danielfoehrKn/kubeswitch

The article "Load Testing Kubernetes Clients Without Breaking the Bank" on *itnext.io* likely discusses strategies for conducting load testing on Kubernetes clients in a cost-effective manner. Load testing is crucial for ensuring that applications can handle increased traffic and usage without performance degradation, and doing so efficiently is important for businesses with limited budgets.

https://itnext.io/load-testing-kubernetes-clients-without-breaking-the-bank-f43332faa6ce

In this post, Rachel explores the frustrations of debugging lag issues in distributed systems, highlighting how subtle timing problems can cascade into larger failures. Through real-world anecdotes, the article underscores the importance of understanding system behavior and addressing latency with precision.

https://rachelbythebay.com/w/2025/01/09/lag/

This article delves into the "hot shard problem," a common challenge in distributed systems where uneven data distribution leads to resource saturation on specific shards. It outlines practical solutions, including vertical scaling, caching, load balancing, and selecting optimal sharding keys, to ensure system performance and reliability.

https://newsletter.scalablethread.com/p/how-to-handle-hot-shard-problem

Helps you search and filter resource instances from the output file generated by terraform validate -json or tofu validate -json

https://github.com/ivica-k/terraform-validate-explorer