Simplifying and securing access to Azure resources is crucial for protecting cloud environments. This article from ITNEXT explores the differences between Managed Identity and Workload Identity in Azure, highlighting how each approach works for authentication and resource management. Learn how to choose the best method for securing your applications and services, and understand the advantages of each in terms of security, simplicity, and scalability.
https://itnext.io/simplify-secure-your-azure-resources-managed-identity-vs-workload-identity-fe49d133fc03
https://itnext.io/simplify-secure-your-azure-resources-managed-identity-vs-workload-identity-fe49d133fc03
Medium
Optimize Your Kubernetes Resources with Azure IAM: Managed vs. Workload Identity
Unveiling the Best Identity Solution for Your Azure Kubernetes Service (AKS) Deployments
👍3👏1
Ensuring idempotence in CI/CD pipeline build steps is key to maintaining consistent and predictable deployments. This article explores the importance of idempotence and provides practical insights for achieving it in your workflows.
https://dev.to/tutunak/why-idempotence-matters-in-cicd-pipeline-build-steps-4ka
https://dev.to/tutunak/why-idempotence-matters-in-cicd-pipeline-build-steps-4ka
DEV Community
Why Idempotence Matters in CI/CD Pipeline Build Steps
Recently, I was caught off guard by a question: why should the steps of a build noscript in a pipeline...
💯3👍2🔥2❤1
Multi-tenancy in Kubernetes allows for better resource isolation and management across different teams or workloads within the same cluster. This article from Loft compares various multi-tenancy options in Kubernetes, including namespace-based isolation, virtual clusters, and physical cluster separation. Learn about the pros and cons of each approach and discover which solution might be the best fit for your use case, helping you achieve efficient and secure multi-tenancy in Kubernetes environments.
https://www.loft.sh/blog/comparing-multi-tenancy-options-in-kubernetes
https://www.loft.sh/blog/comparing-multi-tenancy-options-in-kubernetes
Vcluster
Comparing Multi-tenancy Options in Kubernetes
Balancing isolation, management ease, and cost is critical in multi-tenant Kubernetes setups. In this article, we’ll explore how to evaluate these factors to optimize resource utilization and tenant isolation. A key question when planning infrastructure is:…
Writing custom Prometheus exporters is a powerful way to extend monitoring capabilities, especially in Kubernetes environments. This article by dast04 on Medium explores how to write custom Prometheus exporters using Python, specifically for Kubernetes. Learn how to collect and expose custom metrics, and integrate them into Prometheus to monitor your services more effectively.
https://medium.com/@dast04/writing-custom-prometheus-exporters-in-python-kubernetes-73626b66d78c
https://medium.com/@dast04/writing-custom-prometheus-exporters-in-python-kubernetes-73626b66d78c
Medium
Writing Custom Prometheus Exporters (in Python) — Kubernetes
In this article, I will share with you a naïve example of writing Prometheus Exporter. I hope to demonstrate the general steps needed in…
👍3👌1
smbclient-ng, a fast and user-friendly way to interact with SMB shares.
https://github.com/p0dalirius/smbclient-ng
https://github.com/p0dalirius/smbclient-ng
GitHub
GitHub - p0dalirius/smbclient-ng: smbclient-ng, a fast and user friendly way to interact with SMB shares.
smbclient-ng, a fast and user friendly way to interact with SMB shares. - GitHub - p0dalirius/smbclient-ng: smbclient-ng, a fast and user friendly way to interact with SMB shares.
👍3
Managing multiple Helm charts can become complex as the number of deployments increases. This article from Kluctl explores how to streamline the management of numerous Helm charts using Kluctl, a tool designed to simplify Kubernetes deployments. Learn how Kluctl helps organize, manage, and deploy Helm charts more efficiently, reducing operational overhead and improving workflow scalability.
https://kluctl.io/blog/2023/02/28/managing-many-helm-charts-with-kluctl/
https://kluctl.io/blog/2023/02/28/managing-many-helm-charts-with-kluctl/
kluctl.io
Managing many Helm Charts with Kluctl
Learn how easy it is to manage multiple Helm Charts from one deployment project using Kluctl.
👍5
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out, and across containers, pods, nodes, and clusters. Inspired by Wireshark, purposely built for Kubernetes.
https://github.com/kubeshark/kubeshark
https://github.com/kubeshark/kubeshark
GitHub
GitHub - kubeshark/kubeshark: API traffic analyzer for Kubernetes, providing deep packet inspection with complete API and Kubernetes…
API traffic analyzer for Kubernetes, providing deep packet inspection with complete API and Kubernetes contexts, retaining cluster-wide L4 traffic (PCAP), and using minimal production compute resou...
👍4
Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider
https://github.com/FalcoSuessgott/vault-kubernetes-kms
https://github.com/FalcoSuessgott/vault-kubernetes-kms
GitHub
GitHub - FalcoSuessgott/vault-kubernetes-kms: Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider
Encrypt Kubernetes Secrets using Hashicorp Vault as the KMS Provider - FalcoSuessgott/vault-kubernetes-kms
👍9
Linting is an essential practice for improving code quality, ensuring consistency, and catching potential errors early. This article from Honeycomb discusses the importance of "making room" for linting in the development process, highlighting how it can be integrated into your workflow to enhance software reliability. Learn about the benefits of using linters and how to overcome common challenges in implementing linting practices across teams.
https://www.honeycomb.io/blog/making-room-for-lint
https://www.honeycomb.io/blog/making-room-for-lint
Honeycomb
Making Room for Some Lint
Linting provides a cheap feedback loop, requires little setup, and can capture risky patterns. See which linter we chose and why.
