классный комикс про внутреннее устройство куба 🙂
https://habr.com/ru/company/flant/blog/583660/

Good intoroduction into The Raft Consensus Algorithm
https://raft.github.io/

Одно из главных отличий между сеньором и джуном — свое мнение о том, как все должно быть (c)
Собеседования не помогут определить, насколько хорошим членом команды будет человек (c)

must read статья про работу с JVM приложениями в кубе
Java Application Optimization on Kubernetes on the Example of a Spring Boot Microservice

https://faun.pub/java-application-optimization-on-kubernetes-on-the-example-of-a-spring-boot-microservice-cf3737a2219c

KubeEye aims to find various problems on Kubernetes, such as application misconfiguration(using Polaris), cluster components unhealthy and node problems(using Node-Problem-Detector). Besides predefined rules, it also supports custom defined rules.

https://github.com/kubesphere/kubeeye

Snowcat - A service mesh scanning tool
Snowcat gathers and analyzes the configuration of an Istio cluster and audits it for potential violations of security best practices.

https://github.com/praetorian-inc/snowcat

интересный набор тикетов про поддержку cilium для AKS
https://github.com/Azure/AKS/issues/2092
https://github.com/Azure/AKS/issues/2284
https://github.com/cilium/cilium/pull/16631

Automated dependency updates
Dependabot creates pull requests to keep your dependencies secure and up-to-date.

https://dependabot.com/

доклад отдает фразой “мы используем -Netflix- Spring Cloud stack потому что больше ничего кроме Java не умеем”
Алексей Нестеров — Spring Cloud в эру Kubernetes
https://www.youtube.com/watch?v=vUo3cTE3Y0g

Some really useful articles about LIM/REQ in K8S

https://medium.com/omio-engineering/cpu-limits-and-aggressive-throttling-in-kubernetes-c5b20bd8a718
https://sysdig.com/blog/kubernetes-limits-requests/
https://cdmana.com/2021/04/20210408163004985c.html
https://erickhun.com/posts/kubernetes-faster-services-no-cpu-limits/
https://faun.pub/java-application-optimization-on-kubernetes-on-the-example-of-a-spring-boot-microservice-cf3737a2219c

This project is the starting point for the Security Profiles Operator, an out-of-tree Kubernetes enhancement which aims to make managing and applying seccomp and AppArmor profiles more easy and straight forward in Kubernetes.

https://github.com/kubernetes-sigs/security-profiles-operator