Under high load in specific scenarios, a Kubernetes gateway may be limited by more than just its obvious CPU and Memory limits or requests if Karpenter is aggressively sizing the node (a different topic!). You may be hitting a wall in conntrack exhaustion.
https://blog.miraco.la/how-conntrack-could-be-limiting-your-k8s-gateway
https://blog.miraco.la/how-conntrack-could-be-limiting-your-k8s-gateway
Jay Miracola - Clouds Are Metal
How conntrack Could Be Limiting Your k8s Gateway
Under high load in specific scenarios, a Kubernetes gateway may be limited by more than just its obvious CPU and Memory limits or requests if Karpenter is aggressively sizing the node (a different topic!). You may be hitting a wall in conntrack exhau...
👍5
As the use of container technology continues to grow, securing these environments becomes increasingly critical. This article provides a comprehensive guide to hardening Docker container images, presenting best practices and practical examples to enhance security. Whether you're a developer or a security architect, these strategies will help you build more secure, robust applications in your Docker environments.
https://medium.com/@SecurityArchitect/hardening-container-images-best-practices-and-examples-for-docker-e941263cab13
https://medium.com/@SecurityArchitect/hardening-container-images-best-practices-and-examples-for-docker-e941263cab13
Medium
Hardening Container Images: Best Practices and Examples for Docker
Introduction
👍3❤1
By leveraging tools like ArgoCD, developers can streamline and automate their continuous delivery pipelines, ensuring more efficient and reliable deployments. This article delves into the practical implementation of GitOps with ArgoCD, offering a comprehensive guide on setting up and testing these processes in a virtualized Kubernetes environment.
https://piotrminkowski.com/2023/06/29/testing-gitops-on-virtual-kubernetes-clusters-with-argocd/
https://piotrminkowski.com/2023/06/29/testing-gitops-on-virtual-kubernetes-clusters-with-argocd/
Piotr's TechBlog
Testing GitOps on Virtual Kubernetes Clusters with ArgoCD - Piotr's TechBlog
In this article, you will learn how to test and verify the GitOps configuration managed by ArgoCD on virtual Kubernetes clusters
👍4
DevSpace - The Fastest Developer Tool for Kubernetes ⚡️ Automate your deployment workflow with DevSpace and develop software directly inside Kubernetes.
https://github.com/devspace-sh/devspace
https://github.com/devspace-sh/devspace
GitHub
GitHub - devspace-sh/devspace: DevSpace - The Fastest Developer Tool for Kubernetes ⚡ Automate your deployment workflow with DevSpace…
DevSpace - The Fastest Developer Tool for Kubernetes ⚡ Automate your deployment workflow with DevSpace and develop software directly inside Kubernetes. - devspace-sh/devspace
👍3
This article delves into an innovative approach to tackling this issue by leveraging VolumeSnapshots. By utilizing this technique, you can significantly reduce the startup time of your Kubernetes Pods, leading to more efficient resource utilization and improved application performance. Let's explore how this method can transform your Kubernetes experience.
https://medium.com/riskified-technology/optimize-kubernetes-pods-startup-time-using-volumesnapshots-c0a2b7d39a29
https://medium.com/riskified-technology/optimize-kubernetes-pods-startup-time-using-volumesnapshots-c0a2b7d39a29
Medium
Optimize Kubernetes Pods’ Startup Time Using VolumeSnapshots
How we used VolumeSnapshots to achieve 83% Improvement in our k8s pods startup times
👍3🔥1👌1
WS Cognito provides seamless user authentication, while CloudFront ensures fast and reliable content distribution. Let's dive into the step-by-step process of setting up authenticated access to S3, enhancing both security and user experience.
https://newsletter.simpleaws.dev/p/authenticated-access-s3-cognito-cloudfront
https://newsletter.simpleaws.dev/p/authenticated-access-s3-cognito-cloudfront
Simple AWS
Authenticated Access to S3 with Cognito and CloudFront
Implement secure, authenticated access to S3 content with Cognito and CloudFront, using AWS security best practices and guidelines.
