In this article, we describe the issues and challenges that enterprises face when deploying Kubernetes clusters at scale. We also describe how GitOps processes and tools can allow organizations to gain proper control of these highly distributed environments…

Using a Dead Man Switch to monitor our monitoring

When you want to grant administrative access to some of your users while controlling and checking what they do on your systems, you use sudo.

Selecting the correct MTT* metric to improve your incident response is important. If the wrong metric is chosen, the improvements may get lost in the noise of a multivariable equation. This article reviews the various MTT* metrics available and discusses…

Learn how to establish best practices for SLOs and SLIs to build reliable, performant modern systems and services and encourage a culture of SRE.

The whole point of an SBOM is lost if you keep it a secret. Here we reveal our secrets of the ideal SBOM exchange. Let us know if we've missed anything...

Introduction

As microeconomic concepts go, vertical integration is simple enough to understand: per Investopedia, it’s defined as a “strategy that allows a company to streamline its operations by taking direct ownership of various stages of its production process rather…

Silent data corruptions (SDCs), data errors that go undetected by the larger system, are a widespread problem for large-scale infrastructure systems. Left undetected, these types of corruptions can…

Kubernetes usage analytics for CPU, Memory, and GPU — track costs and optimize cluster resources - rchakode/kube-opex-analytics

A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices. - werf/werf

Recently discovered vulnerability CVE-2022-23648 in containerd allows crafted containers to gain read-only access to files from the host machine

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security...

Allows you to manage configuration and secrets from multiple provider while masking the secrets at the deployment - GitHub - tellerops/helm-teller: Allows you to manage configuration and secrets fr...

A free registry for Open Policy Containers

Kadeessh (formerly Caddy-SSH) is a general-purpose, extensible, modular, memory-safe SSH server built in Go - kadeessh/kadeessh

Caddy-SSH is a general-purpose, memory-safe SSH server built in Go

Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.