Terraform Security Best Practices
https://sysdig.com/blog/terraform-security-best-practices
In this article we want to explain the benefits of using Terraform, and provide guidance for using Terraform in a secure way by reference to some security best practices.
https://sysdig.com/blog/terraform-security-best-practices
trivy-operator
https://github.com/aquasecurity/trivy-operator
The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernetes API. The Operator does this by watching Kubernetes for state changes and automatically triggering security scans in response. For example, a vulnerability scan is initiated when a new Pod is created. This way, users can find and view the risks that relate to different resources in a Kubernetes-native way.
https://github.com/aquasecurity/trivy-operator
Exploring the OpenTelemetry Collector
https://blog.frankel.ch/opentelemetry-collector
In this post, I explore the different aspects of the Collector:
- The data kind: logs, metrics, and traces
- Push and pull models
- Operations: reads, transformations, and writes
https://blog.frankel.ch/opentelemetry-collector
Monoliths, Service Architecture, and Microservices
https://architecturenotes.co/granularity-of-systems
There are many discussions about which level of system granulation is the best. We went from monoliths to microservices and back again.
https://architecturenotes.co/granularity-of-systems
DevOps&SRE Library
Learning From Google SRE Team (part-1) In this blog post, we aim to expand on the first 5 lessons shared by Google's Site Reliability Engineering team, offering a closer look at practical implementation examples. https://www.codereliant.io/20-sre-lessons…
Learning From Google SRE Team (part-2)
https://www.codereliant.io/learning-from-google-sre-team-part-2
https://www.codereliant.io/learning-from-google-sre-team-part-2
Source Code Analysis — A Comprehensive Understanding of Kubelet
https://addozhang.medium.com/source-code-analysis-a-comprehensive-understanding-of-kubelet-7a9083514ff0
This article primarily delves into a source code analysis of the kubelet’s functions, key components, and its booting process, summarizing the working principle of kubelet.
https://addozhang.medium.com/source-code-analysis-a-comprehensive-understanding-of-kubelet-7a9083514ff0
Unleashing the Power of Cilium CNI to Propel Trendyol’s Performance Up to 40%!
https://medium.com/trendyol-tech/trendyols-cilium-transformation-ff064ff79fce
Trendyol implemented Cilium as the default CNI for the Kubernetes Cluster starting from version 1.26. Discover our journey.
https://medium.com/trendyol-tech/trendyols-cilium-transformation-ff064ff79fce
Leveraging Crossplane to Deploy and Manage a Single-Tenant Architecture
https://medium.com/@BioCatchTechBlog/leveraging-crossplane-to-deploy-and-manage-a-single-tenant-architecture-6f3a023cc36a
https://medium.com/@BioCatchTechBlog/leveraging-crossplane-to-deploy-and-manage-a-single-tenant-architecture-6f3a023cc36a
Kubernetes Exposed: One Yaml away from Disaster
https://blog.aquasec.com/kubernetes-exposed-one-yaml-away-from-disaster
https://blog.aquasec.com/kubernetes-exposed-one-yaml-away-from-disaster
Kubernetes SecurityContext with practical examples
https://medium.com/marionete/kubernetes-securitycontext-with-practical-examples-67d890558d11
https://medium.com/marionete/kubernetes-securitycontext-with-practical-examples-67d890558d11
Speed up pod startup by re-using image layers from other nodes with Spegel
https://medium.com/linux-shots/speed-up-pod-startup-by-re-using-image-layers-from-other-nodes-with-spegel-817f88d40a92
https://medium.com/linux-shots/speed-up-pod-startup-by-re-using-image-layers-from-other-nodes-with-spegel-817f88d40a92
Exploring Kubernetes 1.28 Sidecar Container Support
https://hwchiu.medium.com/exploring-kubernetes-1-28-sidecar-container-support-ed1a39ac7fe0
https://hwchiu.medium.com/exploring-kubernetes-1-28-sidecar-container-support-ed1a39ac7fe0
Explore the mechanics of the Gateway API within the Service Mesh
https://addozhang.medium.com/explore-the-mechanics-of-the-gateway-api-within-the-service-mesh-15d644535940
https://addozhang.medium.com/explore-the-mechanics-of-the-gateway-api-within-the-service-mesh-15d644535940
Raspberry Pi Kubernetes Cluster with K3s and Metallb
https://medium.com/@kevinlutzer9/raspberry-pi-kubernetes-cluster-with-k3s-and-metallb-1dab9ef475bb
https://medium.com/@kevinlutzer9/raspberry-pi-kubernetes-cluster-with-k3s-and-metallb-1dab9ef475bb
Understanding Different Types of Services in Kubernetes
https://medium.com/@tiffany1101/understanding-different-types-of-services-in-kubernetes-c0222d7c365f
https://medium.com/@tiffany1101/understanding-different-types-of-services-in-kubernetes-c0222d7c365f
Kubernetes Multicluster Load Balancing with Skupper
https://piotrminkowski.com/2023/08/04/kubernetes-multicluster-load-balancing-with-skupper
https://piotrminkowski.com/2023/08/04/kubernetes-multicluster-load-balancing-with-skupper
kubeskoop
https://github.com/alibaba/kubeskoop
KubeSkoop is a kubernetes networking diagnose tool for different CNI plug-ins and IAAS providers. KubeSkoop automatic construct network traffic graph of Pod in the Kubernetes cluster, monitoring and analysis of the kernel's critical path by eBPF, to resolve most of Kubernetes cluster network problems.
https://github.com/alibaba/kubeskoop
kubezoo
https://github.com/kubewharf/kubezoo
KubeZoo is a lightweight gateway service that leverages the existing namespace model and add multi-tenancy capability to existing Kubernetes. KubeZoo provides view-level isolation among tenants by capturing and transforming the requests and responses.
https://github.com/kubewharf/kubezoo