contrast
https://github.com/edgelesssys/contrast
Contrast runs confidential container deployments on Kubernetes at scale.
https://github.com/edgelesssys/contrast
prom-analytics-proxy
https://github.com/nicolastakashi/prom-analytics-proxy
prom-analytics-proxy is a lightweight proxy application designed to sit between your Prometheus server and its clients. It provides valuable insights by collecting detailed analytics on PromQL queries, helping you understand query performance, resource usage, and overall system behavior. This can significantly improve observability for Prometheus users, providing actionable data to optimize query execution and infrastructure.
https://github.com/nicolastakashi/prom-analytics-proxy
cloudflare-ddns
https://github.com/aureum-cloud/cloudflare-ddns
Cloudflare DDNS is a Go application designed to update DNS records on Cloudflare according to your current public IPv4 and/or IPv6 addresses. It reads configuration from a JSON file, retrieves the current IP addresses, and updates DNS records as needed.
https://github.com/aureum-cloud/cloudflare-ddns
From Fragile to Faultless: Kubernetes Self-Healing In Practice
https://techblog.citystoragesystems.com/p/kubernetes-self-healing
Overcoming imperfections of managed Kubernetes with early self-healing.
https://techblog.citystoragesystems.com/p/kubernetes-self-healing
The trouble with Topology Aware Routing: Sacrificing reliability in the name of cost savings
P1: https://buoyant.io/blog/the-trouble-with-topology-aware-routing-sacrificing-reliability-to-avoid-cross-zone-traffic
P2: https://buoyant.io/blog/topology-aware-routing-introducing-high-availability-zone-aware-load-balancing
P1: https://buoyant.io/blog/the-trouble-with-topology-aware-routing-sacrificing-reliability-to-avoid-cross-zone-traffic
P2: https://buoyant.io/blog/topology-aware-routing-introducing-high-availability-zone-aware-load-balancing
Taming FluxCD HelmReleases: The Kustomize Way approach
https://dev.to/davinkevin/taming-fluxcd-helmreleases-the-kustomize-way-approach-48l8
https://dev.to/davinkevin/taming-fluxcd-helmreleases-the-kustomize-way-approach-48l8
Building Secure Kubernetes Environments, A Practical Guide to Network Policies
https://medium.com/@jdominguezc26/building-secure-kubernetes-environments-a-practical-guide-to-network-policies-3590f372ab2d
https://medium.com/@jdominguezc26/building-secure-kubernetes-environments-a-practical-guide-to-network-policies-3590f372ab2d
Mastering Kubernetes networking: A journey in cloud-native packet management
https://otterize.com/blog/mastering-kubernetes-networking-otterize-s-journey-in-cloud-native-packet-management
Master Kubernetes networking with a comprehensive packet walk, and learn how Otterize helps build adaptive Network Policies.
https://otterize.com/blog/mastering-kubernetes-networking-otterize-s-journey-in-cloud-native-packet-management
Bouncing Back: How to Fix Your StatefulSet After PVC Deletion Disaster
https://medium.com/@moty.fux/bouncing-back-how-to-fix-your-statefulset-after-pvc-deletion-disaster-d70f6ec1a92d
In this article, I’ll share our surprisingly simple recovery process after our StatefulSets lost their PVCs (volumes were still available on our cloud provider) due to an accidental deletion.
https://medium.com/@moty.fux/bouncing-back-how-to-fix-your-statefulset-after-pvc-deletion-disaster-d70f6ec1a92d
Kubernetes Webhook Admission Controller
https://itnext.io/kubernetes-webhook-admission-controller-3271d041c636
How to use k8s admission controller for authorize externally
https://itnext.io/kubernetes-webhook-admission-controller-3271d041c636
Advanced Network Observability – Supercharging Container Network Observability in Azure Kubernetes Service (AKS)
https://pixelrobots.co.uk/2024/06/advanced-network-observability-supercharging-container-network-observability-in-azure-kubernetes-service-aks
https://pixelrobots.co.uk/2024/06/advanced-network-observability-supercharging-container-network-observability-in-azure-kubernetes-service-aks
Scaling Kubernetes Pods Based on HTTP Traffic using KEDA HTTP Add-on
https://blog.raulnq.com/scaling-kubernetes-pods-based-on-http-traffic-using-keda-http-add-on
https://blog.raulnq.com/scaling-kubernetes-pods-based-on-http-traffic-using-keda-http-add-on
system-upgrade-controller
https://github.com/rancher/system-upgrade-controller
This project aims to provide a general-purpose, Kubernetes-native upgrade controller (for nodes). It introduces a new CRD, the Plan, for defining any and all of your upgrade policies/requirements. A Plan is an outstanding intent to mutate nodes in your cluster. For up-to-date details on defining a plan please review v1/types.go.