❤3👍3👏2💯1
Achieving five nines of uptime is a significant challenge, and migrating to Kubernetes can help enhance system reliability and availability. This article from WorkOS details how they improved their uptime from four to five nines by migrating to Kubernetes. It covers the strategies, tools, and lessons learned during the migration process, offering insights into how Kubernetes can be leveraged to achieve higher levels of reliability.
https://workos.com/blog/from-four-to-five-9s-of-uptime-by-migrating-to-kubernetes
https://workos.com/blog/from-four-to-five-9s-of-uptime-by-migrating-to-kubernetes
Workos
From four to five 9s of uptime by migrating to Kubernetes — WorkOS
When we launched User Management along with a free tier of up to 1 million MAUs, we faced several challenges using Heroku: the lack of an SLA, limited rollout functionality, and inadequate data locality options. To address these, we migrated to Kubernetes…
👍5
This article from Hacktodef highlights the security risks posed by AWS default settings, focusing on OpenID Connect (OIDC), Terraform, and potential vulnerabilities that can escalate anonymous access to Administrator-level access. It provides insights into how these risks can be addressed and mitigated, offering practical solutions for securing your AWS environments.
https://hacktodef.com/addressed-aws-defaults-risks-oidc-terraform-and-anonymous-to-administratoraccess
https://hacktodef.com/addressed-aws-defaults-risks-oidc-terraform-and-anonymous-to-administratoraccess
Hack to Def
Addressed AWS Default Risks: OIDC, Terraform and Admin Access
Preventing anonymous privilege escalation via misconfigured OIDC roles: defensive strategies and AWS's improvements
👍6
Managing Terraform versions efficiently is essential for keeping infrastructure code up to date. This article from RTFM explores how to use Dependabot in GitHub to automate Terraform version management. Learn how to integrate Dependabot with your GitHub repositories to automatically track and update Terraform versions, ensuring your projects stay secure and up to date with the latest releases.
https://rtfm.co.ua/en/dependabot-github-and-terraform-versions-management
https://rtfm.co.ua/en/dependabot-github-and-terraform-versions-management
RTFM: Linux, DevOps, and system administration | DevOps-engineering, and system administration. Cases from practice.
Dependabot: GitHub, and Terraform versions management
Setting up version update checks for Terraform providers and modules with Dependabot in the GitHub repository
👍6
scaf provides developers and DevOps engineers with a complete blueprint for a new project using Kubernetes
https://github.com/sixfeetup/scaf
https://github.com/sixfeetup/scaf
GitHub
GitHub - sixfeetup/scaf: scaf is a template manager that simplifies bootstrapping and updating projects.
scaf is a template manager that simplifies bootstrapping and updating projects. - sixfeetup/scaf
👍4
Command line artificial intelligence - Multi-vendor generation in your terminal
https://github.com/baalimago/clai/
https://github.com/baalimago/clai/
GitHub
GitHub - baalimago/clai: Command line artificial intelligence - Your local LLM context-feeder
Command line artificial intelligence - Your local LLM context-feeder - baalimago/clai
👍3
Graceful shutdowns are crucial for ensuring that your applications terminate smoothly without data loss or disruption. This article from freeCodeCamp explains how to implement graceful shutdowns in Kubernetes using Go. It covers the best practices for handling termination signals, managing shutdown timeouts, and ensuring that your applications can gracefully exit when scaling down or during maintenance.
https://www.freecodecamp.org/news/graceful-shutdowns-k8s-go/
https://www.freecodecamp.org/news/graceful-shutdowns-k8s-go/
freeCodeCamp.org
How to Terminate Go Programs Elegantly – A Guide to Graceful Shutdowns
Have you ever pulled the power cord out of your computer in frustration? While this might seem like a quick solution to certain problems, it can lead to data loss and system instability. In the world of software, a similar concept exists: the hard sh...
👍3
As organizations scale, DevOps teams often evolve into platform engineering teams to better support internal developer needs. This article from The New Stack discusses the transformation of a DevOps team into a platform engineering team, highlighting the differences in responsibilities, goals, and how they improve developer productivity by creating standardized, self-service infrastructure. Learn about the benefits of this shift and how it impacts overall software delivery.
https://thenewstack.io/how-a-devops-team-became-a-platform-engineering-team
https://thenewstack.io/how-a-devops-team-became-a-platform-engineering-team
The New Stack
How a DevOps Team Became a Platform Engineering Team
Learn how Allianz Direct insurance was able to scale fivefold by embracing a DevOps platform engineering strategy built with all stakeholders in mind.
👍4
Integrating APIs with Terraform can simplify and automate the management of cloud infrastructure. This article from Nitric explores how to manage APIs using Terraform, offering insights into best practices and strategies for API provisioning, deployment, and configuration. Learn how to effectively use Terraform to streamline your API management, enhance scalability, and reduce manual operations.
https://nitric.io/blog/terraform-api
https://nitric.io/blog/terraform-api
Nitric
Remotely Producing Terraform from an API | Get Infrastructure from Code | Nitric
Taming Terraform and making an API that produces it.
❤3👍2