DevOps&SRE Library
19K subscribers
426 photos
2 videos
2 files
5.17K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
yoke

Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer designed to provide a more powerful, safe, and programmatic way to define and deploy packages. While Helm relies heavily on static YAML templates, Yoke takes IaC to the next level by allowing you to leverage general-purpose programming languages for defining packages, making it safer and more powerful than its predecessors.


https://github.com/yokecd/yoke
synapse

XDR with eBPF-powered firewall and proxy.


https://github.com/gen0sec/synapse
korrel8r

Korrel8r is a rule-based correlation engine that automatically discovers and graphs relationships between cluster resources and observability signals across multiple data stores, enabling unified troubleshooting experiences.


https://github.com/korrel8r/korrel8r
lynq

Lynq Operator is a Kubernetes operator that automates database-driven infrastructure provisioning. It reads data from external datasources and dynamically creates, updates, and manages Kubernetes resources using declarative templates.


https://github.com/k8s-lynq/lynq
k8s-sidecar

This is a docker container intended to run inside a kubernetes cluster to collect config maps with a specified label and store the included files in a local folder.


https://github.com/kiwigrid/k8s-sidecar
2
postgresql-operator

PostgreSQL Operator to create Databases and Users across multiple engines


https://github.com/EasyMile/postgresql-operator
kubectl-rexec

Kubectl exec does not provide any kind of audit what is actually done inside the container. Rexec plugin is here to help with that.


https://github.com/Adyen/kubectl-rexec
csi-driver-rclone

This is a repository for Rclone CSI driver, csi plugin name: rclone.csi.veloxpack.io. This driver enables Kubernetes pods to mount cloud storage backends as persistent volumes using rclone, supporting 50+ storage providers including S3, Google Cloud Storage, Azure Blob, Dropbox, and many more.


https://github.com/veloxpack/csi-driver-rclone
The official MinIO GitHub repository is no longer maintained, so there are several object storages that can be used as alternatives/equivalents:

- https://github.com/rustfs/rustfs
- https://garagehq.deuxfleurs.fr
- https://github.com/seaweedfs/seaweedfs
- https://github.com/pgsty/minio
pg_exporter

PG Exporter brings ultimate monitoring experience to your PostgreSQL with declarative config, dynamic planning, and customizable collectors. It provides 600+ metrics and ~3K time series per instance, covers everything you'll need for PostgreSQL observability.


https://github.com/pgsty/pg_exporter
Fixing Noisy Logs with OpenTelemetry Log Deduplication

A practical walkthrough of OpenTelemetry's log deduplication processor that shows how to reduce repeated log noise while preserving useful signal.


https://www.dash0.com/guides/opentelemetry-log-deduplication-processor
Modernizing Prometheus: Native Storage for Composite Types

https://prometheus.io/blog/2026/02/14/modernizing-prometheus-composite-samples
Stop Hunting Logs: How OpenTelemetry Brings Metrics, Logs, and Traces Together

OpenTelemetry can correlate metrics, logs, and traces in Kubernetes so teams can debug issues from a single telemetry model.


https://hackernoon.com/stop-hunting-logs-how-opentelemetry-brings-metrics-logs-and-traces-together
Continuous Frontend Deployments at Scale: 7000 Deployments/Month with GitOps

Wayground describes running around 7,000 monthly frontend deployments for 50 engineers with GitOps and ArgoCD without deployment queues.


https://people.wayground.com/continuous-frontend-deployments-at-scale-7000-deployments-month-with-gitops-760379e128d0
How we replaced the default Kubernetes scheduler to optimize our continuous integration builds

Codefresh explains a custom Kubernetes scheduler and ballast pods strategy to pack CI workloads and reduce build-start delays.


https://codefresh.io/blog/custom-k8s-scheduler-continuous-integration
Building Production-Ready Micro Frontends in Kubernetes: A Pragmatic Approach

This guide walks through deploying micro frontends on Kubernetes with ingress routing and CI/CD patterns for team-isolated delivery.


https://medium.com/@tamer-abdulghani/building-production-ready-micro-frontends-in-kubernetes-a-pragmatic-approach-708134467b02
Detecting vulnerabilities in public Helm charts

The article shows how to identify insecure RBAC, secret leakage, and risky Helm template behavior using Trivy, GitHub search, and OPA.


https://allthingsopen.org/articles/detecting-vulnerabilities-public-helm-charts
GPU-accelerated headless Chromium on Kubernetes: a practical guide

This guide covers enabling GPU-accelerated headless Chromium on EKS by wiring host drivers and handling virtual GPU constraints.


https://medium.com/@misterdev/gpu-accelerated-headless-chromium-on-kubernetes-a-practical-guide-b4171c72e87e
upright

Upright is a self-hosted synthetic monitoring system. It provides a framework for running health check probes from multiple geographic sites and reporting metrics via Prometheus. Alerts can then be configured with AlertManager.


https://github.com/basecamp/upright
diffnav

A git diff pager based on delta but with a file tree, à la GitHub.


https://github.com/dlvhdr/diffnav