DevOps&SRE Library – Telegram
DevOps&SRE Library
18.4K subscribers
466 photos
4 videos
2 files
5K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
mise

mise is a polyglot tool version manager. It replaces tools like asdf, nvm, pyenv, rbenv, etc.

mise allows you to switch sets of env vars in different project directories. It can replace direnv.

mise is a task runner that can replace make, or npm noscripts.


https://github.com/jdx/mise
Migrating billions of records: moving our active DNS database while it’s in use

According to a survey done by W3Techs, as of October 2024, Cloudflare is used as an authoritative DNS provider by 14.5% of all websites. As an authoritative DNS provider, we are responsible for managing and serving all the DNS records for our clients’ domains. This means we have an enormous responsibility to provide the best service possible, starting at the data plane. As such, we are constantly investing in our infrastructure to ensure the reliability and performance of our systems.


https://blog.cloudflare.com/migrating-billions-of-records-moving-our-active-dns-database-while-in-use
Against Incident Severities and in Favor of Incident Types

About a year ago, Honeycomb kicked off an internal experiment to structure how we do incident response. We looked at the usual severity-based approach (usually using a SEV scale), but decided to adopt an approach based on types, aiming to better play the role of quick definitions for multiple departments put together. This post is a short report on our experience doing it.


https://www.honeycomb.io/blog/against-incident-severities-favor-incident-types
How to Build Smaller Container Images: Docker Multi-Stage Builds

https://labs.iximiuz.com/tutorials/docker-multi-stage-builds
slackdump

Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.


https://github.com/rusq/slackdump
automatisch

The open source Zapier alternative. Build workflow automation without spending time and money.


https://github.com/automatisch/automatisch
pglite-fusion

Embed an SQLite database in your PostgreSQL table. AKA multitenancy has been solved.


https://github.com/frectonz/pglite-fusion
There’s No Such Thing as a Free Lunch!

How Slack trains engineers in incident response by ordering lunch together.


https://slack.engineering/theres-no-such-thing-as-a-free-lunch
lla

lla is a high-performance, extensible alternative to the traditional ls command, written in Rust. It offers enhanced functionality, customizable output, and a plugin system for extended capabilities.


https://github.com/triyanox/lla
wesql

WeSQL is an innovative MySQL distribution that adopts a compute-storage separation architecture, with storage backed by S3 (and S3-compatible systems). It can run on any cloud, ensuring no vendor lock-in.

WeSQL has completely replaced MySQL’s traditional disk storage with S3. All MySQL data—binlogs, schemas, storage engine metadata, WAL, and data files—are entirely (not partially!) stored as objects in S3. The 11 nines of durability provided by S3 significantly enhances data reliability. Additionally, WeSQL can start from a clean, empty instance, connect to S3, load the data, and begin serving immediately with no additional setup required.

It is ideal for users who need an easy-to-manage, cost-effective, and developer-friendly MySQL database solution, especially for those needing support for both Serverless and BYOC (Bring Your Own Cloud).


https://github.com/wesql/wesql
10 Essential AWS Security Steps for Your AWS Account

After spending years helping teams set up their AWS infrastructure, I've noticed something interesting: many of us face the same security challenges when starting out. You know what I mean if you've ever wondered "Wait, is my S3 bucket actually secure?" or "Should I really be using the root account for this?" (Spoiler: probably not!)

The good news? I've put together this guide to help you build a rock-solid AWS security foundation from day one. We'll cover 10 essential security measures that I've seen make a real difference in protecting AWS environments. While absolute security is a journey rather than a destination, implementing these steps will put you way ahead of the game in defending against common attack vectors.

And I've also created a Terraform project that you can use as baseline for your securing your AWS account!

The best part? It's all under the AWS free tier! 😉

Essentially, I got tired or reading the same posts regarding people (or organizations) getting their account hacked, here's my solution for that!


https://cloudnature.net/blog/10-essential-aws-security-steps-for-your-aws-account
terrateam

Terrateam is an open-source GitOps CI/CD platform for automating infrastructure workflows. It integrates with GitHub to orchestrate Terraform, OpenTofu, CDKTF, and Terragrunt operations via pull requests. Use our hosted service or run on-premise.


https://github.com/terrateamio/terrateam
Using Sealed Secrets with Your Kubernetes Applications

This blog post walks you through working with Sealed Secrets by Bitnami.


https://devoriales.com/post/351/using-sealed-secrets-with-your-kubernetes-applications
FRR-k8s as a BGP backend for MetalLB

The FRR-k8s API provides important Border Gateway Protocol (BGP) features required by the MetalLB load balancer with the ability to selectively accept routes and to inject raw FRR configuration options. It's built on FRRouting (FRR), a free and open source internet routing protocol suite for Linux and Unix platforms that implements Border Gateway Protocol (BGP) and Bidirectional Forwarding Detection (BFD).


https://www.redhat.com/en/blog/frr-k8s-bgp-backend-metallb
Monitoring, troubleshooting, and query analytics for PostgreSQL on Kubernetes

https://dev.to/dbazhenov/monitoring-troubleshooting-and-query-analytics-for-postgresql-on-kubernetes-2onj
kubeblocks

KubeBlocks is an open-source control plane software that runs and manages databases, message queues and other stateful applications on K8s.


https://github.com/apecloud/kubeblocks
Kuzco

Kuzco reviews your Terraform and OpenTofu resources, compares them to the provider schema to detect unused parameters, and uses AI to suggest improvements and fixes


https://github.com/RoseSecurity/Kuzco
Load testing Kubernetes clients without breaking the bank

What if I told you can do performance tests on Kubernetes Clients without spending too much money, and much faster than conventional methods?


https://itnext.io/load-testing-kubernetes-clients-without-breaking-the-bank-f43332faa6ce