ClickHouse engineers detail their migration to AWS Graviton processors, highlighting significant performance and efficiency gains for their cloud services. This article outlines the transition from x86 to ARM architecture, emphasizing the benefits of Graviton4's enhanced throughput and energy efficiency in handling data-intensive workloads.
https://clickhouse.com/blog/graviton-boosts-clickhouse-cloud-performance
https://clickhouse.com/blog/graviton-boosts-clickhouse-cloud-performance
ClickHouse
How ClickHouse Cloud uses AWS Graviton to boost performance and efficiency
We describe our migration from traditional processors to AWS Graviton ARM architecture, detailing the technical challenges and performance gains achieved in optimizing ClickHouse's open-source OLAP database system.
👍1
Daniel Guala explores how Kubernetes Pods can be equipped with multiple network interfaces using Multus CNI and the NMState Operator. This article discusses the integration of these tools to enhance network flexibility and customization in Kubernetes applications.
https://medium.datadriveninvestor.com/can-a-kubernetes-pod-have-more-than-one-network-attached-6d78456dbeb2
https://medium.datadriveninvestor.com/can-a-kubernetes-pod-have-more-than-one-network-attached-6d78456dbeb2
Medium
Can a Kubernetes Pod have more than one Network attached?
Additional Networks on Kubernetes using Multus CNI.
❤2
tfreveal shows a Terraform plan with all the secret (sensitive) values revealed
https://github.com/breml/tfreveal
https://github.com/breml/tfreveal
GitHub
GitHub - breml/tfreveal: tfreveal shows a Terraform plan with all the secret (sensitive) values revealed
tfreveal shows a Terraform plan with all the secret (sensitive) values revealed - breml/tfreveal
👍3
A blogpost by Artem Dinaburg on Trail of Bits shows how provisioning cloud infrastructure “the wrong way, but faster” produces working code riddled with weak security flaws—like hard‑coded passwords and pseudo‑random values from Python’s random module
https://blog.trailofbits.com/2024/08/27/provisioning-cloud-infrastructure-the-wrong-way-but-faster/
https://blog.trailofbits.com/2024/08/27/provisioning-cloud-infrastructure-the-wrong-way-but-faster/
The Trail of Bits Blog
Provisioning cloud infrastructure the wrong way, but faster
Today we’re going to provision some cloud infrastructure the Max Power way: by combining automation with unchecked AI output. Unfortunately, this method produces cloud infrastructure code that 1) works and 2) has terrible security properties. In a nutshell…
👍2❤1
A post by Jorge Tovar walks through achieving zero‑downtime deployments in AWS using OpenTofu/Terraform, SAM, and Ansible, covering blue/green, canary, rolling, and immutable infrastructure strategies
https://dev.to/aws-builders/zero-downtime-deployment-in-aws-with-tofuterraform-and-sam-14d6
https://dev.to/aws-builders/zero-downtime-deployment-in-aws-with-tofuterraform-and-sam-14d6
DEV Community
Zero Downtime Deployment in AWS with Tofu/Terraform and SAM
I still remember the days when we had to set flags and display a maintenance page during application...
👍2
kubectl-validate is a SIG-CLI subproject to support the local validation of resources for native Kubernetes types and CRDs.
https://github.com/kubernetes-sigs/kubectl-validate
https://github.com/kubernetes-sigs/kubectl-validate
GitHub
GitHub - kubernetes-sigs/kubectl-validate
Contribute to kubernetes-sigs/kubectl-validate development by creating an account on GitHub.
👍1
Forwarded from DevOps & SRE notes (tutunak)
Looking for a hosting platform to practice with Linux, Kubernetes, etc.? Register using my referral link on DigitalOcean and get $200 in credit for 60 days. By registering through my referral link, you also support this Telegram channel.
👉 Register
👉 Register
❤5
A cross-platform, fast and extensible general purpose fuzzy finder 📺
https://github.com/alexpasmantier/television
https://github.com/alexpasmantier/television
GitHub
GitHub - alexpasmantier/television: A very fast, portable and hackable fuzzy finder for the terminal.
A very fast, portable and hackable fuzzy finder for the terminal. - alexpasmantier/television
❤7
A guide by Rami McCarthy explains how to create AWS IAM service roles systematically—examining options like DSLs (e.g., policy_sentry), GUIs, and LLM‑based natural‑language tooling to address notoriously complex permission configurations
https://ramimac.me/iam-service-roles?ck_subscriber_id=2797503477
https://ramimac.me/iam-service-roles?ck_subscriber_id=2797503477
High Signal Security
Industrial IAM Service Role Creation
A guide to tools for creating AWS IAM service roles.
👍3❤1
A writeup by Maxim Onyshchenko shares insights into boosting Terraform efficiency—highlighting modular architecture, remote state management, CI/CD integration, and validation techniques to streamline infrastructure workflows
https://medium.com/@maximonyshchenko/the-secret-to-terraform-efficiency-a76140a5dfa1
https://medium.com/@maximonyshchenko/the-secret-to-terraform-efficiency-a76140a5dfa1
Medium
The secret to Terraformʼs efficiency
*This article is for Terraform heavy users, who manage complex infrastructures.
👍5❤1
Meshery Extensions are plugins or add-ons that enhance the functionality of the Meshery platform beyond its core capabilities.
https://github.com/meshery-extensions/helm-kanvas-snapshot
https://github.com/meshery-extensions/helm-kanvas-snapshot
GitHub
GitHub - meshery-extensions/helm-kanvas-snapshot
Contribute to meshery-extensions/helm-kanvas-snapshot development by creating an account on GitHub.
👍3
A blogpost by Ali Sattari delves into various methods for aggregating service-level indicators (SLIs) into single metrics—covering approaches like summing events, weighted averages, percentiles, and counting SLO compliance
https://ali.sattari.me/posts/2024/aggregating-slis/
https://ali.sattari.me/posts/2024/aggregating-slis/
ali.sattari.me
Aggregating SLIs
With a great number of SLIs come great responsibility aggregation issues. While aggregation provides more readability in overviews, it also inadvertently hides nuances and details. Our aim should be to propose a sensible aggregation method that ensures we…
👍2❤1
An article from Gremlin shares reliability recommendations for organizations adopting Kubernetes—urging teams to proactively test failure modes (e.g., simulate liveness probe failures, pod blackholes), learn from incidents, and implement resilience pipelines with tools like Gremlin's “Detected Risks” and reliability scorecards
https://www.gremlin.com/blog/reliability-recommendations-when-adopting-kubernetes
https://www.gremlin.com/blog/reliability-recommendations-when-adopting-kubernetes
Gremlin
Reliability recommendations when adopting Kubernetes
General reliability best practices when adopting Kubernetes.
❤1👍1
A writeup on DZone discusses maintaining alignment between two multi-master databases using a vector clock approach—employing asynchronous bi-directional message queues (via Kafka and Avro) and identical alignment algorithms on both sides
https://dzone.com/articles/keeping-two-multi-master-dbs-aligned-with-vector-clock
https://dzone.com/articles/keeping-two-multi-master-dbs-aligned-with-vector-clock
DZone
Keeping Two Multi-Master Databases Aligned With a Vector Clock
In this article, learn about an experience in keeping two different databases aligned with two different technologies by using an application-level solution.