+❤️ the Performance Monitor in @ChromeDevTools. Gives you a real-time view of CPU use, JS heap size, JS event listeners, style recalcs & more: https://t.co/tc6CyTya3O pic.twitter.com/BWSi8klGkE
— Addy Osmani (@addyosmani) July 7, 2020
❤️ the Performance Monitor in @ChromeDevTools. Gives you a real-time view of CPU use, JS heap size, JS event listeners, style recalcs & more: https://t.co/tc6CyTya3O pic.twitter.com/BWSi8klGkE
— Addy Osmani (@addyosmani) July 7, 2020
diff --git a/GoogleCloudPlatform.html b/GoogleCloudPlatform.html index 04e00493..16318ce7 100644 --- a/GoogleCloudPlatform.html +++ b/GoogleCloudPlatform.html @@ -7928,21 +7928,21 @@8 Google extensions every developer must use
— Meet Jain🦅 (@meetjain74) September 5, 2021
A thread 🧵🧵
Level Up Your Agents: Announcing Google’s Official Skills Repository - (Related to ai-agents-mcp topic)
devlibrary.withgoogle.com 🌟 New open source content library from Google, a showcase of what developers like you have built with Google technologies.
+devlibrary.withgoogle.com 🌟 New open source content library from Google, a showcase of what developers like you have built with Google technologies.
+🎟 You want to get a ticket to @googlecloud networking, it's really cool!
— Priyanka Vergadia (@pvergadia) November 1, 2021
🤓 I take an example company and walk trough the different networking services, take look 👉 https://t.co/tTwLp7DXH4#cloudnetworking #cloudcomputing pic.twitter.com/yFVEUpLy1g
🎟 You want to get a ticket to @googlecloud networking, it's really cool!
— Priyanka Vergadia (@pvergadia) November 1, 2021
🤓 I take an example company and walk trough the different networking services, take look 👉 https://t.co/tTwLp7DXH4#cloudnetworking #cloudcomputing pic.twitter.com/yFVEUpLy1g
diff --git a/about.html b/about.html index e73b9f65..7b1e7d82 100644 --- a/about.html +++ b/about.html @@ -7671,7 +7671,7 @@Our new managed continuous service delivery, @googlecloud Deploy, just became generally available.
— Richard Seroter (@rseroter) January 21, 2022
I'm supposed to be working on something else, but I want to check it out. Let's procrastinate on real-work together, shall we?
Quick 🧵 as I deploy a #dotnet app to GKE. pic.twitter.com/Ve07Gnog7q
I’m not a freelancer and most of the time I work as a contractor, which in Spain means to be hired as an employee by an external company.
Suggesting improvements and best practices or applying quality standards and automated solutions that work well and are easy to verify shouldn’t penalize a career, but it’s terribly common. I am concerned about working with some colleagues or managers who consider it a threat, generating absurd conflicts, blame games and acting in bad faith or stupidly distorting the purpose of the project.
In a service driven IT sector (with calculated ambiguities and many hidden interests) the product is the hours billed by the consultant, being almost irrelevant the content of the job and the delivered quality. It is thus too common to find technical solutions under the policy of applying “the most difficult, non-standard, slowest and most obfuscated way possible” as a competitive element (the hard way and doing weird things). This does not scale. Being ambiguous in JDs (not to say dishonest) without clarifying the real content of the job is easy and very well paid.
-Ambiguities about DevOps term. Development of new ad-hoc devops tools and ad-hoc monitoring solutions should not be the role of devops specialists. DevOps professionals develop IaC and CI/CD pipelines with standard tools and code, ideally with a cattle service model, GitOps patterns & kubernetes among other responsabilities such as application monitoring. The development of devops tools for kubernetes with i.e. client-go should be clearly mentioned in a JD as “software development of devops tools for kubernetes with client-go” (suitable for a software engineer with client-go skills, a developer of devops/kubernetes/monitoring tools). In addition, a DevOps specialist should not be a fullstack developer who occasionally does QA + DevOps + Cloud Design/Ops. Moreover, avoid confusing terms to justify these different backgrounds by creating two roles like DevOps Software Developer and DevOps SysAdmin. Maybe DevOps should be renamed as OpsDev to avoid misunderstandings.
+Ambiguities about DevOps term. Development of new ad-hoc devops tools and ad-hoc monitoring solutions should not be the role of devops specialists. DevOps professionals develop IaC and CI/CD pipelines with standard tools and code, ideally with a cattle service model, GitOps patterns & kubernetes among other responsabilities such as application monitoring. The development of devops tools for kubernetes with i.e. client-go should be clearly mentioned in a JD as “software development of devops tools for kubernetes with client-go” (suitable for a software engineer with client-go skills, a developer of devops/kubernetes/monitoring tools). In addition, a DevOps specialist should not be a fullstack developer who occasionally does QA + DevOps + Cloud Design/Ops. Moreover, avoid confusing terms to justify these different backgrounds by creating two roles like DevOps Software Developer and DevOps SysAdmin. Maybe DevOps should be renamed as OpsDev to avoid misunderstandings.
A tech stack is not relevant compared to the way technology is managed. You could have the best tool and run into trouble by taking the risk of applying an unsupported or not recommended1 approach.
DevOps principles: People, processes, technology
GitOps principles: Correctness, doing DevOps correctly
@@ -7706,7 +7706,7 @@-The SRE Experience Is Changing with Cloud Native:
+The SRE Experience Is Changing with Cloud Native:
- From Firefighting to Prevention for SREs.
- Empower Developers with Self-Service.
@@ -7748,13 +7748,13 @@As professionals we are obliged to a high commitment to our clients, sometimes sacrificing our well-being in order to achieve the objectives. Everyone has limits, sometimes being a personal decision to abandon a project without this entailing a penalty in the next job (we have given our CV to third parties without any control). An unfair bad reference (blame games) and calculated ambiguities can ruin our careers. And I’m not talking about an isolated case.
Losing employment and significantly penalizing employability and economic bargaining power for defending the value of automation, continuous improvement and standardization in computer engineering is a high price to pay. The alternatives often seem to be manual work with low salary expectations, lack of opportunities with new cloud jobs (better paid), promotion to a management position or emigration to countries with a different economic model (where technical jobs are better valued). This does not scale either. Freelancing worldwide is not for everyone either.
--“One of the biggest problems in IT is that we keep reinventing the wheel. We are running the same circles, producing similar technologies to solve the same problems. Reinventing the wheel is a great way to learn how the wheel works, but not an efficient way to build software” (@dmokafa)
-“Tech industry thinks throwing more tools to the problem is the solution. More tools = more failure modes” (@rakyll)
+“One of the biggest problems in IT is that we keep reinventing the wheel. We are running the same circles, producing similar technologies to solve the same problems. Reinventing the wheel is a great way to learn how the wheel works, but not an efficient way to build software” (@dmokafa)
+“Tech industry thinks throwing more tools to the problem is the solution. More tools = more failure modes” (@rakyll)
Instead of reinventing the wheel by rewriting from scratch a new installer or ad-hoc devops tool to manage/monitor kubernetes, please pay attention to the links shared here and learn how to add value on the so called day 2. You will find solutions and knowledge in a practical and efficient way without being totally essential to obtain a certification to successfully complete the task. For example, if there’s money for reinventing the wheel on day 1, then there’s money for investing in these high value added solutions on day 2 where automation can significantly improve our lives and the quality of the delivered service. Automation is also a key element when evaluating the delivery of a service.
+Instead of reinventing the wheel by rewriting from scratch a new installer or ad-hoc devops tool to manage/monitor kubernetes, please pay attention to the links shared here and learn how to add value on the so called day 2. You will find solutions and knowledge in a practical and efficient way without being totally essential to obtain a certification to successfully complete the task. For example, if there’s money for reinventing the wheel on day 1, then there’s money for investing in these high value added solutions on day 2 where automation can significantly improve our lives and the quality of the delivered service. Automation is also a key element when evaluating the delivery of a service.
Nubenetes shares relevant information that helps spread the new technological and cultural standards, in order to eliminate bottlenecks and silos and promote digital transformation.
Does saying this publicly imply being blacklisted and losing professional opportunities? What kind of society do we live in?
-Tips: ask the hiring manager what experience they have with Cloud Automation, Cloud Managed Services and K8s in Production, if they deploy OpenShift via IPI1 or UPI, whether they are familiar with Gitops as the correct way of doing DevOps, if they work with modern, easy-to-use automation tools (terraform, ansible modules with YAML/Jinja templates, argocd, helm, an automation server3 to run pipelines, declarative code in Jenkins4 Pipelines or in DevOps Azure Pipelines, IaC boilerplates instead of k8s vanilla, etc) or they are not practical and prefer to develop their own ad-hoc tools with millions of lines of code that need maintenance (by who?). If any doubt, ask them to show you their pipelines and custom solutions, how long it takes them to deploy and setup their k8s infra on day 1 & day 2 (pets vs cattle service model), how long it takes them to deploy a single app and if the process is fully automated or not, what monitoring solutions they have, if security and Role-based Access Control (RBAC) are implemented in their k8s clusters, whether changes and PoCs are tested first in ephemeral and isolated K8s/Cloud infra test environments with IaC & CI/CD pipelines, if solutions can be discussed within the team, etc.
+Tips: ask the hiring manager what experience they have with Cloud Automation, Cloud Managed Services and K8s in Production, if they deploy OpenShift via IPI1 or UPI, whether they are familiar with Gitops as the correct way of doing DevOps, if they work with modern, easy-to-use automation tools (terraform, ansible modules with YAML/Jinja templates, argocd, helm, an automation server3 to run pipelines, declarative code in Jenkins4 Pipelines or in DevOps Azure Pipelines, IaC boilerplates instead of k8s vanilla, etc) or they are not practical and prefer to develop their own ad-hoc tools with millions of lines of code that need maintenance (by who?). If any doubt, ask them to show you their pipelines and custom solutions, how long it takes them to deploy and setup their k8s infra on day 1 & day 2 (pets vs cattle service model), how long it takes them to deploy a single app and if the process is fully automated or not, what monitoring solutions they have, if security and Role-based Access Control (RBAC) are implemented in their k8s clusters, whether changes and PoCs are tested first in ephemeral and isolated K8s/Cloud infra test environments with IaC & CI/CD pipelines, if solutions can be discussed within the team, etc.
@@ -7765,7 +7765,7 @@
-“I am a big fan of the scientific method. Engineers do not build bridges from a right or left perspective, the engineer builds bridges from an evidence-based perspective and over time bridge construction has improved. On the other hand, a politician does things from a right or left perspective, and over time politics has gotten worse. When I work with politicians and two of them are in a room together, one always thinks of the other, “will they get in my way? Will they damage my reputation? Is there a conflict of interest?” On the other hand, when two engineers meet, they say, “hello! I have a problem, can you help me?” Engineers rely on evidence. If you want to save the world, think like an engineer.” ref 1 (Youtube Clip in Spanish), ref 2 (English), ref 3 (Spanish), ref 4 (Spanish) - Mark Stevenson, writer and businessman.
+“I am a big fan of the scientific method. Engineers do not build bridges from a right or left perspective, the engineer builds bridges from an evidence-based perspective and over time bridge construction has improved. On the other hand, a politician does things from a right or left perspective, and over time politics has gotten worse. When I work with politicians and two of them are in a room together, one always thinks of the other, “will they get in my way? Will they damage my reputation? Is there a conflict of interest?” On the other hand, when two engineers meet, they say, “hello! I have a problem, can you help me?” Engineers rely on evidence. If you want to save the world, think like an engineer.” ref 1 (Youtube Clip in Spanish), ref 2 (English), ref 3 (Spanish), ref 4 (Spanish) - Mark Stevenson, writer and businessman.
Let’s improve both the private & public IT sector and the opportunities in large, medium and small companies, and give us a star on GitHub if you like this blog!!
“In the U.S. in 2016, 3.9 million jobs are associated with cloud computing, with 384,478 of them in IT. The median salary for IT professionals with cloud computing experience was $90,950. (Forbes)”
-
From the above graph (credit: Forbes) we can see that the top three countries for Cloud Computing Jobs are:
China (7.5 Million). USA (4 Million). @@ -7871,7 +7871,7 @@ India (2.2 Million).
Jenkins/CloudBees, Ansible Tower/AWX, Foreman, Rundeck, Azure DevOps, GitLab CI, etc. ↩
Automation with Jenkins Configuration as Code replaces what was previously done via Jenkins CLI and jenkins remote REST API calls (requiring backend development with tools like swagger and API Testing tools like postman). Similar scenario applies to other technologies. ↩
+Automation with Jenkins Configuration as Code replaces what was previously done via Jenkins CLI and jenkins remote REST API calls (requiring backend development with tools like swagger and API Testing tools like postman). Similar scenario applies to other technologies. ↩
github.com/microsoft/ML-For-Beginners: Machine Learning for Beginners - A Curriculum
Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - (Related to cicd topic)
+Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - (Related to cicd topic)
github.com/tensorchord/Awesome-LLMOps: Awesome LLMOps An awesome & curated list of best LLMOps tools for developers
Ignore Prior Instructions: AI Still Befuddled by Basic Reasoning - An article discussing the limitations of current AI models, particularly their struggles with understanding and acting upon explicit instructions and basic reasoning, even when the instructions are clear. It highlights how AI can still be ‘befuddled’ by simple logical tasks.
+Ignore Prior Instructions: AI Still Befuddled by Basic Reasoning - An article discussing the limitations of current AI models, particularly their struggles with understanding and acting upon explicit instructions and basic reasoning, even when the instructions are clear. It highlights how AI can still be ‘befuddled’ by simple logical tasks.
Claude 101: Free Guides to Master Claude - A comprehensive collection of free guides for learning and mastering Anthropic’s Claude AI model, covering beginner to expert levels. The content includes guides on basic usage, prompting techniques, certification, team collaboration, design integration, skill creation, advanced techniques for avoiding AI limitations and biases, and using Claude for coding and computer interaction.
