A Golang Tool to discover unused Kubernetes Resources
https://github.com/yonahd/kor

The article is about how to use Istio, a service mesh for Kubernetes, to implement authentication and authorization policies for microservices. The article demonstrates how to enable mutual TLS encryption, JWT authentication, and RBAC policies to secure service-to-service communication. The article also provides code examples and commands to configure and test the policies.

https://www.infracloud.io/blogs/istio-authentication-authorization-policies/

Marvin is a CLI tool that scans a k8s cluster by performing CEL expressions to report potential issues, misconfigurations and vulnerabilities.
https://github.com/undistro/marvin

A developer who shares his experience of learning eBPF, a technology that allows the creation of programs that interact with the Linux kernel.
https://www.kungfudev.com/blog/2023/10/14/the-beginning-of-my-ebpf-journey-kprobe-bcc

Helm Chart security scanner

https://github.com/banzaicloud/chartsec

A network load-balancer implementation for Kubernetes using standard routing protocols
https://github.com/metallb/metallb

The challenges and solutions of gRPC load balancing in Kubernetes, a platform for deploying microservice applications.
The authors describe how they implemented a custom DNS resolver class that uses a push-based mechanism to update the IP list of available backend servers, instead of relying on the default pull-based DNS resolution that is inefficient and unsynchronized.

https://citymall.engineering/redefining-grpc-load-balancing-the-power-of-custom-dns-in-kubernetes-126ecc3cfb6c

A Kubernetes web UI that is fully-featured, user-friendly and extensible

https://github.com/headlamp-k8s/headlamp

underlay network and rdma solution of cloud native, for bare metal, VM and public cloud environment

https://github.com/spidernet-io/spiderpool

The article delves into how chaos engineering helps in proactively identifying potential system failures in modern cloud applications, thereby averting costly outages. It further elaborates on the application of chaos engineering in security testing, dubbed Security Chaos Engineering (SCE), to ensure systems respond appropriately to common threats by conducting controlled experiments that inject failures into various components like servers and database
https://www.datadoghq.com/blog/chaos-engineering-for-security/

KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.

https://github.com/krakend/krakend-ce

A security layer for Git repositories
https://github.com/gittuf/gittuf

The blog post discusses the application of chaos engineering to intentionally induce failures in distributed systems, aiding in assessing their resilience and improving the observability stack at Coroot. Through simulated network failures, the post explores how such disruptions can be detected in a distributed environment, providing insights into ensuring accurate identification of different failure scenarios
https://coroot.com/blog/chaos-driven-observability-spotting-network-failures

Self-hosted AI coding assistant

https://github.com/TabbyML/tabby

The blog post recounts a real-world scenario where a Kubernetes API was overwhelmed by numerous requests, detailing the troubleshooting process and the implemented solution to stabilize the system. Through creating and deploying FlowSchema and PriorityLevelConfiguration manifests, the authors were able to manage request flows efficiently, thereby restoring and optimizing the Kubernetes cluster's performance

https://blog.palark.com/kubernetes-api-flow-control-management/

Mutating Webhook to dynamically add tolerations based on detected image architectures
https://github.com/PeterGrace/tolerable

The blog post elucidates the author's journey with Argo Workflows, highlighting its effectiveness for infrastructure automation and its advantage over Jenkins. Through personal experiences, the author shares mistakes made, lessons learned, and certain developed patterns to assist readers in avoiding similar pitfalls. The blog's objective is to impart the acquired knowledge and patterns which are conducive to a more efficient utilization of Argo Workflows
https://hodgkins.io/argo-workflow-proven-patterns-from-production

Local Volume CSI Provisioner for K8S

https://github.com/Protryon/lvp

A set of modern Grafana dashboards for Kubernetes.

https://github.com/dotdc/grafana-dashboards-kubernetes

The article on Depot highlights the introduction of on-demand Dockerfile linting to identify common linting issues, aiming to adhere to best practices for efficient Docker image creation. It lists the top 10 prevalent linting issues observed in Depot, elaborating on each problem and providing solutions to amend them, thus serving as a resource for improving Dockerfile writing practices
https://depot.dev/blog/dockerfile-linting-issues

Explain complex systems using visuals and simple terms. Help you prepare for system design interviews.

https://github.com/ByteByteGoHq/system-design-101