👍1
🏓 The open-source synthetic & real user monitoring platform 🏓
https://github.com/openstatusHQ/openstatus
https://github.com/openstatusHQ/openstatus
GitHub
GitHub - openstatusHQ/openstatus: 🫖 Status page with uptime monitoring & API monitoring as code 🫖
🫖 Status page with uptime monitoring & API monitoring as code 🫖 - openstatusHQ/openstatus
❤1
A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster
https://github.com/robscott/kube-capacity
https://github.com/robscott/kube-capacity
GitHub
GitHub - robscott/kube-capacity: A simple CLI that provides an overview of the resource requests, limits, and utilization in a…
A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster - robscott/kube-capacity
👍3
As Infrastructure as Code (IaC) continues to gain traction, ensuring the security and compliance of your Terraform configurations has become increasingly important. Semgrep, a powerful open-source static analysis tool, offers a comprehensive solution for identifying and mitigating security vulnerabilities within your Terraform code. In this article, we will explore how Semgrep can be integrated into your development workflow to enhance the security posture of your IaC deployments. By leveraging Semgrep's extensive rule set and customizable patterns, you can proactively detect and address potential security issues, ensuring your Terraform configurations are robust and secure. Let's dive into the practical steps and benefits of using Semgrep for Terraform.
https://ramimac.me/semgrep-for-terraform
https://ramimac.me/semgrep-for-terraform
High Signal Security
Semgrep for Terraform Security
👍4
This article takes a unique approach by comparing Kubernetes observation to bird watching, making the intricate concepts more accessible and engaging. By drawing parallels between these two activities, we will explore the fundamental aspects of monitoring and troubleshooting Kubernetes clusters. Whether you're a seasoned Kubernetes user or a curious newcomer, this bird watcher's perspective will provide valuable insights into the art of Kubernetes observation.
https://medium.com/@mlunadia/the-basics-of-observing-kubernetes-a-bird-watchers-perspective-58830e6859ba
https://medium.com/@mlunadia/the-basics-of-observing-kubernetes-a-bird-watchers-perspective-58830e6859ba
Medium
The basics of observing Kubernetes: A bird-watcher’s perspective
An avid bird-watcher once told me that for bird-watching beginners, it’s more important to focus on learning about the birds and…
👍5
By using IaC, you can automate repository creation, manage permissions, and maintain configurations across multiple projects effortlessly. Join us as we explore the step-by-step process of automating your GitHub setup to enhance productivity and efficiency.
https://blog.ibukundairo.com/automate-your-github-setup-managing-your-account-with-infrastructure-as-code-ee0c08f0a601
https://blog.ibukundairo.com/automate-your-github-setup-managing-your-account-with-infrastructure-as-code-ee0c08f0a601
Medium
Automate Your GitHub Setup: Managing Your Account with Infrastructure as Code
In this article, we’ll explore how to maintain your GitHub projects with Infrastructure as Code (IaC)
This article goes beyond the basics to explore the inner workings of kubectl and how you can extend its functionality by writing custom commands. By creating custom kubectl plugins, you can tailor the tool to fit your specific workflows and automate repetitive tasks. Dive into the technical details and practical steps to enhance your Kubernetes management capabilities with custom kubectl commands.
https://medium.com/@bingolbalihasan/how-does-kubectl-work-writing-custom-kubectl-commands-da86e5d49c74
https://medium.com/@bingolbalihasan/how-does-kubectl-work-writing-custom-kubectl-commands-da86e5d49c74
Medium
How Does Kubectl Work: Writing Custom Kubectl Commands
Kubernetes works like magic but it is not magic. It is fundamentally grounded in the simplicity of REST API calls. This straightforward…
👍4
An opinionated Kubernetes distribution with a focus on long-term on-prem deployments
https://github.com/scality/metalk8s
https://github.com/scality/metalk8s
GitHub
GitHub - scality/metalk8s: An opinionated Kubernetes distribution with a focus on long-term on-prem deployments
An opinionated Kubernetes distribution with a focus on long-term on-prem deployments - scality/metalk8s
👍2
The Kaytu CLI improves the efficiency of cloud workloads by analyzing historical usage and providing tailored recommendations, such as changing instance sizes. This ensures you only pay for the resources you actually need without compromising stability.
https://github.com/kaytu-io/kaytu
https://github.com/kaytu-io/kaytu
GitHub
GitHub - opengovern/opensecurity at dailydev
opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined aud...
👍3