Mastering Terraform Workflows: apply-before-merge vs apply-after-merge
https://terramate.io/rethinking-iac/mastering-terraform-workflows-apply-before-merge-vs-apply-after-merge
Discover the two main Terraform and OpenTofu workflows: apply-before-merge and apply-after-merge, and learn why apply-after-merge is likely the better choice.
https://terramate.io/rethinking-iac/mastering-terraform-workflows-apply-before-merge-vs-apply-after-merge
Terraform Development Pipeline
https://mycloudrevolution.com/2024/05/23/terraform-development-pipeline
The purpose of a development pipeline is to deploy with confidence and therefore at high frequencies.
https://mycloudrevolution.com/2024/05/23/terraform-development-pipeline
Terramaid
https://github.com/RoseSecurity/Terramaid
Terramaid transforms your Terraform resources and plans into visually appealing Mermaid diagrams. By converting complex infrastructure into easy-to-understand diagrams, Terramaid enhances documentation, simplifies review processes, and fosters better collaboration among team members. Whether you're looking to enrich your project's documentation, streamline reviews, or just bring a new level of clarity to your Terraform configurations, Terramaid is the perfect utility to integrate into your development workflow.
https://github.com/RoseSecurity/Terramaid
Terraform at LumApps
Part 1: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-1-f37660b4ed95
Part 2: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-2-27494897def4
Part 3: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-3-daa3c869f0f4
We have :
- 15 terragrunt.hcl files for every service.
- Around 900 terragrunt.hcl files (15*60) in total.
Part 1: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-1-f37660b4ed95
Part 2: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-2-27494897def4
Part 3: https://medium.com/lumapps-engineering/terraform-at-lumapps-part-3-daa3c869f0f4
Percentile
https://blog.alexewerlof.com/p/percentile
What is it? Why is it used? And why is it important in the context of optimization and reliability engineering? Bonus: a browser app that lets you play with data.
https://blog.alexewerlof.com/p/percentile
Is Kubernetes rolling update truly zero downtime?
https://medium.com/@chawlajanit/is-kubernetes-rolling-update-truly-zero-downtime-a83103af65a5
https://medium.com/@chawlajanit/is-kubernetes-rolling-update-truly-zero-downtime-a83103af65a5
Enhancing Netflix Reliability with Service-Level Prioritized Load Shedding
https://netflixtechblog.com/enhancing-netflix-reliability-with-service-level-prioritized-load-shedding-e735e6ce8f7d
Applying Quality of Service techniques at the application level
https://netflixtechblog.com/enhancing-netflix-reliability-with-service-level-prioritized-load-shedding-e735e6ce8f7d
A write-ahead log is not a universal part of durability
https://notes.eatonphil.com/2024-07-01-a-write-ahead-log-is-not-a-universal-part-of-durability.html
A database does not need a write-ahead log (WAL) to achieve durability. A database can write its long-term data structure durably to disk before returning to a client. Granted, this is a bad idea! And granted, a WAL is critical for durability by design in most databases. But I think it's helpful to understand WALs by understanding what you could do without them.
https://notes.eatonphil.com/2024-07-01-a-write-ahead-log-is-not-a-universal-part-of-durability.html
Useful git commands for SRE and DevOps engineers
https://reliabilityengineering.substack.com/p/useful-git-commands-for-sre-and-devops
https://reliabilityengineering.substack.com/p/useful-git-commands-for-sre-and-devops
ConfigMap Conundrum: Subtleties of Dynamic Updates in Kubernetes Configurations
https://blog.adityasamant.dev/configmap-conundrum-subtleties-of-dynamic-updates-in-kubernetes-configurations
Know the differences between ConfigMaps mounted as Volumes and ConfigMaps defined as environment variables.
https://blog.adityasamant.dev/configmap-conundrum-subtleties-of-dynamic-updates-in-kubernetes-configurations
Argo Events — Event Bus and Webhook
https://medium.chuklee.com/argo-events-event-bus-and-webhook-ac34e5714209
Argo Event is a Kubernetes based event automation engine. It is part of the Argo project. Argo Events can be used with or independent of other projects in Argo.
