rxd_txd
300 subscribers
514 photos
31 videos
22 files
2.79K links
Download Telegram
Forwarded from Security Wine (бывший - DevSecOps Wine) (Denis Yakimov)
Terraform Foundational Policies Library

HashiCorp объявила, что выпускает библиотеку на базе правил Santinel для Terraform Cloud and Enterprise из более чем 40 элементов управления, основанных на CIS Benchmarks, для защиты облачных сервисов, включая сети, базы данных, хранилища и вычислительные сервисы.

#terraform #aws #azure #gcp
Forwarded from Мониторим ИТ
На Медиуме есть автор Стив Мушеро (Steve Mushero), который много пишет о SRE и о подходах к мониторингу по этой методологии. Здесь он пишет про золотые сигналы SRE (Latency, Traffic, Errors, and Saturation), методики USE и RED, но есть и статьи о метриках, которые он рекомендует собирать в контексте SRE по конкретным элементам систем. Ниже подборка таких статей.

Метрики балансировщика (AWS ALB/ELB, HAProxy)

Метрики веб-серверов (Apache & Nginx)

Метрики серверов приложений (PHP, FPM, Java, Ruby, Node, Go, Python)

Метрики серверов баз данных (MySQL & AWS RDS и AWS Aurora)

Метрики Линукс-серверов (Linux)
Forwarded from DevOps&SRE Library
Case Study: IT Modernization at Tidepool, an 8 part series

https://www.solo.io/blog/case-study-it-modernization-at-tidepool-an-8-part-series

Part 1: Migrating to Kubernetes - https://medium.com/@derrickburns/modernizing-tidepool-part-1-migrating-to-kubernetes-e3361379a3d6 - How they chose cloud hosted Kubernetes, migrating from Docker Compose to Kubernetes and the tools used to help the process.

Part 2: API Gateway - https://medium.com/@derrickburns/modernizing-tidepool-part-2-api-gateway-c6597b160fca - Discusses the required functionality, selection criteria and migration process from a custom solution to Gloo, our Kubernetes native API gateway built with Envoy Proxy.

Part 3: Continuous Delivery with GitOps - https://medium.com/@derrickburns/modernizing-tidepool-part-3-continuous-delivery-with-gitops-5b9c3b20c119 - As a way to manage implementing change to their running services, this article digs how GitOps is different than traditional configuration management and ideal for Kubernetes.

Part 4: Secrets Management - https://medium.com/@derrickburns/modernizing-tidepool-part-4-secrets-management-219db93aa809 - This post specifically addresses how they protect the system secrets that are used to encrypt data or verify identity within the context of their new Kubernetes environment.

Part 5: Using a Service Mesh - https://medium.com/@derrickburns/modernizing-tidepool-part-5-using-a-service-mesh-cd62788d3ec0 - As a healthcare company, HIPAA requires that all communication of protected health information (PHI) must be encrypted at flight and rest. Tidepool looked to Linkerd service mesh for mTLS across the intra-cluster communications.

Part 6: Migrating to a Hosted Mongodb - https://medium.com/@derrickburns/modernizing-tidepool-part-6-migrating-to-a-hosted-mongodb-dcd17ecbafb8 - Already a MongoDB user, the modernization initiative had the team take a fresh look at the performance, reliability and operational efficiency of their database as it has grown to over 2B records. This post details the migration from a self-hosted to a managed service from MongoDB.

Part 7: Logging - https://medium.com/@derrickburns/modernizing-tidepool-part-7-logging-aa3c9eff197c - All systems require observation and access to the logs created to understand what’s happening, especially when issues arise that need to be debugged. This post shows how the team has set up their logging systems today, their approach to looking at the right data, and how they are continuing to evolve.

Part 8: Provisioning - https://medium.com/@derrickburns/modernizing-tidepool-part-8-provisioning-6bdbe9519e0a - For anyone running Kubernetes in production or more than one cluster, this post details a provisioning process and available tools that can help with templating.
Forwarded from DevOps&SRE Library
Regular Expressions for Regular Folk

This is an experimental “book” about regular expressions. It is largely visual and example-based, as opposed to most regex resources I found while I was learning. I also attempted to choose test cases that highlight some common gotchas. I think it’ll be worth your time.


https://refrf.shreyasminocha.me
Доклад "The Path to GitOps" с демо на DigitalOcean (демо с ~21:30)

Pipelines are a traditional component of CI/CD processes in development environments and a key component of DevOps practices. As dependencies, microservices and cloud-provider requirements grow, pipelines are becoming monolithic. In this talk, we will discuss and demonstrate how to migrate monolithic pipelines to a declarative GitOps-enabled Workflows that treat your individual CD activities as shareable blocks using Jenkins, Argo Flux and Kubernetes.

https://www.youtube.com/watch?v=M8xsdMKyxXQ

Слайды
https://docs.google.com/presentation/d/1yj0TIpr2pgw7_-6ABb1yc3274pCZkoz90LWau6kku58

Код демо
https://github.com/alghanmi/workflows-demo
​​This extension integrates Draw.io into #vscode

Features
- Edit .drawio or .dio files in the Draw.io editor, as xml or both.
- Edit .drawio.svg files with embedded Draw.io diagrams (might be slow for diagrams with > 400 nodes).
- To create a new diagram, simply create an empty .drawio or .drawio.svg file and open it!
.drawio.svg are valid .svg files.
- Uses an offline version of Draw.io by default.
- An online Draw.io url can be configured.
- A Draw.io theme can be selected.

https://github.com/hediet/vscode-drawio

#ts #docops
Forwarded from The After Times
rssfs: A RSS reader as a file system

Are you unsure how to read RSS feeds? Why don't you just mount them? What does this software do?
It will mirror RSS and Atom feeds as file systems. Example file system structure for one feed with two articles:

/tmp/mnt/rssfs/Open Source Feed/Hello World.html
/tmp/mnt/rssfs/Open Source Feed/Second Article.html


https://github.com/dertuxmalwieder/rssfs

#go