+Claude 101: Free Guides to Master Claude - A comprehensive collection of free guides for learning and mastering Anthropic’s Claude AI model, covering beginner to expert levels. The content includes guides on basic usage, prompting techniques, certification, team collaboration, design integration, skill creation, advanced techniques for avoiding AI limitations and biases, and using Claude for coding and computer interaction.
github.com/openai/openai-cookbook: OpenAI Cookbook Examples and guides for using the OpenAI API
@@ -7917,20 +7917,20 @@Warp: The Agentic Development Environment - (Related to kubernetes-tools topic)
+Warp: The Agentic Development Environment - (Related to kubernetes-tools topic)
k8sgpt.ai K8sGPT is a tool for scanning your kubernetes clusters, diagnosing and triaging issues in simple english. It has SRE experience codified into its analyzers and helps to pull out the most relevant information to enrich it with AI.
+k8sgpt.ai K8sGPT is a tool for scanning your kubernetes clusters, diagnosing and triaging issues in simple english. It has SRE experience codified into its analyzers and helps to pull out the most relevant information to enrich it with AI.
AWS Well-Architected IaC Analyzer - (Related to aws-architecture topic)
+AWS Well-Architected IaC Analyzer - (Related to aws-architecture topic)
hashicorp.com: Accelerate your Terraform development with Amazon CodeWhisperer
@@ -7938,14 +7938,14 @@Google Launches Gemini Code Assist, Challenging GitHub Copilot with Generous Free Tier - Google has introduced Gemini Code Assist, an AI-powered programming assistant that aims to compete with GitHub Copilot. A key differentiator is its significantly larger free usage tier, offering 180,000 queries per month compared to GitHub Copilot’s 2,000, making it a more accessible option for developers to explore and adopt.
Microsoft Dragon Copilot: Unified Voice AI Assistant for Healthcare - Microsoft announces Dragon Copilot, a voice AI assistant for the healthcare industry that combines Dragon Medical One and DAX Copilot. It aims to streamline clinical documentation, improve information retrieval, and automate tasks for clinicians, ultimately enhancing well-being, efficiency, and patient experiences.
+Microsoft Dragon Copilot: Unified Voice AI Assistant for Healthcare - Microsoft announces Dragon Copilot, a voice AI assistant for the healthcare industry that combines Dragon Medical One and DAX Copilot. It aims to streamline clinical documentation, improve information retrieval, and automate tasks for clinicians, ultimately enhancing well-being, efficiency, and patient experiences.
blog.redbrickai.com: F.A.S.T. ⚡️ Meta AI’s Segment Anything for Medical Imaging
@@ -7969,8 +7969,8 @@Awesome MCP Servers - (Related to ai-agents-mcp topic)
daemon.json file, after years of people asking” (Jeff Geerling)The Beginner’s Guide to the Ansible Inventory 🌟 - This guide explains the core concept of Ansible Inventory, detailing its role in organizing and defining automation targets. It covers both static and dynamic inventory types, their respective formats (INI and YAML), and how to configure dynamic inventories using plugins with sources like NetBox. The article also touches upon inventory filtering for precise host automation.
+The Beginner’s Guide to the Ansible Inventory 🌟 - This guide explains the core concept of Ansible Inventory, detailing its role in organizing and defining automation targets. It covers both static and dynamic inventory types, their respective formats (INI and YAML), and how to configure dynamic inventories using plugins with sources like NetBox. The article also touches upon inventory filtering for precise host automation.
APIDog - APIDog is a platform that allows users to manage and test APIs. It provides features for API documentation, testing, and collaboration.
+APIDog - APIDog is a platform that allows users to manage and test APIs. It provides features for API documentation, testing, and collaboration.
OpenAPI Generator 🌟 Generate clients, servers, and documentation from OpenAPI 2.0/3.x documents
+OpenAPI Generator 🌟 Generate clients, servers, and documentation from OpenAPI 2.0/3.x documents
Public APIs Directory - A curated directory of over 1000 free public REST APIs for developers to discover and integrate into their projects. It allows browsing by category, comparing alternatives, and accessing code examples.
+Public APIs Directory - A curated directory of over 1000 free public REST APIs for developers to discover and integrate into their projects. It allows browsing by category, comparing alternatives, and accessing code examples.
Cerebras AI - (Related to ai topic)
+Cerebras AI - (Related to ai topic)
-Different Architectural Styles of APIs
— RapidAPI (@Rapid_API) November 25, 2022
Thread 🧵👇
+What is GraphQL? When should we use it?
— Bytebytego (@bytebytego) November 28, 2022
How is GraphQL the same as REST? How are they different? Let’s dive deeper.
Watch here: https://t.co/AF9GfbgBWZ pic.twitter.com/EUgGe82rNu
What is GraphQL? When should we use it?
— Bytebytego (@bytebytego) November 28, 2022
How is GraphQL the same as REST? How are they different? Let’s dive deeper.
Watch here: https://www.youtube.com/watch?v=yWzKJPw_VzM pic.twitter.com/EUgGe82rNu
diff --git a/appointment-scheduling.html b/appointment-scheduling.html index 31a05a25..01d49007 100644 --- a/appointment-scheduling.html +++ b/appointment-scheduling.html @@ -7660,30 +7660,30 @@Local Storage. What is it?
— RapidAPI (@Rapid_API) November 28, 2022
Thread 🧵👇
feat(ui): Add AppSet to Application Resource Tree in Argo CD 🌟 - This pull request introduces the ability to display the ApplicationSet resource as a parent in the Application Resource Tree within the Argo CD UI. This enhancement, now merged and part of Argo CD v3.5, allows users to see which ApplicationSet created or manages an application, providing a clearer understanding of application relationships.
argoproj.github.io: Argo CD - Declarative GitOps for Kubernetes
+argoproj.github.io: Argo CD - Declarative GitOps for Kubernetes
argoproj-labs/argocd-autopilot: Argo-CD Autopilot The Argo-CD Autopilot is a tool which offers an opinionated way of installing Argo-CD and managing GitOps epositories. New users to GitOps and Argo CD are not often sure how they should structure their repos, add applications, promote apps across environments, and manage the Argo CD installation itself using GitOps. Argo Autopilot is a project that solves that
AWS Well-Architected IaC Analyzer 🌟 - A sample generative AI tool designed to evaluate Infrastructure as Code (IaC) definitions and architecture diagrams against AWS Well-Architected best practices. This repository provides a practical approach to leveraging AI for enhancing cloud architecture quality and compliance.
+AWS Well-Architected IaC Analyzer 🌟 - A sample generative AI tool designed to evaluate Infrastructure as Code (IaC) definitions and architecture diagrams against AWS Well-Architected best practices. This repository provides a practical approach to leveraging AI for enhancing cloud architecture quality and compliance.
Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads - This article details best practices for configuring Azure ExpressRoute to ensure high availability and resiliency for production-critical workloads. It covers topics like redundant connections, diverse routing, and failover mechanisms.
+Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads - This article details best practices for configuring Azure ExpressRoute to ensure high availability and resiliency for production-critical workloads. It covers topics like redundant connections, diverse routing, and failover mechanisms.
Avoiding Mistakes with AWS OIDC Integration Conditions 🌟 - This blog post discusses common security misconfigurations when integrating third-party SaaS solutions with AWS accounts using OpenID Connect (OIDC). It highlights the importance of specific conditions in AWS IAM trust policies, particularly the ‘sub’ condition, to prevent unauthorized access. The article uses GitHub Actions as a concrete example, explaining how a missing ‘sub’ condition could allow any GitHub user to assume an IAM role, and provides an example of a correctly configured trust policy.
Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - (Related to azure topic)
+Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - (Related to azure topic)
How to replicate secrets in AWS Secrets Manager to multiple Regions
+How to replicate secrets in AWS Secrets Manager to multiple Regions
aws ec2 describe-instances --filters Name=instance-state-name,Values=running --query 'Reservations[].Instances[].[InstanceID]'
@@ -7872,32 +7872,32 @@
aws ec2 describe-instances --query 'Reservations[].Instances[].[Placement.AvailabilityZone, State.Name, InstanceID,InstanceType,Platform,Tags.Value,State.Code,Tags.Values]' --output table
-- Announcing the end of support for Python 2.7 in the AWS SDK for Python and AWS CLI v1
-- AWS SDK for Java
+- Announcing the end of support for Python 2.7 in the AWS SDK for Python and AWS CLI v1
+- AWS SDK for Java
- medium: AWS CLI with jq and Bash The CLI is utilitarian, but a little jq sauce makes it beautiful
- aws.plainenglish.io: Lessons Learned From Switching to AWS SDK v3 Dive into some lessons learned before you switch your Node.js lambda functions over to the latest and greatest
-- blog.awsfundamentals.com: Step-By-Step: Emptying S3 Buckets and Directories Using the AWS CLI with S3 RM
+- blog.awsfundamentals.com: Step-By-Step: Emptying S3 Buckets and Directories Using the AWS CLI with S3 RM
- dev.to/franciscogm: AWS CLI SSO made easy
Amazon CodeWhisperer
-- Amazon CodeWhisperer 🌟 Amazon CodeWhisperer is a machine learning (ML)–powered service that helps improve developer productivity by generating code recommendations based on developers’ comments in natural language and their code in the integrated development environment (IDE). During preview, CodeWhisperer is available for Java, JavaScript, and Python programming languages. The service integrates with multiple IDEs, including JetBrains (IntelliJ, PyCharm, and WebStorm), Visual Studio Code, AWS Cloud9, and the AWS Lambda console.
+- Amazon CodeWhisperer 🌟 Amazon CodeWhisperer is a machine learning (ML)–powered service that helps improve developer productivity by generating code recommendations based on developers’ comments in natural language and their code in the integrated development environment (IDE). During preview, CodeWhisperer is available for Java, JavaScript, and Python programming languages. The service integrates with multiple IDEs, including JetBrains (IntelliJ, PyCharm, and WebStorm), Visual Studio Code, AWS Cloud9, and the AWS Lambda console.
- genbeta.com: Amazon lanza CodeWhisperer, su propia alternativa a GitHub Copilot… que no insertará código ya licenciado sin avisar
- hashicorp.com: Accelerate your Terraform development with Amazon CodeWhisperer
-- aws.amazon.com/blogs: Introducing Amazon CodeWhisperer for command line
+- aws.amazon.com/blogs: Introducing Amazon CodeWhisperer for command line
AWS S3 Sync
-- blog.awsfundamentals.com: AWS S3 Sync - An Extensive Guide Learn all about AWS S3 sync - covering download, upload, synchronize buckets, file selection patterns, dry-run, and more - examples included. The CLI is a daily tool for every DevOps engineer working with AWS. A deep-dive for the 𝗮𝘄𝘀 𝘀𝟯 𝘀𝘆𝗻𝗰 command & its powerful options.
+- blog.awsfundamentals.com: AWS S3 Sync - An Extensive Guide Learn all about AWS S3 sync - covering download, upload, synchronize buckets, file selection patterns, dry-run, and more - examples included. The CLI is a daily tool for every DevOps engineer working with AWS. A deep-dive for the 𝗮𝘄𝘀 𝘀𝟯 𝘀𝘆𝗻𝗰 command & its powerful options.
Third Party Tools
- ec2-spot-converter This tool converts existing EC2 instances back and forth from on-demand and ‘persistent’ Spot billing models while preserving instance attributes (Launch configuration, Tags..), network attributes (existing Private IP addresses, Elastic IP), storage (Volumes), Elastic Inference accelerators and Elastic GPUs. It also allows replacement of existing Spot instances with new “identical” ones to update the instance type and cpu options.
-- techcrunch.com: Vantage makes managing AWS easier
-- vantage.sh
+- techcrunch.com: Vantage makes managing AWS easier
+- vantage.sh
- github.com/one2nc/cloudlens 🌟 k9s like CLI for AWS
- Amazon CodeCatalyst Quickly build and deliver apps at scale on AWS.
-- github.com/Reaimua/AWS-CLI-Uploader-Project Simple bash scripts that uploads a local file to an Amazon S3 bucket
+- github.com/Reaimua/AWS-CLI-Uploader-Project Simple bash scripts that uploads a local file to an Amazon S3 bucket
- github.com/welldone-cloud/aws-list-resources Uses the AWS Cloud Control API to list resources that are present in a given AWS account and region(s). Discovered resources are written to a JSON output file.
diff --git a/aws-training.html b/aws-training.html
index 8fd3e744..01cc952b 100644
--- a/aws-training.html
+++ b/aws-training.html
@@ -7717,25 +7717,25 @@
Introduction
-- New digital course and lab: AWS Cloud Development Kit (CDK) Primer
-- acloudguru.com
+- New digital course and lab: AWS Cloud Development Kit (CDK) Primer
+- acloudguru.com
- twitch.tv/acloudguruofficial
-- learn.cantrill.io 🌟
+- learn.cantrill.io 🌟
-- analyticsindiamag.com: Free Online Resources To Get Started On Cloud Computing
-- acloudguru.com: 10 fun hands-on projects to learn AWS
-- portal.tutorialsdojo.com: AWS Digital Courses (free)
+- analyticsindiamag.com: Free Online Resources To Get Started On Cloud Computing
+- acloudguru.com: 10 fun hands-on projects to learn AWS
+- portal.tutorialsdojo.com: AWS Digital Courses (free)
- hashnode.tpschmidt.com: My Top 10 Free Learning Resources for AWS There’s probably nothing you can’t build on AWS, but starting your Cloud Journey looking at over 200 AWS Services needs guidance.
-- explore.skillbuilder.aws/learn: AWS Skill Builder 🌟 Your learning center to build in-demand cloud skills
-- explore.skillbuilder.aws: AWS Skill Builder - Introducción a AWS Data Pipeline (Español Latinoamérica) | AWS Technical Essentials (Spanish from Latin America) - Free
+- explore.skillbuilder.aws/learn: AWS Skill Builder 🌟 Your learning center to build in-demand cloud skills
-- aws.amazon.com: Exámenes prácticos gratuitos y 100% en español para que obtenga su certificación
+- aws.amazon.com: Exámenes prácticos gratuitos y 100% en español para que obtenga su certificación
- satyenkumar.medium.com: My Youtube Channel is updated for AWS Certifications (Over 150 Video list)
-- explore.skillbuilder.aws: AWS Security Fundamentals (free) In this self-paced course, you will learn fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. We will address and your security responsibility in the AWS cloud and the different security-oriented services available.