https://github.com/rancher/system-upgrade-controller
kraan
https://github.com/fidelity/kraan
kraan helps you deploy and manage 'layers' on top of kubernetes. By applying layers on top of K8s clusters, you can build focused platforms on top of K8s e.g ML platforms, Data platform etc. Each layer is a collection of addons and can have dependencies established between the layers. i.e a "mgmt-layer" can depend on a "common-layer". Kraan will always ensure that the addons in the "common-layer" are deployed successfully before deploying the "mgmt-layer" addons. A layer is represented as a kubernetes custom resource and kraan is an operator that is deployed into the cluster and works constantly to reconcile the state of the layer custom resource.
kraan is powered by flux2 and builds on top of projects like source-controller and helm-controller.
https://github.com/fidelity/kraan
intel-device-plugins-for-kubernetes
https://github.com/intel/intel-device-plugins-for-kubernetes
Collection of Intel device plugins for Kubernetes
https://github.com/intel/intel-device-plugins-for-kubernetes
sops-secrets-operator
https://github.com/isindir/sops-secrets-operator
Operator which manages Kubernetes Secret Resources created from user defined SopsSecrets CRs, inspired by Bitnami SealedSecrets and sops.
https://github.com/isindir/sops-secrets-operator
cubefs
https://github.com/cubefs/cubefs
As an open-source distributed storage, CubeFS can serve as your datacenter filesystem, data lake storage infra, and private or hybrid cloud storage. In particular, CubeFS enables the separation of storage/compute architecture for databases and AI/ML applications.
https://github.com/cubefs/cubefs
mani-diffy
https://github.com/chime/mani-diffy
This program walks a hierarchy of Argo CD Application templates, renders Kubernetes manifests from the input templates, and posts the rendered files back for the user to review and validate.
It is designed to be called from a CI job within a pull request, enabling the author to update templates and see the resulting manifests directly within the pull request before the changes are applied to the Kubernetes cluster.
The rendered manifests are kept within the repository, making diffs between revisions easy to parse, dramatically improving safety when updating complex application templates.
https://github.com/chime/mani-diffy
bashly
https://github.com/DannyBen/bashly
Bashly is a command line application (written in Ruby) that lets you generate feature-rich bash command line tools.
Bashly lets you focus on your specific code, without worrying about command line argument parsing, usage texts, error messages and other functions that are usually handled by a framework in any other programming language.
https://github.com/DannyBen/bashly
Dear friend, you have built a Kubernetes
https://www.macchaffee.com/blog/2024/you-have-built-a-kubernetes
I am afraid to inform you that you have built a Kubernetes. I know you wanted to "choose boring tech" to just run some containers. You said that "Kubernetes is overkill" and "it's just way too complex for a simple task" and yet, six months later, you have pile of shell noscripts that do not work—breaking every time there's a slight shift in the winds of production.
https://www.macchaffee.com/blog/2024/you-have-built-a-kubernetes
Choosing the right Postgres indexes
https://incident.io/blog/choosing-the-right-postgres-indexes
Indexes can make a world of difference to performance in Postgres, but it’s not always obvious when you’ve written a query that could do with an index. Here we’ll cover:
- What indexes are
- Some use cases for when they’re helpful
- Rules of thumb for figuring out which sort of index to add
- How to identify when you’re missing an index
https://incident.io/blog/choosing-the-right-postgres-indexes