DevOps & SRE notes – Telegram
DevOps & SRE notes
12K subscribers
40 photos
19 files
2.5K links
Helpful articles and tools for DevOps&SRE

WhatsApp: https://whatsapp.com/channel/0029Vb79nmmHVvTUnc4tfp2F

For paid consultation (RU/EN), contact: @tutunak


All ways to support https://telegra.ph/How-support-the-channel-02-19
Download Telegram
The article emphasizes that while PSA is native and aligns with security standards, its customization capabilities are somewhat limited. The guide aims to modernize security approaches with practical, step-by-step guidance, catering to developers and administrators involved in cloud computing and Kubernetes environments. For a comprehensive understanding, you can read the full article here.
https://hackernoon.com/migrating-from-pod-security-policies-a-comprehensive-guide-part-1-transitioning-to-psa
👍3
The blog post provides a comprehensive guide to using Docker Compose for managing multi-container Docker applications. It covers the basics of Docker Compose, differences between Docker and Docker Compose, and detailed instructions on writing a compose.yaml file. It also delves into starting, stopping, and managing services, volumes, and networks within Docker Compose, aiming to simplify the deployment and scaling of applications. For more detailed information and guidance, you can read the full post here.
https://devopscycle.com/blog/the-ultimate-docker-compose-cheat-sheet/
👍7
The post shares insights and experiences from Figma's database team on managing and scaling their database systems. Such articles typically cover challenges faced during growth, strategies for maintaining performance, and lessons learned throughout the process.
https://www.figma.com/blog/how-figmas-databases-team-lived-to-tell-the-scale/
👍3
The blog post on VLT Technology discusses a significant vulnerability within the npm ecosystem known as "manifest confusion." This issue arises because npm package manifests are published independently from their tarball contents without thorough validation, leading to potential exploits through inconsistent or malicious data in package dependencies or noscripts. The post details the history, the problem's implications, and steps to reproduce the issue, emphasizing the widespread impact on security and package integrity.
https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem
👍4
Garnet is a remote cache-store from Microsoft Research that offers strong performance (throughput and latency), scalability, storage, recovery, cluster sharding, key migration, and replication features. Garnet can work with existing Redis clients.
https://github.com/microsoft/garnet
👍4
The blog post delves into the challenges faced by on-call personnel due to alert fatigue and the subsequent risk of burnout. It outlines Cloudflare's approach to enhancing alert observability within their systems, aiming to make alerts more actionable and reduce false positives. By leveraging open-source tools and implementing best practices, Cloudflare's observability team shares insights on improving alert management, thereby easing the on-call experience and promoting personnel well-being.
https://blog.cloudflare.com/alerts-observability/
👍3
In the fast-paced world of Kubernetes and container orchestration, monitoring and metrics play a pivotal role in ensuring the health, efficiency, and reliability of applications. The article provides an insightful exploration into the criticality of pod metrics within the Kubernetes ecosystem
https://komodor.com/blog/harnessing-the-power-of-metrics-four-essential-use-cases-for-pod-metrics/
👍5
The introduction of Kubernetes Gateway API v1.0 marks a significant milestone, promising to enhance how developers and cluster operators manage and expose their services. The article dives deep into the nuances of this new API version, comparing it with the traditional Ingress controllers and highlighting its potential to redefine traffic routing within Kubernetes clusters. F
https://dev.to/apisix/kubernetes-gateway-api-v10-should-you-switch-45c0
👍4
Blog post addresses a critical aspect of container security—the ReadOnlyRootFilesystem flag. This insightful article elucidates the concept of making the root filesystem of a container read-only to prevent unauthorized modifications, which can be a common vector for security breaches.
https://alexandre-vazquez.com/readonlyrootfilesystem/
👍7
This article explores the underutilized Postgres feature of HOT (Heap Only Tuple) updates and the strategic use of fill factor to enhance database performance. It delves into how HOT updates allow for modifications within the same table page, bypassing index updates and reducing system load.
https://www.crunchydata.com/blog/postgres-performance-boost-hot-updates-and-fill-factor
👏5