DevOps&SRE Library – Telegram
DevOps&SRE Library
18.4K subscribers
459 photos
3 videos
2 files
5K links
Библиотека статей по теме DevOps и SRE.

Реклама: @ostinostin
Контент: @mxssl

РКН: https://www.gosuslugi.ru/snet/67704b536aa9672b963777b3
Download Telegram
OIDC-Guard

OpenID Connect (OIDC) & OAuth 2 API Server used to secure Kubernetes Ingress


https://github.com/IvanJosipovic/OIDC-Guard
So You Want to Build Your Own Data Center

So in response, we kicked off a Railway Metal project last year. Nine months later we were live with the first site in California, having designed, spec-ed, and installed everything from the fiber optic cables in the cage to the various contracts with ISPs. We’re lighting up three more data center regions as we speak.


https://blog.railway.com/p/data-center-build-part-one
How GitLab Lost 300GB of Production Data and What We Can Learn

The Hard Lesson on Backups, Disaster Recovery, and Human Error


https://bytesizeddesign.substack.com/p/how-gitlab-lost-300gb-of-production
subtrace

Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.


https://github.com/subtrace/subtrace
A major update on the ingress controller: Migrating to the new nginx-ingress controller

https://medium.com/adidoescode/major-update-on-the-ingress-controller-84cbf448e89c
Using SimKube 1.0: Comparing Kubernetes Cluster Autoscaler and Karpenter

https://blog.appliedcomputing.io/p/using-simkube-10-comparing-kubernetes
MetalLB and KinD: Loads Balanced Locally

When You Need LoadBalancer Services On The Go, MetalLB and KinD Are There For You


https://medium.com/@tylerauerbeck/metallb-and-kind-loads-balanced-locally-1992d60111d8
awesome-cloud-native

A curated list for awesome cloud native tools, software and tutorials.


https://github.com/rootsongjc/awesome-cloud-native
cyphernetes

A Kubernetes Query Language


https://github.com/AvitalTamir/cyphernetes
kubectl-view-secret

Kubernetes CLI plugin to decode Kubernetes secrets


https://github.com/elsesiy/kubectl-view-secret
Organizing Terraform Code for Scalability and Maintainability

Managing Infrastructure as Code (IaC) at scale is fundamentally different from handling a handful of resources. While getting started with Terraform/OpenTofu is relatively straightforward, maintaining large-scale infrastructure deployments introduces challenges that can’t be solved by simply writing more code. Code organization becomes a critical factor in whether your infrastructure remains manageable or devolves into a maintenance nightmare.


https://terrateam.io/blog/terraform-code-organization
AWS PrivateLink Cross-Region Connectivity

AWS PrivateLink provides a secure method for sharing and accessing services across VPCs and accounts. It ensures that all traffic remains within the AWS network, avoiding exposure to the public internet. Before December 2024, both service providers and consumers were required to be in the same AWS Region. With the launch of native cross-region connectivity for AWS PrivateLink, you can now share and access VPC endpoint services across different Regions.


https://towardsaws.com/aws-privatelink-cross-region-connectivity-5c7db4b1ff7d
Can I TF

As time passes, OpenTofu and Terraform become more distant from each other. CanI.TF helps us to understand their differences quickly.


https://cani.tf
terraform-module-releaser

Simplify the management of Terraform modules in your monorepo with this GitHub Action, designed to automate module-specific versioning and releases. By streamlining the Terraform module release process, this action allows you to manage multiple modules in a single repository while still maintaining independence and flexibility. Additionally, it generates a beautifully crafted wiki for each module, complete with readme information, usage examples, Terraform-docs details, and a full changelog.


https://github.com/techpivot/terraform-module-releaser
httptap

View the HTTP and HTTPS requests made by any linux program by running httptap -- <command>.


https://github.com/monasticacademy/httptap
Forwarded from DevOps от первого лица (Виталий Бутурлин)
В прошлый раз было управление спейсами Tarantool со стороны пользователя, в этот раз углубляемся внутрь и разбираемся как устроен движок Vinyl.

🦧 Поверхностное представление о том, что Vinyl работает с диском не дает полного понимания механизмов заложенных внутри для обслуживания кластера.

🤯 Оказывается здесь не классическое B-tree как в реляционных СУБД типа InnoDB в MySQL или Postgress, а LSM-tree со всеми вытекающими. В документации по Vinyl есть исчерпывающее объяснение разницы, но ...

Меня интересовали концептуальные механизмы с точки зрения администратора этой СУБД, поэтому в статье разберем:
🧐 Что такое Vinyl
🗂 Из чего состоит файловая структура спейса на Vinyl
🖼 Визуализируем хранилище Vinyl (это пирамида)
📥 Посмотрим как данные перемещаются по пирамиде
🛠 Определим как управлять габаритами пирамиды и на что они влияют
🎡 Какие фоновые процессы обслуживают движок Vinyl
💣 Как работа Vinyl влияет на систему
🪣 Как очистить дерево от старых версий и удаленных кортежей и вообще почему есть в этом необходимость

Детали в статье: https://byurrer.ru/tarantool-vinyl

P. S. если есть непонятки или я что-то упустил - пишите в комментариях ⬇️
Product management is broken. Engineers can fix it

How we've redefined the PM and engineer relationship


https://newsletter.posthog.com/p/product-management-is-broken-engineers