DevOps & SRE notes

kubectl-validate is a SIG-CLI subproject to support the local validation of resources for native Kubernetes types and CRDs.

https://github.com/kubernetes-sigs/kubectl-validate

A post by Jorge Tovar walks through achieving zero‑downtime deployments in AWS using OpenTofu/Terraform, SAM, and Ansible, covering blue/green, canary, rolling, and immutable infrastructure strategies

https://dev.to/aws-builders/zero-downtime-deployment-in-aws-with-tofuterraform-and-sam-14d6

A blogpost by Artem Dinaburg on Trail of Bits shows how provisioning cloud infrastructure “the wrong way, but faster” produces working code riddled with weak security flaws—like hard‑coded passwords and pseudo‑random values from Python’s random module

https://blog.trailofbits.com/2024/08/27/provisioning-cloud-infrastructure-the-wrong-way-but-faster/

tfreveal shows a Terraform plan with all the secret (sensitive) values revealed

https://github.com/breml/tfreveal

Daniel Guala explores how Kubernetes Pods can be equipped with multiple network interfaces using Multus CNI and the NMState Operator. This article discusses the integration of these tools to enhance network flexibility and customization in Kubernetes applications.

https://medium.datadriveninvestor.com/can-a-kubernetes-pod-have-more-than-one-network-attached-6d78456dbeb2

🚨 Collection of Prometheus alerting rules

https://github.com/samber/awesome-prometheus-alerts

TUI explorer application for Amazon S3 (AWS S3) 🪣

https://github.com/lusingander/stu

ClickHouse engineers detail their migration to AWS Graviton processors, highlighting significant performance and efficiency gains for their cloud services. This article outlines the transition from x86 to ARM architecture, emphasizing the benefits of Graviton4's enhanced throughput and energy efficiency in handling data-intensive workloads.

https://clickhouse.com/blog/graviton-boosts-clickhouse-cloud-performance

Taranis Tech demonstrates how they extended ArgoCD's capabilities by developing a custom Config Management Plugin (CMP) to deploy dynamic Kubernetes objects. This article details their approach to generating manifests via remote scripts, enabling flexible deployments for ephemeral environments.

https://medium.com/taranis-ag/how-we-used-argocd-management-plugin-to-deploy-dynamic-objects-76a59f0309b8

csi storage for container orchestration systems

https://github.com/democratic-csi/democratic-csi

Declarative Intent Driven Platform Orchestrator for Internal Developer Platform (IDP).

https://github.com/KusionStack/kusion

Fernando Borretti critiques SQL's limitations in testing and business logic reuse, proposing composable, statically-typed query fragments—'functors'—as a solution. This article explores how functors can enhance modularity, testability, and maintainability in complex SQL systems.

https://borretti.me/article/composable-sql

Tobias Andersen demonstrates how to architect a multi-cluster Kafka environment using Strimzi on Kubernetes. This article details the setup of two Kafka clusters with MirrorMaker2 for cross-cluster replication, ensuring high availability and scalability for the Heimdall platform.

https://medium.com/@ZaradarTR/multi-cluster-kafka-with-strimzi-io-fafd36c2b413

Generate AWSCC Documentation with Bedrock and Anthropic Computer Use

https://github.com/aws-samples/generate-awscc-with-bedrock-claude-computer-use

🌍 Terraform Model Context Protocol (MCP) Tool - An experimental CLI tool that enables AI assistants to manage and operate Terraform environments. Supports reading Terraform configurations, analyzing plans, applying configurations, and managing state with Claude Desktop integration.

https://github.com/nwiizo/tfmcp

Ahmet Alp Balkan offers a candid look into the common pitfalls developers face when building Kubernetes controllers. This essay outlines practical patterns and anti-patterns—from CRD design to reconciliation logic—that can make or break production-grade controllers.


https://ahmet.im/blog/controller-pitfalls/

Oilbeater presents k8gb as a standout open-source GSLB solution, seamlessly integrating with Kubernetes to manage cross-cluster domain names and traffic with minimal external dependencies. This blogpost delves into how k8gb leverages DNS protocols to achieve automated, multi-cloud traffic routing and disaster recovery, positioning it as a top choice for cloud-native environments.


https://oilbeater.com/en/2024/04/18/k8gb-best-cloudnative-gslb/

Expert Parallelism Load Balancer

https://github.com/deepseek-ai/EPLB

JIRA integration for Prometheus Alertmanager

https://github.com/prometheus-community/jiralert

Instant's engineering team shares their journey of upgrading an Aurora Postgres instance to version 16 with zero downtime. This experience report details the challenges faced, including performance bottlenecks and failed upgrade attempts, ultimately leading to a successful migration strategy.

https://www.instantdb.com/essays/pg_upgrade