+- explore.skillbuilder.aws: AWS Security Fundamentals (free) In this self-paced course, you will learn fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. We will address and your security responsibility in the AWS cloud and the different security-oriented services available.
- medium.com/towards-cloud-computing: 7 Free AWS Practice Labs and AWS Workshops resources
- devopsmonk.hashnode.dev: Learn AWS if you want to save your career..!!
- youtube.com: AWS Cloud Complete Bootcamp Course - CloudFormation | freeCodeCamp 🌟
@@ -7747,20 +7747,20 @@
AWS Cloud Practitioner - Curso Completo 2023 🌟 - A comprehensive 2-hour course designed to help users understand the fundamentals of AWS and prepare for the Cloud Practitioner certification.
-
-
linkedin: Sharing My Top 10 resources to use while preparing for AWS Certification Exams
+linkedin: Sharing My Top 10 resources to use while preparing for AWS Certification Exams
- Schedule an Exam Find the testing option that works best for you
- dev.to: How to become a Certified AWS Solution Architect in 2022
-- community.aws/training: Training and Certification Advance your cloud skills and elevate your career with Training and Certification
+- community.aws/training: Training and Certification Advance your cloud skills and elevate your career with Training and Certification
Closed groups for AWS certified professionals
- awscerts.slack.com
-- Amazon AWS Certification Preparation Tips
+- Amazon AWS Certification Preparation Tips
- A curated list of AWS resources to prepare for the AWS Certifications
-- AWS Certified Solutions Architect Professional – Study Guide
-- aws.amazon.com: First AWS Certification Study Guide Now Available
-- Tips on Passing AWS Certified Solutions Architect - Professional Level
+- AWS Certified Solutions Architect Professional – Study Guide
+- aws.amazon.com: First AWS Certification Study Guide Now Available
+- Tips on Passing AWS Certified Solutions Architect - Professional Level
Tweets
diff --git a/aws.html b/aws.html
index 758e9a2f..acd91a56 100644
--- a/aws.html
+++ b/aws.html
@@ -7946,74 +7946,74 @@
Introduction
-- AWS Cloud Products
-- AWS Local Zones locations
-- status.aws.amazon.com: Service Health Dashboard
+- AWS Cloud Products
+- AWS Local Zones locations
+- status.aws.amazon.com: Service Health Dashboard
- aws.amazon.com/new: What’s New with AWS?
-- aws.amazon.com/releasenotes
-- AWS Forums
-- AWS Knowledge Center
+- aws.amazon.com/releasenotes
+- AWS Forums
+- AWS Knowledge Center
- AWS Glossary
- Awesome AWS 🌟
- AWS Marketplace
-- AWS Support
+- AWS Support
- github.com/awslabs
- slideshare.net/AmazonWebServices
-- AWS 10-Minute Tutorials
-- How do I create and activate a new Amazon Web Services account?
+- AWS 10-Minute Tutorials
+- How do I create and activate a new Amazon Web Services account?
- onlineitguru.com: AWS Services [ARCHIVED]
- The Open Guide to Amazon Web Services
-- AWS Ramp-Up Guides Your guides to learning the AWS Cloud. Build Your AWS Cloud Knowledge with Ramp-Up Guides.
-- serverlessland.com This site brings together all the latest blogs, videos, and training for AWS Serverless. Learn to use and build apps that scale automatically on low-cost, fully-managed serverless architecture.
+- AWS Ramp-Up Guides Your guides to learning the AWS Cloud. Build Your AWS Cloud Knowledge with Ramp-Up Guides.
+- serverlessland.com This site brings together all the latest blogs, videos, and training for AWS Serverless. Learn to use and build apps that scale automatically on low-cost, fully-managed serverless architecture.
- serverlessland.com/patterns: Serverless Patterns Collection Use serverless patterns to quickly build integrations using AWS SAM and CDK templates. Filter by pattern and copy the template directly into your application.
- AWS SAM Pipelines Video tutorials: Learn how to generate CI/CD pipelines and deployment templates for serverless applications with AWS’ best practices for CloudBees, JenkinsCI, GitLab, GitHub using AWS SAM Pipelines.
-- AWS Activate AWS Activate offers startups free tools, resources, and more to quickly get started on AWS. Build and scale with up to $100,000 in AWS Activate credits
+- AWS Activate AWS Activate offers startups free tools, resources, and more to quickly get started on AWS. Build and scale with up to $100,000 in AWS Activate credits
- aws/containers-roadmap: AWS Containers Roadmap This is the public roadmap for AWS container services (ECS, ECR, Fargate, and EKS).
-- dashbird.io: Get started and keep using AWS for free
+- dashbird.io: Get started and keep using AWS for free
- dzone: AWS Basics
- dzone: AWS Basics: Bastion Hosts and NAT In this post, we will set up Bastion Host and NAT instances in our VPC. We will learn why we need those and some of the options available to us.
-- acloudguru.com: The Cloud Dictionary of Pain: Five Of AWS’s Toughest Cloud Topics
+- acloudguru.com: The Cloud Dictionary of Pain: Five Of AWS’s Toughest Cloud Topics
- dannys.cloud: 10 Best Free AWS Learning Resources for Beginners This blogpost provides free resources for beginners to get started with AWS through videos, whitepapers, labs, and certification guides.
- linkedin pulse: Listado de todos los Servicios de AWS (actualizado 1 de Enero 2021)
- towardsaws.com: A Gentle Introduction to Amazon Web Services (AWS)
- docs.aws.amazon.com: The AWS Security Reference Architecture
-- thenewstack.io: The AWS Shared Responsibility Model for Kubernetes
+- thenewstack.io: The AWS Shared Responsibility Model for Kubernetes
- medium: AWS Services Every Developer Should Be Aware Of
- blog.cloudyali.io: The Absolute minimum every developer must know about AWS security!
-- acloudguru.com: 12 AWS Config rules that every account should have
-- cloudonaut.io: EC2 Checklist: 7 things to do after launching an instance
+- acloudguru.com: 12 AWS Config rules that every account should have
+- cloudonaut.io: EC2 Checklist: 7 things to do after launching an instance
- medium: 6 Lessons Learned - Migrating Application on Production
-- lastweekinaws.com: 17 More Ways to Run Containers on AWS
-- What is Streaming Data?
+- lastweekinaws.com: 17 More Ways to Run Containers on AWS
+- What is Streaming Data?
- dzone: Five Different Ways to Build AWS Infrastructure Before deciding on how to create your production platform, learn about the benefits and drawbacks of different ways to build your AWS infrastructure.
-- AWS Architecture Blog: What to Consider when Selecting a Region for your Workloads
+- AWS Architecture Blog: What to Consider when Selecting a Region for your Workloads
- ben11kehoe.medium.com: Never put AWS temporary credentials in the credentials file (or env vars) — there’s a better way Stop putting AWS temporary credentials in ~/.aws/credentials or environment variables!
- Implementing Microservices on AWS 🌟
-- intellipaat.com: What is AWS?
+- intellipaat.com: What is AWS?
- tech.twenix.com: Securiza tu infraestructura cloud sin arruinarte
- amazon.qwiklabs.com/catalog One of the best ways to learn AWS services is to use them. If you want to grow your skills this year check out these AWS quicklabs. Free and paid quests to get you started and gaining experience.
-- freecodecamp.org/news/tag/aws Are you looking to get into cloud? Check out all the amazing free content available on freecodecamp under the AWS tag.
+- freecodecamp.org/news/tag/aws Are you looking to get into cloud? Check out all the amazing free content available on freecodecamp under the AWS tag.
- paigeshin1991.medium.com: Drop Nuclear Bomb on your AWS account. How to clear your entire AWS services in 3 seconds
- medium.com/gargee-bhatnagar: How to Create a Custom AMI with Image Pipeline and Automate its Creation Using EC2 Image Builder
- docs.aws.amazon.com: Actions, resources, and condition keys for AWS services 🌟🌟🌟 There’s a Reference for all 𝗜𝗔𝗠 𝗔𝗰𝘁𝗶𝗼𝗻𝘀, 𝗿𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀, 𝗮𝗻𝗱 𝗰𝗼𝗻𝗱𝗶𝘁𝗶𝗼𝗻 𝗸𝗲𝘆𝘀 𝗳𝗼𝗿 𝗮𝗹𝗹 𝗔𝗪𝗦 𝘀𝗲𝗿𝘃𝗶𝗰𝗲𝘀 🔐 Bookmark it! 🔖
- medium.com/@imaze.enabulele: Autoscaling EC2 Instances for High Availability and Stress Testing 🌟
- awstip.com: How to list all resources in your AWS account
-- Building highly resilient applications with on-premises interdependencies using AWS Local Zones AWS Local Zones are a type of infrastructure deployment that places compute, storage, database, and other select AWS services close to large population and industry centers.
+- Building highly resilient applications with on-premises interdependencies using AWS Local Zones AWS Local Zones are a type of infrastructure deployment that places compute, storage, database, and other select AWS services close to large population and industry centers.
- dev.to: Disaster Recovery Cheat-sheet/Write-up 🌟
- terminalsandcoffee.com: Setting Up the AWS CLI & IAM User API Keys 🌟
- dev.to: Best Practices When Designing AWS Architecture 🌟🌟 AWSArchitecture is the way you design & implement your cloud apps using AWS services & resources. A well-designed architecture help to achieve business goals 👉 scalability, reliability, etc.
-- infoworld.com: Amazon’s quiet open source revolution After years of getting a free ride from open source projects, the company is developing its own obsession with contributing.
+- infoworld.com: Amazon’s quiet open source revolution After years of getting a free ride from open source projects, the company is developing its own obsession with contributing.
- mrdevops.hashnode.dev: How to Create EC2 Instance in AWS: Step by Step Tutorial
AWS Reference Archigtecture
-- infoq.com: AWS Publishes Reference Architecture and Implementations for Deployment Pipelines - New - Deployment Pipelines Reference Architecture and Reference Implementations
+- infoq.com: AWS Publishes Reference Architecture and Implementations for Deployment Pipelines - New - Deployment Pipelines Reference Architecture and Reference Implementations
AWS Application Services
-- k21academy.com: AWS Application Services: Lambda, SES, SNS, SQS, SWF
+- k21academy.com: AWS Application Services: Lambda, SES, SNS, SQS, SWF
Blogs
@@ -8023,9 +8023,9 @@
DevOps Made Easy: Install AWS CLI, ECS CLI, Docker & Terraform Using Chocolatey - (Related to devops topic)
-
-
+
-- aws.plainenglish.io
+- aws.plainenglish.io
- AWStip.com Community of passionate AWS builders.
AWS Free Resources
@@ -8036,12 +8036,12 @@
- https://www.aws.training
- https://aws.amazon.com/solutions/case-studies
- https://www.youtube.com/user/amazonWebServices
-- https://forums.aws.amazon.com
+- https://repost.aws
- https://aws.amazon.com/blogs
- https://www.slideshare.net/AmazonWebServices
- https://www.twitch.tv/aws
- Everything AWS | Search and discover 6K+ quality AWS repositories
-- workshops.aws: AWS Workshops This website lists workshops created by the teams at Amazon Web Services (AWS). Workshops are hands-on events designed to teach or introduce practical skills, techniques, or concepts which you can use to solve business problems.
+
- workshops.aws: AWS Workshops This website lists workshops created by the teams at Amazon Web Services (AWS). Workshops are hands-on events designed to teach or introduce practical skills, techniques, or concepts which you can use to solve business problems.
You can filter by topic using the toolbar above.
- AWS Courses created by AWS experts
- dev.to: Many free and useful AWS official Dev and User guides!
@@ -8050,10 +8050,10 @@ You can filter by topic using the toolbar above.
Containers on AWS
-
-
RunsOn: Self-hosted GitHub Actions Runners in AWS - (Related to cicd topic)
+RunsOn: Self-hosted GitHub Actions Runners in AWS - (Related to cicd topic)
-
-
vladionescu.me: Scaling containers on AWS in 2022 (comparison)
+vladionescu.me: Scaling containers on AWS in 2022 (comparison)
AWS Startup Collection. For startups building on AWS
@@ -8066,28 +8066,28 @@ You can filter by topic using the toolbar above.
AWS on Twitter
-- twitter.com/awscloud
-- twitter.com/AWSreInvent
-- twitter.com/jeffbarr
-- twitter.com/AWSstartups
-- twitter.com/AWS_Partners
+- twitter.com/awscloud
+- twitter.com/AWSreInvent
+- twitter.com/jeffbarr
+- twitter.com/AWSstartups
+- twitter.com/AWS_Partners
AWS Youtube channel and Podcasts
- Amazon Web Services Youtube
- AWS Tutorial Series
- AWS Webinar Channel
-- AWS Podcasts
+- AWS Podcasts
- AWS Techchat
- Stitcher AWS Podcasts
AWS Developer Blog
-
-
Enhanced Local IDE Experience for AWS Step Functions 🌟 - This blog post introduces an enhanced local Integrated Development Environment (IDE) experience for AWS Step Functions, integrating Workflow Studio directly into Visual Studio Code (VS Code) via the AWS Toolkit extension. This allows developers to visually author and edit state machines locally, mirroring the AWS Console experience. The integration simplifies the development of distributed applications, process automation, microservice orchestration, and data/ML pipelines by providing a seamless workflow authoring experience within the developer’s preferred IDE, synchronizing visual changes with the Amazon States Language (ASL) definition.
+Enhanced Local IDE Experience for AWS Step Functions 🌟 - This blog post introduces an enhanced local Integrated Development Environment (IDE) experience for AWS Step Functions, integrating Workflow Studio directly into Visual Studio Code (VS Code) via the AWS Toolkit extension. This allows developers to visually author and edit state machines locally, mirroring the AWS Console experience. The integration simplifies the development of distributed applications, process automation, microservice orchestration, and data/ML pipelines by providing a seamless workflow authoring experience within the developer’s preferred IDE, synchronizing visual changes with the Amazon States Language (ASL) definition.
