In this article you will learn how to deploy and configure Keycloak in a local Kubernetes cluster, then deploy Grafana and use the Keycloak instance for authentication and authorization.



Read more https://medium.com/@charled.breteche/securing-grafana-with-keycloak-sso-d01fec05d984

The team at Learnk8s is happy to announce Kube Events — a curated list of Kubernetes-related events.

The website includes only what we think are the meetups, conferences, training & webinars that you will find interesting to attend (e.g. no vendor pitches, with a focus on Kubernetes).

You can discover the next upcoming events here: https://kube.events

You can also join the Telegram channel for daily updates here: https://xn--r1a.website/KubeEvents

Config Syncer keeps ConfigMaps and Secrets synchronized across namespaces and/or clusters.

Read more https://github.com/kubeops/config-syncer

For something as important as NetworkPolicy, debugging is surprisingly painful.
In this article you will learn a few practical tips on how to debug your network policies.

Read more https://pauldally.medium.com/debugging-networkpolicy-part-1-249921cdba37

In this article, you will learn some of the pitfalls and gotchas in deploying Multus into AWS Elastic Kubernetes Service.

Read more https://joealford.medium.com/deploying-multus-into-amazons-eks-42269146f421

In this hands-on article, you will learn how to monitor Kubernetes cluster logs and metrics using Grafana, Prometheus and Loki.

Read more https://dev.to/leroykayanda/kubernetes-monitoring-using-grafana-3dhc

A PS4 is an x86 PC, running 8 of AMD's Jaguar cores. It is so weak, that the system menu was offloaded to a separate ARM chip in order to conserve system resources. Why try to run Kubernetes on this weak, old piece of hardware?

Because it's fun.

Read more https://zhekunhu.xyz/ps4-kubernetes.html

In this repository, you will find Michael's notes on his journey in the DevOps world. You will learn:

- Linux basics & networking.
- Containers.
- Kubernetes.
- Terraform.
- Ansible.
- Monitoring and logging.
- CI/CD with GitHub actions.
- And more.

Read more https://github.com/MichaelCade/90DaysOfDevOps

RAUDI (Regularly and Automatically Updated Docker Images) automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers.

Read more https://github.com/cybersecsi/RAUDI

In this article you will learn:

1. How to do capacity planning for your Kubernetes clusters.
1. How to choose the right size for your nodes.
1. How to plan for Horizontal & Vertical scaling
1. How to (not) overcommit nodes.

Read more https://medium.com/pareture/kubernetes-scaling-capacity-and-resource-planning-in-complex-clusters-97a6105b43a4

Recommendations, findings and learnings from running a 100TB+ Elasticsearch Logstash Kibana (ELK) stack running on Amazon Elastic Kubernetes Service (EKS) over 2.5 years.

Read more https://medium.com/@siddharth.j.telang/run-an-enterprise-level-elasticsearch-stack-on-a-kubernetes-cluster-2728864677bb

This article is an opinionated SRE point of view of an open source stack to easily request, graph, audit and secure any kind of data access of multiple data sources.

Read more https://blog.kumomind.com/trino-superset-and-ranger-on-kubernetes-what-why-how

Pipy is a programmable network proxy for the cloud, edge and IoT. Written in C++, Pipy is extremely lightweight and fast. It's also programmable by using PipyJS, a tailored version of the standard JavaScript language.

Read more https://github.com/flomesh-io/pipy

Sysdig is a Linux system exploration and troubleshooting tool with first-class support for containers

Read more https://github.com/draios/sysdig

This guide pretends to explain a quick and easy way to get our applications in Kubernetes/AKS running exposed to the internet with HTTPS using DuckDNS as a domain name provider.

Read more https://dev.to/javiermarasco/https-with-ingress-controller-cert-manager-and-duckdns-in-akskubernetes-2jd1

Azure AD workload identity is designed to associate a pod with an identity in Azure Active Directory so that you can grant permissions to access another resource (i.e. a storage account or an Azure SQL Database).

Learn how in this article.

Read more https://dev.to/maxx_don/implement-azure-ad-workload-identity-on-aks-with-terraform-3oho

Kubernetes Fluentd Operator (KFO) is a Fluentd config manager with batteries included, config validation, no needs to restart, with sensible defaults and best practices built-in. Use Kubernetes labels to filter/route logs per namespace.

Read more https://github.com/vmware/kube-fluentd-operator

This blog demonstrates how you can consume secrets from an external service (AWS Secrets Manager) using a Kubernetes dynamic admission controller.

Read more https://medium.com/@ishana98dadhich/consume-secrets-using-kubernetes-admission-controllers-part-2-a117d77acf76

In this repository, you will find a wireguard operator created to easily provision a VPN in a Kubernetes cluster.

Read more https://github.com/jodevsa/wireguard-operator

The Kubernetes OpenSearch Operator is used for automating the deployment, provisioning, management, and orchestration of OpenSearch clusters and OpenSearch dashboards.



Read more https://github.com/Opster/opensearch-k8s-operator

This article discusses combining Kong Istio Gateway with the Istio service mesh to improve:

- Security
- Observability
- Governance (e.g. rate-limiting)

Read more https://dev.to/rahulrai/enhancing-istio-operations-with-kong-istio-gateway-57e4