Upgrading AWS EKS clusters can be complex, but using a blue-green deployment strategy can make the process more seamless and reduce downtime. This article from OneFootball Locker Room explains how to optimize EKS cluster upgrades using the blue-green tactic. Learn how this approach ensures smooth transitions between cluster versions, minimizes risk, and maintains high availability during the upgrade process.
https://medium.com/onefootball-locker-room/from-blue-to-green-optimizing-aws-eks-clusters-upgrade-with-blue-green-tactic-2ee7c4920755
https://medium.com/onefootball-locker-room/from-blue-to-green-optimizing-aws-eks-clusters-upgrade-with-blue-green-tactic-2ee7c4920755
Medium
From Blue to Green: Optimizing AWS EKS Clusters Upgrade with Blue/Green Tactic
Get ready for an inside look at here in OneFootball how the platform team is leveling up our EKS cluster game!
👍3
Security training is a fundamental part of maintaining a secure and resilient organization. This article from PagerDuty outlines their approach to security training, detailing how they empower employees to recognize and mitigate security threats. Learn about the key components of their security training program, including best practices, ongoing education, and the importance of fostering a security-conscious culture across the company.
https://www.pagerduty.com/blog/security-training-at-pagerduty/
https://www.pagerduty.com/blog/security-training-at-pagerduty/
PagerDuty
Our Approach to Employee Security Training
Senior Security Engineer Rich Adams shares how the PagerDuty security team approaches security training for employees.
👍4
👍2
Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.
https://github.com/deggja/netfetch
https://github.com/deggja/netfetch
GitHub
GitHub - deggja/netfetch: Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.
Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads. - deggja/netfetch
👍4
Running GPU-accelerated workloads, especially large language models (LLMs), on Amazon EKS can significantly enhance performance for AI and machine learning applications. This article from Prodigy Engineering explains how to configure and manage GPU-accelerated workloads on EKS. Learn about the necessary steps, best practices, and challenges involved in optimizing Kubernetes clusters to run GPU-intensive tasks efficiently.
https://medium.com/prodigy-engineering/running-gpu-accelerated-llm-workloads-on-eks-9928c07d30ea
https://medium.com/prodigy-engineering/running-gpu-accelerated-llm-workloads-on-eks-9928c07d30ea
Medium
Running GPU-Accelerated LLM Workloads on EKS
Let’s run a GPU-accelerated open-source LLM (like Mistral 7B) on AWS Elastic Kubernetes Service (EKS) using Karpenter and Hugging Face.
👍2
Kubernetes can offer tremendous benefits, but it's not without its challenges. This article from Encore shares real-world "horror stories" from Kubernetes environments, highlighting common mistakes and pitfalls teams have faced. Through these cautionary tales, learn how to avoid misconfigurations, optimize cluster performance, and prevent operational disasters in your own Kubernetes deployments.
https://encore.dev/blog/horror-stories-k8s
https://encore.dev/blog/horror-stories-k8s
Encore — Open Source Backend Framework for robust distributed systems
Distributed Systems Horror Stories: Kubernetes Deep Health Checks – Encore Blog
A tale of making a mistake in a distributed system that can lead to cascading failure. I call it the Kubernetes deep health check.
👍5💩1
DNS issues can be particularly troublesome when using NGINX as a reverse proxy. This article by Hwchiu on Medium addresses common DNS-related problems encountered in NGINX reverse proxy setups, explaining the root causes and offering solutions to resolve them. Learn about configuration tips, troubleshooting steps, and best practices to ensure reliable DNS resolution in your NGINX reverse proxy deployments.
https://hwchiu.medium.com/nginx-reverse-proxy-dns-issue-671d911dc5fa
https://hwchiu.medium.com/nginx-reverse-proxy-dns-issue-671d911dc5fa
Medium
Nginx Reverse Proxy DNS Issue
This article documents the DNS issue encountered when using Nginx as a Reverse Proxy.