-
-
+
- Create an API Using the Swagger Specification and the API Gateway Extensions
@@ -8107,7 +8107,7 @@ You can filter by topic using the toolbar above.
AWS Config Rules
-- AWS Config Rules now available in 4 new regions: US West (Oregon), EU (Ireland), EU (Frankfurt) and Asia Pacific (Tokyo)
+- AWS Config Rules now available in 4 new regions: US West (Oregon), EU (Ireland), EU (Frankfurt) and Asia Pacific (Tokyo)
- medium.com/swlh: AWS Config — Compliance as Code
AWS Management Console
@@ -8120,35 +8120,35 @@ You can filter by topic using the toolbar above.
AWS Tags
-- bridgecrew.io: Best practices for AWS tagging with Yor
+- bridgecrew.io: Best practices for AWS tagging with Yor
AWS Systems Manager Explorer
-- Multi-account AWS Trusted Advisor summaries now available in AWS Systems Manager Explorer
+- Multi-account AWS Trusted Advisor summaries now available in AWS Systems Manager Explorer
AWS Systems Manager Incident Manager
-- How to automate incident response to security events with AWS Systems Manager Incident Manager
+- How to automate incident response to security events with AWS Systems Manager Incident Manager
AWS Cloud Adoption Framework (AWS CAF)
-- AWS Cloud Adoption Framework (AWS CAF) The AWS Cloud Adoption Framework (AWS CAF) leverages AWS experience and best practices to help you digitally transform and accelerate your business outcomes through innovative use of AWS. AWS CAF identifies specific organizational capabilities that underpin successful cloud transformations. These capabilities provide best practice guidance that helps you improve your cloud readiness. AWS CAF groups its capabilities in six perspectives: Business, People, Governance, Platform, Security, and Operations. Each perspective comprises a set of capabilities that functionally related stakeholders own or manage in the cloud transformation journey. Use the AWS CAF to identify and prioritize transformation opportunities, evaluate and improve your cloud readiness, and iteratively evolve your transformation roadmap.
-- AWS Cloud Adoption Framework (CAF) 3.0 is Now Available
+- AWS Cloud Adoption Framework (AWS CAF) The AWS Cloud Adoption Framework (AWS CAF) leverages AWS experience and best practices to help you digitally transform and accelerate your business outcomes through innovative use of AWS. AWS CAF identifies specific organizational capabilities that underpin successful cloud transformations. These capabilities provide best practice guidance that helps you improve your cloud readiness. AWS CAF groups its capabilities in six perspectives: Business, People, Governance, Platform, Security, and Operations. Each perspective comprises a set of capabilities that functionally related stakeholders own or manage in the cloud transformation journey. Use the AWS CAF to identify and prioritize transformation opportunities, evaluate and improve your cloud readiness, and iteratively evolve your transformation roadmap.
+- AWS Cloud Adoption Framework (CAF) 3.0 is Now Available
AWS re:Post
- repost.aws 🌟
-- AWS re:Post – A Reimagined Q&A Experience for the AWS Community
-- infoq.com: Amazon Introduces re:Post, a “Stack Overflow” for AWS
+- AWS re:Post – A Reimagined Q&A Experience for the AWS Community
+- infoq.com: Amazon Introduces re:Post, a “Stack Overflow” for AWS
Bunch of Images
Click to expand!
-
-
-
+
+
+
Videos
@@ -8192,7 +8192,7 @@ You can filter by topic using the toolbar above.
𝗔𝗪𝗦 𝗔𝗣𝗜 𝗚𝗮𝘁𝗲𝘄𝗮𝘆 is one of AWS' fully-managed flagship services ⚡
All of the important facts & key capabilities that you need to know in a single infographic 🌠 ↓ pic.twitter.com/uzdqdPMmCs
— Dashbird.io (@thedashbird) January 17, 2022
-"Why do you only focus on @awscloud instead of other cloud providers? Doesn't that cut your market to a tiny fraction of the industry?"
The latest @okta report has a chart within that tells the story succinctly. pic.twitter.com/AkNt1jwUMU
— Corey Quinn (@QuinnyPig) January 31, 2022
+"Why do you only focus on @awscloud instead of other cloud providers? Doesn't that cut your market to a tiny fraction of the industry?"
The latest @okta report has a chart within that tells the story succinctly. pic.twitter.com/AkNt1jwUMU
— Corey Quinn (@QuinnyPig) January 31, 2022
In my opinion, IAM is the 𝗺𝗼𝘀𝘁 𝗰𝗼𝗺𝗽𝗹𝗲𝘁𝗲 & 𝗰𝗼𝗺𝗽𝗿𝗲𝗵𝗲𝗻𝘀𝗶𝘃𝗲 service by AWS 🔐
What's a 𝗳𝗮𝗰𝘁: the concepts are crucial & being confident in them is a necessity! pic.twitter.com/MtvOyLjRzS
— Tobias Schmidt (@tpschmidt_) February 2, 2022
@@ -8214,7 +8214,7 @@ You can filter by topic using the toolbar above.
-- Convert AWS console actions to reusable code with AWS Console-to-Code, now generally available 🌟 - AWS Console-to-Code is now generally available, enabling users to convert AWS console actions and workflows into reusable Infrastructure as Code (IaC) formats like AWS CLI, CloudFormation, and AWS CDK.
+- Convert AWS console actions to reusable code with AWS Console-to-Code, now generally available 🌟 - AWS Console-to-Code is now generally available, enabling users to convert AWS console actions and workflows into reusable Infrastructure as Code (IaC) formats like AWS CLI, CloudFormation, and AWS CDK.
diff --git a/azure.html b/azure.html
index 05bce05e..d5a6545a 100644
--- a/azure.html
+++ b/azure.html
@@ -8782,26 +8782,26 @@
Azure
-- Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - A step-by-step guide demonstrating how to obtain free automated Let’s Encrypt TLS certificates and store them securely in Azure Key Vault. This solution allows for automatic renewal and provisioning of additional certificates, offering a cost-effective way to secure services in Azure.
+- Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - A step-by-step guide demonstrating how to obtain free automated Let’s Encrypt TLS certificates and store them securely in Azure Key Vault. This solution allows for automatic renewal and provisioning of additional certificates, offering a cost-effective way to secure services in Azure.
- Application Network Security in Azure Subnets, Endpoints, DNS, NSGs with Terraform Code 🌟 - A technical article demonstrating how to implement application network security in Azure using subnets, endpoints, DNS, and Network Security Groups (NSGs), with accompanying Terraform code.
-- Azure Products by Region Table 🌟 - This page provides a comprehensive table of Azure products and their availability across various Azure regions globally. It’s a valuable resource for understanding where specific Azure services can be deployed.
+- Azure Products by Region Table 🌟 - This page provides a comprehensive table of Azure products and their availability across various Azure regions globally. It’s a valuable resource for understanding where specific Azure services can be deployed.
-
Azure Network Security Perimeter Concepts 🌟 - This article explains Azure Network Security Perimeter (NSP), a feature that establishes logical network boundaries around Azure Platform-as-a-Service (PaaS) resources deployed outside of virtual networks. It enhances security by controlling public network access to PaaS resources like Azure Storage and Key Vault, restricting inbound and outbound traffic by default and allowing explicit exceptions. Key benefits include preventing data exfiltration, managing external access, providing access logs for auditing, and offering a unified management experience across PaaS resources.
-
-
+
-- Microsoft Docs
-- Azure Docs
-- Azure Updates 🌟
-- Azure Updates AKS 🌟
-- azurecharts.com: Azure Charts Live visual exploration environment for Azure Cloud + ecosystem. Cloud representation metrics auto-updated continuously
+- Microsoft Docs
+- Azure Docs
+- Azure Updates 🌟
+- Azure Updates AKS 🌟
+- azurecharts.com: Azure Charts Live visual exploration environment for Azure Cloud + ecosystem. Cloud representation metrics auto-updated continuously
- azurecharts.com/learning: Azure Learning Explorer Discover published Azure learning modules, paths, videos, certifications, exams for services of your interest.
- github.com/azure/mission-critical-online: Welcome to Azure Mission-Critical Online Reference Implementation This repository is part of the Azure Mission-Critical open source project that provides a prescriptive architectural approach to building highly-reliable cloud-native applications on Microsoft Azure for mission-critical workloads.
- techcommunity.microsoft.com: Microsoft Learn - Learning Rooms Directory
-- Introducing the third of three Microsoft Clouds: Azure. 4 major sections of the Cloud Models are:
+- Introducing the third of three Microsoft Clouds: Azure. 4 major sections of the Cloud Models are:
- On-Premises: As you start on the left in the traditional on-prem configuration you are responsible for all layers of IT from the networking stack all the way up to the applications which are being provided. You may also be responsible for the data center, power, Internet service, and other underlying aspects.
- Infrastructure as a Service: In IaaS (Take & Bake) the cloud vendor is responsible for the stack from networking through virtualization and your IT team is responsible for the Operating System (OS) through the applications. Common uses of IaaS are testing environments, development environments or hosting of a website.
- Platform as a Service: In PaaS (Pizza Delivered) the cloud vendor is responsible for the networking layers through the runtime layer and your IT team is responsible for the data and the applications. PaaS is commonly used to test, build and deploy applications for an organization.
@@ -8809,65 +8809,65 @@
- medium: Scaling Applications in the Cloud
-- thenewstack.io: Azure Kubernetes Service Replaces Docker with containerd
-- blog.sixeyed.com: You can’t always have Kubernetes: running containers in Azure VM Scale Sets
-- devblogs.microsoft.com: Deploy Spring Boot applications by leveraging enterprise best practices – Azure Spring Cloud Reference Architecture
-- techcommunity.microsoft.com: Non-interactive logins: minimizing the blind spot In this blog post, we will review the new Azure Sentinel data streams for Azure Active Directory non-interactive, service principal, and managed identity logins. We will also share the new security content we built and updated in the product, which includes analytics rules for the detection part and workbooks to assist our customers to deal with this blind spot.
-- returngis.net: Replicación de blobs entre dos cuentas de Azure Storage en dos tenants diferentes
-- c-sharpcorner.com: Comparing AWS SQL Server With Azure SQL Database
-- techcommunity.microsoft.com: How to create a VPN between Azure and AWS using only managed solutions
-- teacdmin.net: How To Enable Multiple RDP Sessions on Windows Server
-- k21academy.com: Azure Data Lake Overview For Beginners
-- theregister.com: Microsoft Azure deprecations: API changes will break applications and PowerShell scripts
-- k21academy.com: Azure RBAC Vs Azure Policies Vs Azure Blueprints
-- blog.identitydigest.com: Azure AD workload identity federation with Kubernetes Any k8s cluster, running on any platform, can now securely access Azure resources without keys or secrets through Azure AD Workload Identity Federation.
-- thomasmaurer.ch: How to check the available VM Sizes (SKUs) by Azure Region
-- docs.microsoft.com: Multi-tenant user management scenarios
-- docs.microsoft.com: Overview: Cross-tenant access with Azure AD External Identities (Preview) Azure AD organizations can use External Identities cross-tenant access settings to manage how they collaborate with other Azure AD organizations through B2B collaboration. Cross-tenant access settings give you granular control over how external Azure AD organizations collaborate with you (inbound access) and how your users collaborate with external Azure AD organizations (outbound access).
+- thenewstack.io: Azure Kubernetes Service Replaces Docker with containerd
+- blog.sixeyed.com: You can’t always have Kubernetes: running containers in Azure VM Scale Sets
+- devblogs.microsoft.com: Deploy Spring Boot applications by leveraging enterprise best practices – Azure Spring Cloud Reference Architecture
+- techcommunity.microsoft.com: Non-interactive logins: minimizing the blind spot In this blog post, we will review the new Azure Sentinel data streams for Azure Active Directory non-interactive, service principal, and managed identity logins. We will also share the new security content we built and updated in the product, which includes analytics rules for the detection part and workbooks to assist our customers to deal with this blind spot.
+- returngis.net: Replicación de blobs entre dos cuentas de Azure Storage en dos tenants diferentes
+- c-sharpcorner.com: Comparing AWS SQL Server With Azure SQL Database
+- techcommunity.microsoft.com: How to create a VPN between Azure and AWS using only managed solutions
+- teacdmin.net: How To Enable Multiple RDP Sessions on Windows Server
+- k21academy.com: Azure Data Lake Overview For Beginners
+- theregister.com: Microsoft Azure deprecations: API changes will break applications and PowerShell scripts
+- k21academy.com: Azure RBAC Vs Azure Policies Vs Azure Blueprints
+- blog.identitydigest.com: Azure AD workload identity federation with Kubernetes Any k8s cluster, running on any platform, can now securely access Azure resources without keys or secrets through Azure AD Workload Identity Federation.
+- thomasmaurer.ch: How to check the available VM Sizes (SKUs) by Azure Region
+- docs.microsoft.com: Multi-tenant user management scenarios
+- docs.microsoft.com: Overview: Cross-tenant access with Azure AD External Identities (Preview) Azure AD organizations can use External Identities cross-tenant access settings to manage how they collaborate with other Azure AD organizations through B2B collaboration. Cross-tenant access settings give you granular control over how external Azure AD organizations collaborate with you (inbound access) and how your users collaborate with external Azure AD organizations (outbound access).
- nubesgen.com - microsoft/NubesGen Going to production on Azure is only one
git push away. Kickstart your project on Azure in minutes! Easily generate Terraform and Bicep templates for your project. Automate your infrastructure using GitOps best practices with GitHub Actions. NubesGen is an Open Source project and we are always looking for feedbacks and contributions.
-- charbelnemnom.com: Move Files Between Azure File Share Tiers and optimize storage costs
-- techrepublic.com: What can you do with Azure Files?
+- charbelnemnom.com: Move Files Between Azure File Share Tiers and optimize storage costs
+- techrepublic.com: What can you do with Azure Files?