I will be writing a series of articles on Argo Events; in these articles I will be looking at how we can use Argo Event to automate process within and without a Kubernetes cluster.
For this first article in this series, we will examine Argo Events core concepts, installation and provisioning different event buses which Argo Event uses to forward events to their sink. Finally we will look at setting up a webhook event flow to verify our setup.
https://medium.chuklee.com/argo-events-event-bus-and-webhook-ac34e5714209
Users, Groups, Roles and API Access in Kubernetes
https://blog.adityasamant.dev/users-groups-roles-and-api-access-in-kubernetes
The nuances of how users and groups are configured in Kubernetes and how the role-based access control (RBAC) mechanism applies for them.
https://blog.adityasamant.dev/users-groups-roles-and-api-access-in-kubernetes
Kubernetes Events — News feed of your cluster
https://decisivedevops.com/kubernetes-events-news-feed-of-your-kubernetes-cluster-826e08892d7a
Understand Kubernetes Events and learn to use kubectl events to monitor and troubleshoot your cluster’s issues effectively.
https://decisivedevops.com/kubernetes-events-news-feed-of-your-kubernetes-cluster-826e08892d7a
GPU Virtualization in K8s: Challenges and State of the Art
https://www.arrikto.com/blog/gpu-virtualization-in-k8s-challenges-and-state-of-the-art
Kubernetes schedules GPU workloads by assigning a whole device to a single job exclusively. This one-to-one relationship leads to massive GPU underutilization, especially for interactive jobs, characterized by significant idle periods and infrequent bursts of heavy GPU usage. Current solutions enable GPU sharing by statically assigning a fixed slice of GPU memory to each co-located job. These solutions are not suitable for interactive scenarios since the number of co-located jobs is limited by the size of physical GPU memory. Consequently, users must know the GPU memory demand of their jobs before submitting them for execution, which is impractical.
https://www.arrikto.com/blog/gpu-virtualization-in-k8s-challenges-and-state-of-the-art
gitops-bridge
https://github.com/gitops-bridge-dev/gitops-bridge
The GitOps Bridge is a community project that aims to showcase best practices and patterns for bridging the process of creating a Kubernetes cluster to subsequently managing everything through GitOps. It focuses on using ArgoCD or FluxCD, both of which are CNCF-graduated projects.
https://github.com/gitops-bridge-dev/gitops-bridge
Ephemeral Values in Terraform
https://log.martinatkins.me/2024/05/22/terraform-ephemeral-values
Since long before I worked at HashiCorp I've been interested in the problems with how Terraform interacts with security-sensitive information like passwords and private keys.
https://log.martinatkins.me/2024/05/22/terraform-ephemeral-values
Solving large logs with ClickHouse
https://embrace.io/blog/solving-large-logs-with-clickhouse
Embrace engineers share a few key learnings from supporting larger log sizes, including working around a current limitation in ClickHouse and testing several skip indices to optimize query performance and storage cost.
https://embrace.io/blog/solving-large-logs-with-clickhouse
Inside EKS Networking: Decoding the Service IP Journey
https://dev.to/chen/inside-eks-networking-decoding-the-service-ip-journey-4k1
https://dev.to/chen/inside-eks-networking-decoding-the-service-ip-journey-4k1
How to Set Up a Validating Admission Webhook In Kubernetes?
https://adil.medium.com/how-to-set-up-a-validating-admission-webhook-on-kubernetes-bd0733bfcb51
How to Use Validating Admission Webhook In Kubernetes?
https://adil.medium.com/how-to-use-validating-admission-webhook-on-kubernetes-a4acacc180b6
https://adil.medium.com/how-to-set-up-a-validating-admission-webhook-on-kubernetes-bd0733bfcb51
How to Use Validating Admission Webhook In Kubernetes?
https://adil.medium.com/how-to-use-validating-admission-webhook-on-kubernetes-a4acacc180b6