DevOps&SRE Library
18.3K subscribers
456 photos
5 videos
2 files
4.93K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
kubernetes-event-exporter

This tool allows exporting the often missed Kubernetes events to various outputs so that they can be used for observability or alerting purposes. You won't believe what you are missing.

https://github.com/resmoio/kubernetes-event-exporter
cni-ipvlan-vpc-k8s

cni-ipvlan-vpc-k8s contains a set of CNI and IPAM plugins to provide a simple, host-local, low latency, high throughput, and compliant networking stack for Kubernetes within Amazon Virtual Private Cloud (VPC) environments by making use of Amazon Elastic Network Interfaces (ENI) and binding AWS-managed IPs into Pods using the Linux kernel's IPvlan driver in L2 mode.

https://github.com/lyft/cni-ipvlan-vpc-k8s
What every SRE should know about GNU/Linux shell related internals: file descriptors, pipes, terminals, user sessions, process groups and daemons

https://biriukov.dev/docs/fd-pipe-session-terminal/0-sre-should-know-about-gnu-linux-shell-related-internals-file-descriptors-pipes-terminals-user-sessions-process-groups-and-daemons
csi-driver-nfs

This is a repository for NFS CSI driver, csi plugin name: nfs.csi.k8s.io. This driver requires existing and already configured NFSv3 or NFSv4 server, it supports dynamic provisioning of Persistent Volumes via Persistent Volume Claims by creating a new sub directory under NFS server.

https://github.com/kubernetes-csi/csi-driver-nfs
Scaling Kubernetes to Thousands of CRDs

Over the past few months Crossplane has pushed the boundaries of Kubernetes with the number of Custom Resources it supports. In this post we’ll explore the limitations Upbound engineers have discovered and how we’ve helped to overcome them.

https://blog.upbound.io/scaling-kubernetes-to-thousands-of-crds
ansible-role-k3s

Ansible role for managing rancher k3s, lightweight, cncf-certified kubernetes distribution.

https://github.com/rlex/ansible-role-k3s
The top 5 kubectl plugins by github stars

Kubernetes is a powerful container orchestrator. However, the real power of Kubernetes is the ability to expand it's core functionality. One such extension point lies in the kubectl command line tool. Kubectl can be extended by the use of various plugins made available by the open source community.

https://home.robusta.dev/blog/top-kubectl-plugin-list
zsh-kubectl-prompt

This script displays information about the kubectl current context and namespace in zsh prompt.

https://github.com/superbrothers/zsh-kubectl-prompt
GitOps Fundamentals

Learn the basics of GitOps with ArgoCD and Argo Rollouts

https://learning.codefresh.io/course/gitops-with-argo
k0sctl

A bootstrapping and management tool for k0s clusters.

https://github.com/k0sproject/k0sctl
How to monitor Istio, the Kubernetes service mesh

https://sysdig.com/blog/monitor-istio
kubeconform

Kubeconform is a Kubernetes manifest validation tool. Incorporate it into your CI, or use it locally to validate your Kubernetes configuration!

https://github.com/yannh/kubeconform
How to Build Software like an SRE

Reliability precepts and tradeoffs learned the hard way

https://www.willett.io/posts/precepts
navidrome

Navidrome is an open source web-based music collection server and streamer. It gives you freedom to listen to your music collection from any browser or mobile device. It's like your personal Spotify!

https://github.com/navidrome/navidrome
Solving common problems with Kubernetes

https://blog.adamchalmers.com/kubernetes-problems
inspektor-gadget

Inspektor Gadget is a collection of tools (or gadgets) to debug and inspect Kubernetes resources and applications. It manages the packaging, deployment and execution of eBPF programs in a Kubernetes cluster, including many based on BCC tools, as well as some developed specifically for use in Inspektor Gadget. It automatically maps low-level kernel primitives to high-level Kubernetes resources, making it easier and quicker to find the relevant information.

https://github.com/inspektor-gadget/inspektor-gadget
oci-seccomp-bpf-hook

This project provides an OCI hook to generate seccomp profiles by tracing the syscalls made by the container. The generated profile would allow all the syscalls made and deny every other syscall.

https://github.com/containers/oci-seccomp-bpf-hook
Welcome to the Howie guide to post‑incident investigations!

https://www.jeli.io/howie/welcome