- satyenkumar.medium.com: Demystifying The Cloud: An Overview of the Microsoft Azure 🌟🌟🌟 Learn how to make the most of the Azure cloud platform in this comprehensive story (Cloud Demystified Series). Go through 80% of Azure in 30 minutes
- learn.microsoft.com: Migrate Java applications to Azure 🌟🌟🌟
-- blog.cloudtrooper.net: Overlapping IP addresses in a hub-and-spoke network (feat. AVNM & ARS)
-- blog.cloudtrooper.net: Virtual Network Gateways routing in Azure
-- returngis.net: Monitorizar aplicación Java con Spring Boot con Azure Application Insights
+- blog.cloudtrooper.net: Overlapping IP addresses in a hub-and-spoke network (feat. AVNM & ARS)
+- blog.cloudtrooper.net: Virtual Network Gateways routing in Azure
+- returngis.net: Monitorizar aplicación Java con Spring Boot con Azure Application Insights
- medium.com/awesome-azure: Azure — Most Useful Azure Services Every Developer Must Know
- returngis.net: Invitar a usuarios externos a un tenant de Azure AD a través de Microsoft Graph y Azure CLI
- learn.microsoft.com: Choose an Azure compute service 🌟🌟
- nwktimes.blogspot.com: NVA Part IV: NVA Redundancy with Azure Internal Load Balancer
-- azure.microsoft.com: Choose the best global distribution solution for your applications with Azure
+- azure.microsoft.com: Choose the best global distribution solution for your applications with Azure
- blog.davesdomain.co.uk: A look at Azure RBAC Constrained Delegation
-- linkedin.com: Azure Networking | Filiz Akkaya
-- allazureblog.wordpress.com: Azure Bastion vs UDR
+- linkedin.com: Azure Networking | Filiz Akkaya
+- allazureblog.wordpress.com: Azure Bastion vs UDR
- medium.com/@mikakrief: Using Azure Service Operator v2 Azure Service Operator v2 is a Kubernetes operator that enables you to manage Azure resources directly through Kubernetes tooling. It’s designed to simplify the deployment and management of Azure services, allowing developers to use familiar Kubernetes commands (like kubectl apply) to handle Azure resources.
-- blog.cloudtrooper.net: Azure network monitoring with synthetic traffic
-- techcommunity.microsoft.com: Leveraging Azure Event Hub, Microsoft Fabric, and Power BI for Real-Time Data Analytics
-- techcommunity.microsoft.com: Azure SQL Managed Instance pools: new features
+- blog.cloudtrooper.net: Azure network monitoring with synthetic traffic
+- techcommunity.microsoft.com: Leveraging Azure Event Hub, Microsoft Fabric, and Power BI for Real-Time Data Analytics
+- techcommunity.microsoft.com: Azure SQL Managed Instance pools: new features
- github.com/Azure/Enterprise-Scale: ALZ AMA Update The Log Analytics agent, also known as the Microsoft Monitoring Agent (MMA), is on a deprecation path and won’t be supported after August 31, 2024. Any new data centers brought online after January 1 2024 will not support the Log Analytics agent. If you use the Log Analytics agent to ingest data to Azure Monitor, migrate to the new Azure Monitor agent prior to that date.
- blog.siliconvalve.com: Analysing git commit history using Azure Data Explorer
-- azure.microsoft.com: Generally available: Azure Blob Storage Cold Tier support on Change Feed and Object Replication
-- hlokensgard.no: Azure Firewall as DNS Proxy with the new Azure DNS Resolver
-- linkedin.com/pulse: The Who’s Who of the Azure Configuration Management Landscape | Mark Tinderholt
-- techcommunity.microsoft.com: Microsoft Fabric - Multi-Tenant Architecture
-- build5nines.com: Why do Azure Resource Groups have an Azure Region association?
-- build5nines.com: Read and Write Azure Blob Storage with Javascript
-- techcommunity.microsoft.com: Azure Orphan Resources
+- azure.microsoft.com: Generally available: Azure Blob Storage Cold Tier support on Change Feed and Object Replication
+- hlokensgard.no: Azure Firewall as DNS Proxy with the new Azure DNS Resolver
+- linkedin.com/pulse: The Who’s Who of the Azure Configuration Management Landscape | Mark Tinderholt
+- techcommunity.microsoft.com: Microsoft Fabric - Multi-Tenant Architecture
+- build5nines.com: Why do Azure Resource Groups have an Azure Region association?
+- build5nines.com: Read and Write Azure Blob Storage with Javascript
+- techcommunity.microsoft.com: Azure Orphan Resources
- github.com/dolevshor/azure-orphan-resources Centralize orphan resources in Azure environments
-- build5nines.com: Azure CDN POP Locations: Interactive Map of Azure CDN Points of Presence
+- build5nines.com: Azure CDN POP Locations: Interactive Map of Azure CDN Points of Presence
Azure Architecture Check List
-
-
Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager - This article details how to deploy and manage virtual networks across different Azure tenants using Azure Virtual Network Manager. It covers the capabilities and implementation steps for achieving cross-tenant network connectivity, which is crucial for large organizations with multiple Azure subscriptions and tenants.
+Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager - This article details how to deploy and manage virtual networks across different Azure tenants using Azure Virtual Network Manager. It covers the capabilities and implementation steps for achieving cross-tenant network connectivity, which is crucial for large organizations with multiple Azure subscriptions and tenants.
-
-
luke.geek.nz/azure: Azure Architecture - Solution Requirement Consideration Checklist
+luke.geek.nz/azure: Azure Architecture - Solution Requirement Consideration Checklist
Azure Mindmap
@@ -8876,7 +8876,7 @@
- Azure Fundamentals: AZ-900.pdf
-- techcommunity.microsoft.com: Azure Architecture - Course Blueprint This blueprint offers a comprehensive guide to the Azure ecosystem, specifically designed to align with the content of a specific course. It encompasses all resources, tools, structures, and connections discussed throughout the course. The layer filtering feature allows for focused study on specific sections of the course, facilitating a more digestible understanding of the information.
+- techcommunity.microsoft.com: Azure Architecture - Course Blueprint This blueprint offers a comprehensive guide to the Azure ecosystem, specifically designed to align with the content of a specific course. It encompasses all resources, tools, structures, and connections discussed throughout the course. The layer filtering feature allows for focused study on specific sections of the course, facilitating a more digestible understanding of the information.
Azure APIOps
@@ -8888,13 +8888,13 @@
Azure Policy
-- techcommunity.microsoft.com: Azure Policy for Kubernetes releases support for custom policy A tutorial on how to set up Azure Policy for Kubernetes with custom policies.
-- arinco.com.au: Awesome Azure Policy Chapter 1
-- arinco.com.au: Awesome Azure Policy Chapter 2
+- techcommunity.microsoft.com: Azure Policy for Kubernetes releases support for custom policy A tutorial on how to set up Azure Policy for Kubernetes with custom policies.
+- arinco.com.au: Awesome Azure Policy Chapter 1
+- arinco.com.au: Awesome Azure Policy Chapter 2
Azure Policy Best Practices
Azure Cloud Adoption Framework CAF
@@ -8905,7 +8905,7 @@
-
learn.microsoft.com: What is the Microsoft Cloud Adoption Framework for Azure?
-- linkedin.com: The Ultimate Guide to Azure Cloud Adoption Framework Lifecycle
+- linkedin.com: The Ultimate Guide to Azure Cloud Adoption Framework Lifecycle
Azure Well-Architected Framework WAF
@@ -8913,10 +8913,10 @@
Architecture Best Practices for Azure Kubernetes Service (AKS) 🌟 - This document provides architectural recommendations for Azure Kubernetes Service (AKS), aligning with the principles of the Azure Well-Architected Framework. It covers best practices for both the AKS cluster itself and the workloads deployed on it, distinguishing between responsibilities of cluster administrators and developers. The content aims to guide architects in making informed decisions for deploying and managing containerized applications on AKS.
-
-
learn.microsoft.com: Azure Well-Architected Framework The Azure Well-Architected Framework (WAF) is a set of quality-driven tenets, architectural decision points, and review tools intended to help solution architects build a technical foundation for their workloads.
+learn.microsoft.com: Azure Well-Architected Framework The Azure Well-Architected Framework (WAF) is a set of quality-driven tenets, architectural decision points, and review tools intended to help solution architects build a technical foundation for their workloads.
-- infoq.com: Microsoft Refreshes its Well-Architected Framework
-- azure.github.io: Azure Proactive Resiliency Library (APRL)
+- infoq.com: Microsoft Refreshes its Well-Architected Framework
+- azure.github.io: Azure Proactive Resiliency Library (APRL)
- This library is built with the intention of being a staging area for guidance and recommendations that can be used by customers, partners and the field in Well-Architected Framework reliability engagements/assessments; with the intent of the guidance and recommendations being promoted, once tested and validated with customers and partners, into the official Well-Architected Framework documentation.
- The library also contains supporting Azure Resource Graph (ARG) queries, and sometimes Azure PowerShell or Azure CLI scripts, that can help customers, partners and the field identify resources that may or may not be compliant with the guidance and recommendations. The intent for these queries, in the long-term, is to make them part of the Azure Advisor service.
@@ -8926,34 +8926,34 @@
Well-Architected Framework Assessments
- learn.microsoft.com: Use Azure WAF assessments
-- techcommunity.microsoft.com: Get tailored insights with our Advisor Well-Architected assessments
+- techcommunity.microsoft.com: Get tailored insights with our Advisor Well-Architected assessments
CAF vs WAF
-- linkedin.com: CAF vs WAF: Which Framework to Use for Your Cloud Migration?
-- techcommunity.microsoft.com: Infra in Azure for Developers - The What
+- linkedin.com: CAF vs WAF: Which Framework to Use for Your Cloud Migration?
+- techcommunity.microsoft.com: Infra in Azure for Developers - The What
Azure Landing Zones
- Enterprise-Scale Azure Subscription Vending Using Azure Verified Modules (AVM) 🌟 - This article from the Microsoft Community Hub details a production-ready guide for implementing automated Azure subscription vending at enterprise scale. It leverages Azure Verified Modules (AVM) with Terraform to ensure standardized, governed, and automated subscription creation, addressing common scalability and governance challenges associated with manual processes. The guide covers necessary permissions, role assignments, and best practices aligned with Azure Landing Zones.
-- Azure Landing Zone IaC Accelerator Release Notes - (Related to iac topic)
+- Azure Landing Zone IaC Accelerator Release Notes - (Related to iac topic)
- Building a FinOps-Ready Azure Landing Zone: Infrastructure Foundations for Cost Optimization - (Related to finops topic)
- Subscription Vending Implementation Guidance 🌟 - This article provides implementation guidance for automating the process of requesting, deploying, and governing Azure subscriptions. It aims to standardize subscription provisioning, enabling application teams to deploy workloads more efficiently. The guidance includes an architecture diagram illustrating a management group hierarchy and a subscription automation workflow, detailing how subscriptions are organized under platform, landing zones, and sandbox child groups, with specific examples of subscription types and associated resources.
-- Azure Landing Zone IaC Accelerator - (Related to iac topic)
-- Azure Landing Zone Technical Documentation 🌟 - Comprehensive documentation for deploying and managing Azure landing zones, covering foundational components, governance, networking, security, and management.
+- Azure Landing Zone IaC Accelerator - (Related to iac topic)
+- Azure Landing Zone Technical Documentation 🌟 - Comprehensive documentation for deploying and managing Azure landing zones, covering foundational components, governance, networking, security, and management.
- Announcing General Availability of Terraform Azure Verified Modules for Platform Landing Zone (ALZ) - (Related to terraform topic)
-
-
Azure Landing Zone - Microsoft Cloud Adoption Framework 🌟 - This documentation describes the concept of an Azure landing zone, which is a standardized and recommended approach for organizations to set up and manage their Azure environments at scale. It emphasizes consistency, security, compliance, and operational efficiency through platform and application landing zones, built upon a well-architected foundation across eight design areas. The content also touches on the scalable and modular nature of the Azure landing zone architecture, its repeatable infrastructure, and the use of modules for deployment and modification. It references a specific reference architecture as a starting point.
+Azure Landing Zone - Microsoft Cloud Adoption Framework 🌟 - This documentation describes the concept of an Azure landing zone, which is a standardized and recommended approach for organizations to set up and manage their Azure environments at scale. It emphasizes consistency, security, compliance, and operational efficiency through platform and application landing zones, built upon a well-architected foundation across eight design areas. The content also touches on the scalable and modular nature of the Azure landing zone architecture, its repeatable infrastructure, and the use of modules for deployment and modification. It references a specific reference architecture as a starting point.
-
medium.com/microsoftazure: Ultimate guide for Enterprise-scale landing zone for Azure
-- techcommunity.microsoft.com: Azure Landing Zones Accelerators for Bicep and Terraform. Announcing General Availability!
-- techcommunity.microsoft.com: Azure OpenAI Landing Zone reference architecture
-- techcommunity.microsoft.com: New feature: easily assign regulatory compliance policies to your Azure Landing Zone
-- techcommunity.microsoft.com: Azure landing zones custom archetypes using Terraform
-- thomasmaurer.ch: Azure Landing Zone Review Assessment
-- techcommunity.microsoft.com: From Zero to Hero with Azure Landing Zones
+- techcommunity.microsoft.com: Azure Landing Zones Accelerators for Bicep and Terraform. Announcing General Availability!
+- techcommunity.microsoft.com: Azure OpenAI Landing Zone reference architecture
+- techcommunity.microsoft.com: New feature: easily assign regulatory compliance policies to your Azure Landing Zone
+- techcommunity.microsoft.com: Azure landing zones custom archetypes using Terraform
+- thomasmaurer.ch: Azure Landing Zone Review Assessment
+- techcommunity.microsoft.com: From Zero to Hero with Azure Landing Zones
Azure Extended Zones
@@ -8981,20 +8981,20 @@
Introducing Subnet Peering in Azure - This Microsoft Community Hub blog post introduces Subnet Peering in Azure, a new networking capability that allows users to peer specific subnets across local and remote Virtual Networks (VNETs). This feature offers enhanced flexibility compared to traditional VNET peering by enabling granular control over which subnets participate in the peering. Key benefits include IPv4 address space conservation through reuse, limiting unnecessary exposure of non-peered subnets across hub gateways, and implementing IPv6-only peering for dual-stack subnets. The article highlights use cases such as peering subnets with overlapping address spaces (in a hub-and-spoke model) and leveraging IPv6 for peering connectivity in dual-stack environments. It also addresses scenarios involving on-premises connectivity via gateways where specific subnets need to be exposed selectively.