👍4💯3
Securing Kubernetes clusters requires understanding both offensive and defensive strategies. This article by Ridho Adya explores the various attack vectors and defense mechanisms for Kubernetes environments. Learn how to identify vulnerabilities, execute common attack techniques, and implement best practices for defending your Kubernetes clusters against potential threats.
https://medium.com/@ridhoadya/unveiling-the-battlefield-attacking-and-defending-kubernetes-clusters-9702cdbe941a
https://medium.com/@ridhoadya/unveiling-the-battlefield-attacking-and-defending-kubernetes-clusters-9702cdbe941a
Medium
Attacking and Defending Kubernetes Clusters
In a digital era dominated by containerization and microservices, Kubernetes has emerged as the de facto orchestration platform. With its…
👍6
Free and Open Source PaaS-platform for seamless management of virtual machines, managed Kubernetes, and Databases-as-a-Service
https://github.com/aenix-io/cozystack
https://github.com/aenix-io/cozystack
GitHub
GitHub - cozystack/cozystack: Free and Open Source PaaS framework for seamless management of virtual machines, managed Kubernetes…
Free and Open Source PaaS framework for seamless management of virtual machines, managed Kubernetes, and Databases-as-a-Service - cozystack/cozystack
👍6❤3
Karpenter 1.0, recently announced by AWS, is a powerful open-source Kubernetes cluster autoscaling tool designed to optimize resource provisioning in real-time. This blog post from AWS highlights the key features of Karpenter, explaining how it improves the scalability and efficiency of Kubernetes clusters by automatically adjusting compute resources based on workload demands. Learn how Karpenter 1.0 can simplify cluster management and enhance operational efficiency.
https://aws.amazon.com/blogs/containers/announcing-karpenter-1-0/
https://aws.amazon.com/blogs/containers/announcing-karpenter-1-0/
Amazon
Announcing Karpenter 1.0 | Amazon Web Services
Introduction In November 2021, AWS announced the launch of v0.5 of Karpenter, “a new open source Kubernetes cluster auto scaling project.” Originally conceived as a flexible, dynamic, and high-performance alternative to the Kubernetes Cluster Autoscaler,…
🔥6👍4❤2
Terraform drift detection is essential for ensuring that your infrastructure remains consistent with your code. This article from Let's Do DevOps explores how to implement and manage drift detection in Terraform environments. Learn about the tools, techniques, and best practices for identifying infrastructure drift and keeping your deployments aligned with their intended state.
https://www.letsdodevops.com/p/lets-do-devops-terraform-drift-detection
https://www.letsdodevops.com/p/lets-do-devops-terraform-drift-detection
Letsdodevops
🔥Let’s Do DevOps: Terraform Drift Detection using GitHub Native Tools🚀
And how to post the drift to a slack room with links
❤🔥3🔥2
Reducing networking costs is crucial for optimizing cloud infrastructure, especially when managing traffic between tools like Flux and GitHub. This article from Tenets explores strategies for minimizing networking expenses by optimizing traffic flow between Flux and GitHub. Learn how to implement cost-saving measures without compromising performance or security in your continuous deployment workflows.
https://medium.com/tenets/saving-networking-costs-for-traffic-flow-between-flux-github-b1cebc76fd41
https://medium.com/tenets/saving-networking-costs-for-traffic-flow-between-flux-github-b1cebc76fd41
Medium
Saving networking costs for traffic flow between Flux <> Github
Behind mysterious NAT gateway (AWS) cost increases for outbound traffic
❤3👍3
Using
https://aws.amazon.com/blogs/containers/patterns-for-targetgroupbinding-with-aws-load-balancer-controller/
TargetGroupBinding with AWS Load Balancer Controller enables more efficient traffic routing to Kubernetes workloads. This AWS blog post explores common patterns for configuring TargetGroupBinding to integrate AWS Load Balancers with Kubernetes services. Learn how to leverage these patterns to optimize network traffic, enhance scalability, and ensure high availability for your Kubernetes applications.https://aws.amazon.com/blogs/containers/patterns-for-targetgroupbinding-with-aws-load-balancer-controller/
Amazon
Patterns for TargetGroupBinding with AWS Load Balancer Controller | Amazon Web Services
Although provisioning load balancers directly from clusters has been the Kubernetes native method for exposing services, in some cases this creates a provisioning process that doesn’t align with the architecture of the applications. Therefore, there’s a need…
👍4