mox
Mox is a modern full-featured open source secure mail server for low-maintenance self-hosted email.https://github.com/mjl-/mox
Email explained from first principles
This article covers all aspects of modern email.https://explained-from-first-principles.com/email
Taking the fear out of migrations
Over the last 18 months at incident.io, we’ve done a lot of migrations. Often, a new feature requires a change to our existing data model. For us to be successful, it’s important that we can seamlessly transition from the old world to the new as quickly as we can.https://incident.io/blog/how-we-run-migrations
Linkerd at loveholidays
Our journey to a production service mesh - https://tech.loveholidays.com/linkerd-at-loveholidays-our-journey-to-a-production-service-mesh-9a6cd478d395Monitoring our apps using Linkerd metrics - https://tech.loveholidays.com/linkerd-at-loveholidays-monitoring-our-apps-using-linkerd-metrics-fa44c13bee49Understanding Docker's -net=host Option
https://www.metricfire.com/blog/understanding-dockers-net-host-option
https://www.metricfire.com/blog/understanding-dockers-net-host-option
Our cloud spend in 2022
Since we published why we’re leaving the cloud, we’ve received a lot of questions about our actual spending. We’re happy to share, both where we currently are and where we’re going.https://dev.37signals.com/our-cloud-spend-in-2022
SRE Evangelist
Over the last year I rebuilt an SRE team. It made me start to think a lot about what an SRE is and, maybe more importantly, what they are at GitHub specifically.https://hross.substack.com/p/sre-evangelist
Tricky Kubernetes memory management for Java applications
How to use the Kubernetes memory requests and limits in combination with JVM Heap and stay out of trouble.https://danoncoding.com/tricky-kubernetes-memory-management-for-java-applications-d2f88dd4e9f6
Comparing Resource Consumption in K0s vs K3s vs Microk8s
https://www.portainer.io/blog/comparing-k0s-k3s-microk8s
https://www.portainer.io/blog/comparing-k0s-k3s-microk8s
argocd-lovely-plugin
A plugin to make Argo CD behave like we'd like.https://github.com/crumbhole/argocd-lovely-plugin
kubernetes-secret-generator
This repository contains a custom Kubernetes controller that can automatically create random secret values. This may be used for auto-generating random credentials for applications run on Kubernetes.https://github.com/mittwald/kubernetes-secret-generator
Pitfalls reloading files from Kubernetes Secret & ConfigMap volumes
https://ahmet.im/blog/kubernetes-inotify/index.html
https://ahmet.im/blog/kubernetes-inotify/index.html
kubectl-node-shell
Start a root shell in the node's host OS running. Uses an alpine pod with nsenter for Linux nodes and a HostProcess pod with PowerShell for Windows nodes.https://github.com/kvaps/kubectl-node-shell
kubeapps
A web-based UI for deploying and managing applications in Kubernetes clustershttps://github.com/vmware-tanzu/kubeapps
Why You Should Avoid Sealed Secrets in Your GitOps Deployment
The pitfalls and alternatives of this common GitOps practice as you move your deployments to production.https://betterprogramming.pub/why-you-should-avoid-sealed-secrets-in-your-gitops-deployment-e50131d360dd
argocd-vault-plugin
An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secretshttps://github.com/argoproj-labs/argocd-vault-plugin
Observations and thoughts after building 3 kubernetes platforms in Financial Services Industry
Part 1 - Overview, K8s PaaS offerings, Networking: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-6705511c8e9b
Part 2 - Workload Identity, Secret Management / Externalization: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-158eba494528
Part 3 - GitOps: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-7d6c60206717
Part 4 - Policy Enforcement: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-e8bb24e381a2
Part 5 - Cloud Resource Brokering: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-b6404baf9ce3
Part 1 - Overview, K8s PaaS offerings, Networking: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-6705511c8e9b
Part 2 - Workload Identity, Secret Management / Externalization: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-158eba494528
Part 3 - GitOps: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-7d6c60206717
Part 4 - Policy Enforcement: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-e8bb24e381a2
Part 5 - Cloud Resource Brokering: https://itnext.io/observations-and-thoughts-after-building-3-kubernetes-platforms-in-financial-services-industry-b6404baf9ce3