-
-
azure.microsoft.com: General availability: Azure Bastion native client support
+azure.microsoft.com: General availability: Azure Bastion native client support
-- azure.microsoft.com: Generally available: SFTP support for Azure Blob Storage
-- azure.microsoft.com: Generally Available: Durable Functions support of managed identity for Azure Storage Azure Durable Functions support of managed identity for Azure Storage is now generally available! Instead of embedding secrets in connection strings, you can use an identity-based connection to access Azure Storage. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. See quickstart on how to configure managed identity for Azure Storage in your Durable Functions app.
-- Generally available: Azure Bastion now support shareable links
-- theregister.com: Microsoft has made Azure Linux generally available. Repeat, Azure Linux Come for the Kubernetes, stay for the containers
-- azure.microsoft.com: Azure Virtual Network Manager topology view now generally available AVNM is a highly scalable and available network management solution that allows you to simplify network management across subscriptions globally. Azure Resource Topology (ART) allows you to visualize the resources in your network – collaborating with AVNM results in a topology view contextualized by your AVNM connectivity configurations. Connectivity configuration in Azure Virtual Network Manager
-- hlokensgard.no: Azure Virtual Network Manager – A game changer or just a costly upgrade?
+- azure.microsoft.com: Generally available: SFTP support for Azure Blob Storage
+- azure.microsoft.com: Generally Available: Durable Functions support of managed identity for Azure Storage Azure Durable Functions support of managed identity for Azure Storage is now generally available! Instead of embedding secrets in connection strings, you can use an identity-based connection to access Azure Storage. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. See quickstart on how to configure managed identity for Azure Storage in your Durable Functions app.
+- Generally available: Azure Bastion now support shareable links
+- theregister.com: Microsoft has made Azure Linux generally available. Repeat, Azure Linux Come for the Kubernetes, stay for the containers
+- azure.microsoft.com: Azure Virtual Network Manager topology view now generally available AVNM is a highly scalable and available network management solution that allows you to simplify network management across subscriptions globally. Azure Resource Topology (ART) allows you to visualize the resources in your network – collaborating with AVNM results in a topology view contextualized by your AVNM connectivity configurations. Connectivity configuration in Azure Virtual Network Manager
+- hlokensgard.no: Azure Virtual Network Manager – A game changer or just a costly upgrade?
Blogs
-- Announcing Azure MCP Server 2.0 Stable Release for Self-Hosted Agentic Cloud Automation - (Related to ai-agents-mcp topic)
-- Which Azure Network is Cheaper? - A blog post comparing the costs of different Azure networking services to help users make more cost-effective decisions.
-- Manage Azure IPAM with Terraform 🌟 - A blog post detailing how to provision and utilize Azure IPAM (IP Address Management) service using Terraform. It explains the benefits of IPAM in simplifying IP address allocation across teams and environments by abstracting the complexity of IP ranges, allowing consumers to request a specific number of addresses from a shared pool.
+- Announcing Azure MCP Server 2.0 Stable Release for Self-Hosted Agentic Cloud Automation - (Related to ai-agents-mcp topic)
+- Which Azure Network is Cheaper? - A blog post comparing the costs of different Azure networking services to help users make more cost-effective decisions.
+- Manage Azure IPAM with Terraform 🌟 - A blog post detailing how to provision and utilize Azure IPAM (IP Address Management) service using Terraform. It explains the benefits of IPAM in simplifying IP address allocation across teams and environments by abstracting the complexity of IP ranges, allowing consumers to request a specific number of addresses from a shared pool.
- Building a DDoS Response Plan with Azure DDoS Protection 🌟 - This blog post outlines the development of a comprehensive DDoS response strategy by leveraging the capabilities of Azure DDoS Protection. It details the types of DDoS attacks (Volumetric, Protocol, and Resource), and explains how Azure DDoS Protection, in conjunction with Azure Web Application Firewall (WAF), provides mitigation. The post emphasizes the importance of incident detection, communication protocols, and the overall creation of a robust plan to ensure the availability and performance of online services.
- Limitless Kubernetes Scaling for AI and Data-intensive Workloads: The AKS Fleet Strategy - (Related to kubernetes topic)
- Learn to Manage Investments and Cost Efficiency of Azure and AI Workloads - (Related to finops topic)
@@ -9006,33 +9006,33 @@
- thomasthornton.cloud: Thomas Thornton
- thomasmaurer.ch
-- CommandLine Ninja PowerShell, Active Directory, GPO & Azure Automation. Learn how to automate using PowerShell!
-- dotnetcurry.com
-- azurebrains.com: Azurebrains Blog sobre Tecnologias Cloud, Azure, Inteligencia Artificial, etc.
-- rutlandblog.com All Things Azure
+- CommandLine Ninja PowerShell, Active Directory, GPO & Azure Automation. Learn how to automate using PowerShell!
+- dotnetcurry.com
+- azurebrains.com: Azurebrains Blog sobre Tecnologias Cloud, Azure, Inteligencia Artificial, etc.
+- rutlandblog.com All Things Azure
Azure Training and Certifications
- johnthebrit/CertificationMaterials A collection of materials related to my certification videos
-- thomasmaurer.ch: How To Learn Microsoft Azure in 2022
-- charbelnemnom.com: Exam AZ-305: Microsoft Certified: Azure Solutions Architect Expert
+- thomasmaurer.ch: How To Learn Microsoft Azure in 2022
+- charbelnemnom.com: Exam AZ-305: Microsoft Certified: Azure Solutions Architect Expert
- learn.microsoft.com: Browse all courses, learning paths, and modules 🌟🌟🌟
-- freecodecamp.org: Azure Fundamentals Certification (AZ-900) – Pass the Exam With This Free 8-Hour Course
+- freecodecamp.org: Azure Fundamentals Certification (AZ-900) – Pass the Exam With This Free 8-Hour Course
- learn.microsoft.com: Practice Assessments for Microsoft Certifications
- marketplace.visualstudio.com: Learn Cloud 🌟 Guiding first-time cloud users to deploy to Azure PaaS
Azure Naming Convention
-- docs.microsoft.com: Define your naming convention
-- seifbassem.com: Azure Naming Tool
+- docs.microsoft.com: Define your naming convention
-- justinoconnor.codes: Azure Periodic Table of Resource Naming Convention Shorthands
+- justinoconnor.codes: Azure Periodic Table of Resource Naming Convention Shorthands
Mission-critical Architecture on Azure
-
-
Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads - (Related to aws-networking topic)
+Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads - (Related to aws-networking topic)
-
learn.microsoft.com: Mission-critical baseline architecture on Azure
@@ -9042,145 +9042,145 @@
Understand Azure Load Balancing
-
-
Reduce Latency with Azure Proximity Placement Groups - This article explains how Azure Proximity Placement Groups can be used to physically co-locate Azure compute resources, ensuring low latency between them. It discusses use cases for latency-sensitive applications like manufacturing systems and in-memory computations, and includes details on testing the effectiveness of these groups.
+Reduce Latency with Azure Proximity Placement Groups - This article explains how Azure Proximity Placement Groups can be used to physically co-locate Azure compute resources, ensuring low latency between them. It discusses use cases for latency-sensitive applications like manufacturing systems and in-memory computations, and includes details on testing the effectiveness of these groups.
-
-
docs.microsoft.com: Understand Azure Load Balancing. Decision tree for load balancing in Azure
+docs.microsoft.com: Understand Azure Load Balancing. Decision tree for load balancing in Azure
- mvark.blogspot.com: Comparison of Azure Front Door, Traffic Manager, Application Gateway & Load Balancer
Azure Load Testing
-- Azure Load Testing
-- azure.microsoft.com: Microsoft Azure Load Testing is now generally available
+- Azure Load Testing
+- azure.microsoft.com: Microsoft Azure Load Testing is now generally available
- github.com/Azure-Samples/azure-load-testing-samples 🌟 Samples for Azure Load Testing
Microsoft Linux Distribution CBL Mariner
-- thenewstack.io: Deploying Microsoft’s New Linux Distribution as a VM is Not Easy
-- github.com/microsoft/CBL-Mariner Linux OS for Azure 1P services and edge appliances
+- thenewstack.io: Deploying Microsoft’s New Linux Distribution as a VM is Not Easy
+- github.com/microsoft/CBL-Mariner Linux OS for Azure 1P services and edge appliances
Azure Patterns
-- Enterprise Web App Patterns - Azure Architecture Center - This article from the Azure Architecture Center outlines enterprise web app patterns, offering a structured approach for developers and architects to guide web applications through the cloud journey. It focuses on two phases, each addressing a common business goal and progressing towards more advanced web applications, with prescriptive guidance aligned with the Azure Well-Architected Framework.
+- Enterprise Web App Patterns - Azure Architecture Center - This article from the Azure Architecture Center outlines enterprise web app patterns, offering a structured approach for developers and architects to guide web applications through the cloud journey. It focuses on two phases, each addressing a common business goal and progressing towards more advanced web applications, with prescriptive guidance aligned with the Azure Well-Architected Framework.
-
Hub-Spoke Network Topology in Azure - Azure Architecture Center - This Microsoft Learn page details the hub-spoke network pattern as a recommended best practice for Azure network topology by the Cloud Adoption Framework. It provides an architecture diagram and explains the implementation of customer-managed hub infrastructure components. The page also references an alternative solution with Microsoft-managed hub infrastructure using Azure Virtual WAN.
-
-- docs.microsoft.com: Cloud Design Patterns 🌟
+- docs.microsoft.com: Cloud Design Patterns 🌟
ARM Templates
- AZVerify: Bridging Azure Resources, Bicep Templates, and Diagrams with GitHub Copilot - AZVerify is a GitHub repository that enhances GitHub Copilot’s capabilities to synchronize Azure resources, Bicep templates, and live environment diagrams. It addresses the common issue of drift between these three sources of truth. The project provides skills for GitHub Copilot Chat and the Copilot CLI to facilitate this synchronization, allowing users to generate diagrams from Azure resources or vice versa, and ensuring consistency.
-- Export Terraform Code from the Azure Portal - (Related to terraform topic)
+- Export Terraform Code from the Azure Portal - (Related to terraform topic)
- Terraform Azure Resource IPAM Module - (Related to terraform topic)
-- Announcing Public Preview of Terraform Export from the Azure Portal - (Related to terraform topic)
+- Announcing Public Preview of Terraform Export from the Azure Portal - (Related to terraform topic)
- Announcing Public Preview of Terraform Export from the Azure Portal - (Related to terraform topic)
- Enhancing Infrastructure as Code Generation with GitHub Copilot for Azure - (Related to iac topic)
-- Automate Terraform Testing with Azure DevOps Pipelines - (Related to terraform topic)
+- Automate Terraform Testing with Azure DevOps Pipelines - (Related to terraform topic)
-
Terraform Provider for Azure IPAM - (Related to terraform topic)
-
-
azure.microsoft.com: Azure Quickstart Templates Deploy Azure resources through the Azure Resource Manager with community contributed templates to get more done. Deploy, learn, fork and contribute back.
+azure.microsoft.com: Azure Quickstart Templates Deploy Azure resources through the Azure Resource Manager with community contributed templates to get more done. Deploy, learn, fork and contribute back.
-- thomasmaurer.ch: Learn how to deploy and manage Azure resources with ARM templates
-- techcommunity.microsoft.com: ARM Template Specs now GA!
-- docs.microsoft.com: Azure Resource Manager template specs
+- thomasmaurer.ch: Learn how to deploy and manage Azure resources with ARM templates
+- techcommunity.microsoft.com: ARM Template Specs now GA!
+- docs.microsoft.com: Azure Resource Manager template specs
DevTest
-- learn.microsoft.com: DevTest and DevOps for microservice solutions
+- learn.microsoft.com: DevTest and DevOps for microservice solutions
Azure DevOps
-- Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) - (Related to cicd topic)
+- Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) - (Related to cicd topic)
- Azure DevOps MCP Server - This repository contains the server-side implementation for the Microsoft Cloud Platform (MCP) agent, which integrates Azure DevOps capabilities directly with agent environments. It enables enhanced CI/CD workflows and DevOps automation by bringing Azure DevOps features to the agent level.
-- Azure DevOps MCP Server Public Preview - (Related to ai topic)
+- Azure DevOps MCP Server Public Preview - (Related to ai topic)
- Automating Microsoft Sentinel Deployment with Azure DevOps CI/CD 🌟 - This article demonstrates how to automate the deployment of Microsoft Sentinel using Azure DevOps CI/CD pipelines. It covers the setup of Sentinel resources, workspace configuration, and the integration with Azure DevOps for continuous integration and deployment.
-- AKS Labs - Introduction - (Related to kubernetes-tutorials topic)
-- Deploying to Azure: Secure Your GitHub Workflow with OIDC - (Related to cicd topic)
-- Dependabot Version Updates in Azure DevOps - (Related to cicd topic)
+- AKS Labs - Introduction - (Related to kubernetes-tutorials topic)
+- Deploying to Azure: Secure Your GitHub Workflow with OIDC - (Related to cicd topic)
+- Dependabot Version Updates in Azure DevOps - (Related to cicd topic)
- Securing Azure DevOps When Using Private Repositories - This article, originating from a LinkedIn post about securing Azure DevOps when utilizing private repositories, appears to be lost. The provided link redirects to a general LinkedIn ‘Top Content’ page, indicating the original content is unavailable. Therefore, its technical value and cataloging are impossible.
-- Terraform: Get User Principal Name (UPN) of User Running Deployment without Entra ID Read Permissions - (Related to terraform topic)
-- Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) - (Related to kubernetes-security topic)
-- Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - (Related to cicd topic)
+- Terraform: Get User Principal Name (UPN) of User Running Deployment without Entra ID Read Permissions - (Related to terraform topic)
+- Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) - (Related to kubernetes-security topic)
+- Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - (Related to cicd topic)
-
-
Update to Azure DevOps Allowed IP Addresses - This post announces upcoming changes to Azure DevOps networking infrastructure, requiring users to allow list new IP addresses in their firewall configurations. These updates are aimed at enhancing performance, speed, and stability of Azure DevOps services, with a transition period to ensure a smooth migration. The new IPv4 and IPv6 ranges, as well as ExpressRoute IP ranges, are provided.
+Update to Azure DevOps Allowed IP Addresses - This post announces upcoming changes to Azure DevOps networking infrastructure, requiring users to allow list new IP addresses in their firewall configurations. These updates are aimed at enhancing performance, speed, and stability of Azure DevOps services, with a transition period to ensure a smooth migration. The new IPv4 and IPv6 ranges, as well as ExpressRoute IP ranges, are provided.
-
-
+
-- Azure DevOps Labs 🌟
+- Azure DevOps Labs 🌟
- github.com/nnellans/ado-pipelines-guide: Azure DevOps YAML Pipelines Guide 🌟
-- docs.microsoft.com: Build applications with Azure DevOps (Learning Path)
-- docs.microsoft.com: Azure Pipelines documentation Implement continuous integration and continuous delivery (CI/CD) for the app and platform of your choice.
+- docs.microsoft.com: Build applications with Azure DevOps (Learning Path)
+- docs.microsoft.com: Azure Pipelines documentation Implement continuous integration and continuous delivery (CI/CD) for the app and platform of your choice.
- microsoft/azure-pipelines-tasks
- info.acloud.guru: Deploying your first kubernetes app with Azure DevOps
- info.acloud.guru: Azure DevOps VS GitHub: Comparing Microsoft’s DevOps Twins
-- techcommunity.microsoft.com: Building a path to success for microservices and .NET Core - Project Tye + GitHub Actions
+- techcommunity.microsoft.com: Building a path to success for microservices and .NET Core - Project Tye + GitHub Actions
- medium: Azure DevOps HandBook !
- Azure DevOps Tips: “Each” Loops
-- cloudskills.io: Getting Started with Git and Azure DevOps: The Ultimate Guide 🌟
-- zartis.com: Simplify Your SDLC with Azure DevOps
-- devblogs.microsoft.com: Controlling Release Pipelines with Gates and Azure Policy Compliance 🌟
+- cloudskills.io: Getting Started with Git and Azure DevOps: The Ultimate Guide 🌟
+- zartis.com: Simplify Your SDLC with Azure DevOps
+- devblogs.microsoft.com: Controlling Release Pipelines with Gates and Azure Policy Compliance 🌟
- youtube: Azure DevOps Pipeline and Image Builder
- dev.to: Setting up a CI-CD Pipeline Using Azure DevOps 🌟
-- zartis.com: Simplify Your SDLC with Azure DevOps 🌟
-- thomasthornton.cloud: Scout Suite reports using Azure DevOps Pipeline Interesting article on how to fecth az DevOps pipelines reports as a static website
+- zartis.com: Simplify Your SDLC with Azure DevOps 🌟
+- thomasthornton.cloud: Scout Suite reports using Azure DevOps Pipeline Interesting article on how to fecth az DevOps pipelines reports as a static website
- Azure DevOps Dashboard
-- cloud.google.com: Crea una canalización de CI/CD con Azure Pipelines y Compute Engine
+- cloud.google.com: Crea una canalización de CI/CD con Azure Pipelines y Compute Engine
- letsdevops.net: Introduction to Azure DevOps for Beginners - Create CI/CD Pipelines, Setup Repository 🌟
-- kevinrchant.com: Increase in demand for Data Platform automation
-- kevinrchant.com: Introducing my Azure DevOps templates for Data Platform deployments
+- kevinrchant.com: Increase in demand for Data Platform automation
- dotnetcurry.com: Customization of Work Items in Azure DevOps and Azure DevOps Server 2020
- thomast1906/DevOps-The-Hard-Way-Azure 🌟 This repository contains free labs for setting up an entire workflow and DevOps environment from a real-world perspective in Azure
-- thinksys.com: Azure DevOps Pipeline Complete Guide 2022
-- techcommunity.microsoft.com: CICD in Synapse SQL: How to deliver your database objects across multiple environments
+- thinksys.com: Azure DevOps Pipeline Complete Guide 2022
+- techcommunity.microsoft.com: CICD in Synapse SQL: How to deliver your database objects across multiple environments
- medium.com/geekculture: Provision resources on AWS with Azure DevOps and Terraform — Part I
- medium.com/@sdevsecops: How to implement DevSecOps in a Kubernetes cluster environment-Github Actions and Azure DevOps
-- learn.microsoft.com: Azure DevOps Templates - Template types & usage 🌟🌟
+- learn.microsoft.com: Azure DevOps Templates - Template types & usage 🌟🌟
- medium.com/geekculture: Continuous Deployment with Azure DevOps Pipelines and Kubernetes Create a Continuous Deployment workflow for your application
-- techcommunity.microsoft.com: Azure DevOps Pipelines: If Expressions and Conditions 🌟
-- linkedin.com: Complete CI/CD Solution for mS on AKS using Azure DevOps, ArgoCD and External Kubernetes Secretes 🌟
-- techcommunity.microsoft.com: Introduction to Azure DevOps Workload identity federation (OIDC) with Terraform
-- datascientest.com: Azure DevOps Pipeline YAML: why configure CI/CD pipelines with YAML?
-- thomasthornton.cloud: Conditional Variables in Azure DevOps Pipelines
-- build5nines.com: Azure Pipeline: Publish Unit Test and Code Coverage Results with .NET 7 Solution using VSTest, Cobertura, and Coverlet
-- thomasthornton.cloud: Adding pull-request comments to Azure DevOps Repo from Azure DevOps Pipelines
+- techcommunity.microsoft.com: Azure DevOps Pipelines: If Expressions and Conditions 🌟
+- linkedin.com: Complete CI/CD Solution for mS on AKS using Azure DevOps, ArgoCD and External Kubernetes Secretes 🌟
+- techcommunity.microsoft.com: Introduction to Azure DevOps Workload identity federation (OIDC) with Terraform
+- datascientest.com: Azure DevOps Pipeline YAML: why configure CI/CD pipelines with YAML?
+- thomasthornton.cloud: Conditional Variables in Azure DevOps Pipelines
+- build5nines.com: Azure Pipeline: Publish Unit Test and Code Coverage Results with .NET 7 Solution using VSTest, Cobertura, and Coverlet
+- thomasthornton.cloud: Adding pull-request comments to Azure DevOps Repo from Azure DevOps Pipelines
- towardsdev.com: Azure DevOps Project Creation and Setup via Terraform
-- thomasthornton.cloud: Deploy Terraform using Azure DevOps
-- blog.johnfolberth.com: Resources and posts for those figuring out DevOps in Azure
+- thomasthornton.cloud: Deploy Terraform using Azure DevOps
+- blog.johnfolberth.com: Resources and posts for those figuring out DevOps in Azure
- medium.com/@muppedaanvesh: Azure DevOps — Self Hosted Agents on Kubernetes — PART-1 Unlocking Efficiency and Scalability for Your CI/CD Workflows
- medium.com/@DevOps-Diva.o: Implementing Security on Azure DevOps Pipelines
-- luke.geek.nz/azure: Export Azure DevOps Repositories to Azure Storage Account
-- learn.microsoft.com: Managed DevOps Pools documentation Managed DevOps Pool is a fully managed service where VMs or containers powering the agents will live in a Microsoft Azure subscription and not in your own Azure subscription.
+- luke.geek.nz/azure: Export Azure DevOps Repositories to Azure Storage Account
+- learn.microsoft.com: Managed DevOps Pools documentation Managed DevOps Pool is a fully managed service where VMs or containers powering the agents will live in a Microsoft Azure subscription and not in your own Azure subscription.
- youtube: Managed DevOps Pools for Azure DevOps | Full Overview & Demo 🌟
Azure DevOps Backup Tool
-- https://github.com/michaelmsonne/AzureDevOpsBackupTool
-- blog.sonnes.cloud: Introducing Azure DevOps Backup Tool 1.1.0.0: Major update with new features, bug fixes and enhanced security!
+- https://github.com/michaelmsonne/AzureDevOpsBackupTool
+- blog.sonnes.cloud: Introducing Azure DevOps Backup Tool 1.1.0.0: Major update with new features, bug fixes and enhanced security!
Azure DevOps vs GitHub Actions
-- datascientest.com: Azure DevOps vs GitHub Actions: Which is the best CI/CD tool?
+- datascientest.com: Azure DevOps vs GitHub Actions: Which is the best CI/CD tool?
YAML Schema in DevOps Azure Pipelines
Azure Pipeline Tasks
-
-
Install Java 23 in an Azure DevOps Pipeline - This article provides a step-by-step guide on how to install Java 23 within an Azure DevOps pipeline, specifically when the default JavaToolInstaller task does not support the desired version. It outlines the necessary scripts to download, extract, and configure Java 23, setting JAVA_HOME and updating the PATH environment variables, and then demonstrates how to use it with a Maven build.
+Install Java 23 in an Azure DevOps Pipeline - This article provides a step-by-step guide on how to install Java 23 within an Azure DevOps pipeline, specifically when the default JavaToolInstaller task does not support the desired version. It outlines the necessary scripts to download, extract, and configure Java 23, setting JAVA_HOME and updating the PATH environment variables, and then demonstrates how to use it with a Maven build.
-
Microsoft/azure-pipelines-tasks This repo contains the tasks that are provided out-of-the-box with Azure Pipelines and Team Foundation Server. This provides open examples on how we write tasks which will help you write other tasks which can be uploaded to your account or server.
@@ -9231,8 +9231,8 @@
-
stackoverflow.com: What is the difference between an Azure tenant and Azure subscription?
-- marckean.com: Azure Vs Azure AD – Accounts / Tenants / Subscriptions
-- blogit.create.pt: Pros and Cons of Single Tenant vs Multiple Tenants in Office 365
+- marckean.com: Azure Vs Azure AD – Accounts / Tenants / Subscriptions
+- blogit.create.pt: Pros and Cons of Single Tenant vs Multiple Tenants in Office 365
- learn.microsoft.com: Classic subscription administrator roles, Azure roles, and Azure AD roles
- learn.microsoft.com: Subscriptions, licenses, accounts, and tenants for Microsoft’s cloud offerings
- learn.microsoft.com: Azure subscription and service limits, quotas, and constraints
@@ -9242,26 +9242,26 @@
- itnext.io: Secure Azure Cosmos DB access by using Azure Managed Identities Getting rid of passwords (or connection strings) while accessing Azure services and instead making use of Managed Identities is a way to increase the security of your workloads. Learn how to use Managed Identities in this article.
- youtube.com: Azure Service Principal - SPN | Houssem Dellai
- youtube.com: How to create Service Principals in Azure Portal | Raaviblog
-- techcommunity.microsoft.com: Dynamic user membership rules, Azure Active Directory Administrative Units and password reset! 🌟
-- learn.microsoft.com: Application registration permissions for custom roles in Azure Active Directory
-- learn.microsoft.com: What are Azure Active Directory recommendations? 🌟🌟
+- techcommunity.microsoft.com: Dynamic user membership rules, Azure Active Directory Administrative Units and password reset! 🌟
+- learn.microsoft.com: Application registration permissions for custom roles in Azure Active Directory
+- learn.microsoft.com: What are Azure Active Directory recommendations? 🌟🌟
- learn.microsoft.com: Multi-tenant user management introduction
- learn.microsoft.com: Delegate Azure role assignment management to others with conditions
-- codewithme.cloud: Why aren’t you using Managed Identities?!
-- linkedin.com/pulse: No Credentials, No Problem - using Azure Managed Identity
+- codewithme.cloud: Why aren’t you using Managed Identities?!
+- linkedin.com/pulse: No Credentials, No Problem - using Azure Managed Identity
- learn.microsoft.com/nb-no: Delegate Azure role assignment management to others with conditions
- learn.microsoft.com/en-us: Azure built-in roles 🌟🌟
-- techcommunity.microsoft.com: Azure Permissions 101: How to manage Azure access effectively
-- techcommunity.microsoft.com: Important: Azure AD Graph Retirement and Powershell Module Deprecation
-- journeyofthegeek.com: Azure Authorization – Azure RBAC Delegation
-- mattias.engineer: Azure Federated Identity Credentials for GitHub
+- techcommunity.microsoft.com: Azure Permissions 101: How to manage Azure access effectively
+- techcommunity.microsoft.com: Important: Azure AD Graph Retirement and Powershell Module Deprecation
+- journeyofthegeek.com: Azure Authorization – Azure RBAC Delegation
+- mattias.engineer: Azure Federated Identity Credentials for GitHub
Register applications in Azure AD. Authenticate apps and services
-- agrenpoint.com: Azure AD & Microsoft Graph permission scopes, with Azure CLI In this small post, we will look at a scenario where we want to register an Azure AD Application using specific scopes. When adding scopes for service principals using the Azure CLI we need to use the internal Ids. And one way would be to manually create one registration, get that app and then print out the scopes and then copy and paste.
+- agrenpoint.com: Azure AD & Microsoft Graph permission scopes, with Azure CLI In this small post, we will look at a scenario where we want to register an Azure AD Application using specific scopes. When adding scopes for service principals using the Azure CLI we need to use the internal Ids. And one way would be to manually create one registration, get that app and then print out the scopes and then copy and paste.
- medium.com/medialesson: Create Azure Active Directory App Registration with Azure CLI
-- inkoop.io: How to get Azure API Credentials How to create an application in Azure active directory and get subscription id, tenant id, client id, client secret and generate management certificates. You will need these keys to access Azure API.
-- docs.microsoft.com: Use the portal to create an Azure AD application and service principal that can access resource
+- inkoop.io: How to get Azure API Credentials How to create an application in Azure active directory and get subscription id, tenant id, client id, client secret and generate management certificates. You will need these keys to access Azure API.
+- docs.microsoft.com: Use the portal to create an Azure AD application and service principal that can access resource
- medium.com/medialesson: Assigning Azure built-in roles vs Azure AD built-in roles with Azure CLI Depending on what action you are trying to perform in Azure you might require either to be member of a certain Azure role or a certain Azure AD role. For example if we want an identity to create an app registration in Azure AD we need the role Application Administrator which is part of the Azure AD roles. When we want to create a resource in a certain resource group we need the Contributor role which is part of the Azure AD and typically scoped to a either a subscription, a resource group or a distinct resource.
- microsoftgraph/msgraph-sdk-powershell/samples: 9-Applications.ps1
- vcloud-lab.com: Get started and configure certificate-based authentication in Azure
@@ -9273,7 +9273,7 @@
Azure AD Pen Testing
-- zer1t0.gitlab.io: Attacking Active Directory: 0 to 0.9 🌟
+- zer1t0.gitlab.io: Attacking Active Directory: 0 to 0.9 🌟
Azure Arc. Azure’s Hybrid And Multi-Cloud Platform. GitOps with Azure Arc
@@ -9281,22 +9281,22 @@
Announcing Private Preview: ArgoCD through Microsoft GitOps - (Related to gitops topic)
-
-
Azure Arc overview Alternative to Google Anthos or RHACM
+Azure Arc overview Alternative to Google Anthos or RHACM
-- azurearcjumpstart.io - microsoft/azure_arc
+- azurearcjumpstart.io - microsoft/azure_arc
-- techcommunity.microsoft.com: Standardize DevOps practices across hybrid and multicloud environments With Azure Arc-enabled Kubernetes, you can attach and configure Kubernetes clusters located either inside or outside Azure.
-- docs.microsoft.com: CI/CD workflow using GitOps (Flux v2) - Azure Arc enabled Kubernetes
-- thomasmaurer.ch: Run cloud-native apps on Azure PaaS anywhere
-- seifbassem.com: SSH into your Azure Arc-enabled servers from anywhere
+- techcommunity.microsoft.com: Standardize DevOps practices across hybrid and multicloud environments With Azure Arc-enabled Kubernetes, you can attach and configure Kubernetes clusters located either inside or outside Azure.
+- docs.microsoft.com: CI/CD workflow using GitOps (Flux v2) - Azure Arc enabled Kubernetes
+- thomasmaurer.ch: Run cloud-native apps on Azure PaaS anywhere
+- seifbassem.com: SSH into your Azure Arc-enabled servers from anywhere
Secure DevOps Kit for Azure
- Secure DevOps Kit for Azure
- DevOpsKit-docs
-- ismiletechnologies.com: Secure DevOps Kit For Azure(AzSK)
+- ismiletechnologies.com: Secure DevOps Kit For Azure(AzSK)
Azure App Service
@@ -9306,33 +9306,33 @@
-
learn.microsoft.com: Environment variables and app settings in Azure App Service
-- learn.microsoft.com: Configure a Java app for Azure App Service
+- learn.microsoft.com: Configure a Java app for Azure App Service
- learn.microsoft.com: Configure a custom container for Azure App Service
-- returngis.net: Acceder a un App Service con Private Endpoint desde otra Vnet
+- returngis.net: Acceder a un App Service con Private Endpoint desde otra Vnet
- youtube: How to run an App Service Web App on Azure Arc-enabled Kubernetes - Part 2 | Azure Tips and Tricks
- azure.github.io/AppService: General availability of Diagnostics tools for App Service on Linux Node.js apps
Azure Application Gateway
-- Application Gateway for Containers: Istio Integration - (Related to istio topic)
-- Application Gateway for Containers with AKS Overlay Networking and VNet Flow Logs - (Related to kubernetes-networking topic)
+- Application Gateway for Containers: Istio Integration - (Related to istio topic)
+- Application Gateway for Containers with AKS Overlay Networking and VNet Flow Logs - (Related to kubernetes-networking topic)
-
-
Introduction to Azure Application Gateway for Containers (AGC) - A detailed introduction to Azure Application Gateway for Containers (AGC), a reverse proxy solution for Kubernetes workloads. This post covers its architecture, components, and how it differs from the previous Application Gateway Ingress Controller (AGIC), focusing on benefits like external deployment to conserve cluster resources and faster reconfiguration times.
+Introduction to Azure Application Gateway for Containers (AGC) - A detailed introduction to Azure Application Gateway for Containers (AGC), a reverse proxy solution for Kubernetes workloads. This post covers its architecture, components, and how it differs from the previous Application Gateway Ingress Controller (AGIC), focusing on benefits like external deployment to conserve cluster resources and faster reconfiguration times.
-
-- acethecloud.com: Which is better Azure App Gateway or Nginx configured on Azure VMs
+- acethecloud.com: Which is better Azure App Gateway or Nginx configured on Azure VMs
Azure Functions
-
-
Azure Functions Cost Considerations and Optimization - (Related to serverless topic)
+Azure Functions Cost Considerations and Optimization - (Related to serverless topic)
-
-
+
-- azurebrains.com: Despliega tu Azure Function App con Terraform y Azure DevOps 🌟
+- azurebrains.com: Despliega tu Azure Function App con Terraform y Azure DevOps 🌟
Azure Monitor
@@ -9340,73 +9340,73 @@
Monitor your Azure cloud estate - Cloud Adoption Framework - This Microsoft Learn article outlines how to plan, configure, and optimize monitoring for Azure cloud environments. It covers integrating data from other clouds, on-premises, and edge locations, and details monitoring responsibilities based on deployment models (IaaS, PaaS, SaaS). The article emphasizes defining a monitoring strategy to detect, diagnose, and predict issues.
-
-
techcommunity.microsoft.com: Azure Monitor Logs Next Evolution: Multi-tier logging
+techcommunity.microsoft.com: Azure Monitor Logs Next Evolution: Multi-tier logging
Azure Monitor managed service for Prometheus
-- techcommunity.microsoft.com: Introducing Azure Monitor managed service for Prometheus 🌟
-- techcommunity.microsoft.com: How To Monitor Your Multi-Tenant Solution on Azure With Azure Monitor
-- techcommunity.microsoft.com: Advanced Network Observability for your Azure Kubernetes Service clusters through Azure Monitor
+- techcommunity.microsoft.com: Introducing Azure Monitor managed service for Prometheus 🌟
+- techcommunity.microsoft.com: How To Monitor Your Multi-Tenant Solution on Azure With Azure Monitor
+- techcommunity.microsoft.com: Advanced Network Observability for your Azure Kubernetes Service clusters through Azure Monitor
Azure Log Analytics
-- havanrijn.wordpress.com: Don’t let Azure Log Analytics break the bank
+- havanrijn.wordpress.com: Don’t let Azure Log Analytics break the bank
Azure Grafana
-- techcommunity.microsoft.com: Azure Orphan Resources Grafana Dashboard
+- techcommunity.microsoft.com: Azure Orphan Resources Grafana Dashboard
Mobile Apps
-- Visual Studio App Center VS Azure Pipelines
+- Visual Studio App Center VS Azure Pipelines
- itnext.io: How to setup CI CD pipelines for Android with Azure DevOps At Royale Cheese initially we had setup CI/CD for Android via Microsoft’s Visual Studio App Center (an upgrade of Hockey App), but last year they declared the retirement of MBaas which got us worried about the overall future of VS App Center. That was one of the reasons we wanted to switch away from it. Secondly, the free tier provided around 400 minutes of build time per month per account which would had been sufficient for other technologies, but Android takes around 15 minutes to create a single build and deploy. We all know what gradle is capable of 😉. So having multiple apps (both iOS and Android) in the same account didn’t fare well.
-- arjavdave.com: Continuous Integration: CI/CD for iOS (Part 1)
-- sahansera.dev: Multi-stage builds for Ionic Apps with Azure Pipeline Templates
-- sahansera.dev: Publishing Android Apps to Microsoft App Center from Azure DevOps
+- arjavdave.com: Continuous Integration: CI/CD for iOS (Part 1)
+- sahansera.dev: Multi-stage builds for Ionic Apps with Azure Pipeline Templates
+- sahansera.dev: Publishing Android Apps to Microsoft App Center from Azure DevOps
- yoshevski.medium.com: Cost-effective Azure Devops and AppCenter integration
- youtube: Signing & Versioning iOS & Android Apps | DevOps for Mobile
Powershell
-- PowerShell
-- PowerShell Gallery 🌟 The central repository for sharing and acquiring PowerShell code including PowerShell modules, scripts, and DSC resources.
-- PowerShell Community
-- reddit.com: PowerShell Core yaml support?
-- powershellmagazine.com
-- dbatools.io SQL Server instance migrations and best practice implementation.
-- thomasmaurer.ch: PowerShell: Download script or file from GitHub
-- deepinstinct.com: What makes powershell a challenge for cybersecurity solutions? 🌟
-- fedoramagazine.org: PowerShell on Linux? A primer on Object-Shells
+- PowerShell
+- PowerShell Gallery 🌟 The central repository for sharing and acquiring PowerShell code including PowerShell modules, scripts, and DSC resources.
+- PowerShell Community
+- reddit.com: PowerShell Core yaml support?
+- powershellmagazine.com
+- dbatools.io SQL Server instance migrations and best practice implementation.
+- thomasmaurer.ch: PowerShell: Download script or file from GitHub
+- deepinstinct.com: What makes powershell a challenge for cybersecurity solutions? 🌟
+- fedoramagazine.org: PowerShell on Linux? A primer on Object-Shells
- sqlservercentral.com: Powershell Day by Day: Adding Help to Scripts
- dahlbyk/posh-git A PowerShell environment for Git
-- blog.guybarrette.com: Powershell prompt: How to display your current Kubernetes context using Oh-My-Posh 3 🌟
+- blog.guybarrette.com: Powershell prompt: How to display your current Kubernetes context using Oh-My-Posh 3 🌟
- jinwookim928.medium.com: Automation Script for Git Flow on PowerShell
- youtube: Azure PowerShell account management with Azure contexts | A Cloud Guru 🌟 If you’ve been using Azure PowerShell, you might’ve noticed that when you launch a script, you’ll need to authenticate. When you have multiple Azure subscriptions with their own resources, this makes account management difficult. Mark Mikula demonstrates how you can manage multiple Azure subscriptions through Azure Contexts in PowerShell
-- hackingarticles.in: PowerShell for Pentester: Windows Reverse Shell We’ll explore how to acquire a reverse shell using Powershell scripts on the Windows platform.
+- hackingarticles.in: PowerShell for Pentester: Windows Reverse Shell We’ll explore how to acquire a reverse shell using Powershell scripts on the Windows platform.
- hashicorp.com: Managing Terraform Cloud With PowerShell
-- acloudguru.com: The Beginner’s Guide to Azure PowerShell: One Shell to Rule Them All
-- techcommunity.microsoft.com: An example why PowerShell is so important!
-- jdhitsolutions.com: Profile PowerShell Functions
-- devblogs.microsoft.com: When PowerShellGet v1 fails to install the NuGet Provider
-- techcommunity.microsoft.com: An example why PowerShell is so important! Create 500 training (test) accounts
-- commandline.ninja: Use Powershell to find windows services configured to run as another user
-- techcommunity.microsoft.com: Use PowerShell to retrieve all assigned Intune policies and applications per Azure AD group!
-- softzone.es: Por qué me interesa más usar PowerShell en lugar de CMD
-- mssqltips.com: PowerShell for the DBA - If Else and Switch statements
-- 4sysops.com: Use PsExec and PowerShell together How to run PowerShell commands remotely with PsExec
-- dotnet-helpers.com: Passing Local Variables to Remote PowerShell session
-- techcommunity.microsoft.com: Use PowerShell to search for accounts in Active Directory that have gone stale!
-- techcommunity.microsoft.com: Azure Storage Blob Count & Capacity usage Calculator This PowerShell script allow you to count and calculate Azure Storage blob usage for Soft Deleted / non-Soft Deleted objects, by Container, by Tier, with Prefix, and considering Last Modified Date. Azure Storage blob objects is defined as Base Blobs, Blob Snapshots or Blob Versions.
-- dotnet-helpers.com: Azure KeyVault Set and Retrieve Secrets using Powershell 🌟
-- thomasmaurer.ch: Enable PowerShell SSH Remoting in PowerShell 7
-- hlokensgard.no: Get started with PowerShell 7.2 in Azure Automation Account
-- techcommunity.microsoft.com: Azure PowerShell Tips and Tricks
-- techcommunity.microsoft.com: Announcing a new login experience with Azure PowerShell and Azure CLI
+- acloudguru.com: The Beginner’s Guide to Azure PowerShell: One Shell to Rule Them All
+- techcommunity.microsoft.com: An example why PowerShell is so important!
+- jdhitsolutions.com: Profile PowerShell Functions
+- devblogs.microsoft.com: When PowerShellGet v1 fails to install the NuGet Provider
+- techcommunity.microsoft.com: An example why PowerShell is so important! Create 500 training (test) accounts
+- commandline.ninja: Use Powershell to find windows services configured to run as another user
+- techcommunity.microsoft.com: Use PowerShell to retrieve all assigned Intune policies and applications per Azure AD group!
+- softzone.es: Por qué me interesa más usar PowerShell en lugar de CMD
+- mssqltips.com: PowerShell for the DBA - If Else and Switch statements
+- 4sysops.com: Use PsExec and PowerShell together How to run PowerShell commands remotely with PsExec
+- dotnet-helpers.com: Passing Local Variables to Remote PowerShell session
+- techcommunity.microsoft.com: Use PowerShell to search for accounts in Active Directory that have gone stale!
+- techcommunity.microsoft.com: Azure Storage Blob Count & Capacity usage Calculator This PowerShell script allow you to count and calculate Azure Storage blob usage for Soft Deleted / non-Soft Deleted objects, by Container, by Tier, with Prefix, and considering Last Modified Date. Azure Storage blob objects is defined as Base Blobs, Blob Snapshots or Blob Versions.
+- dotnet-helpers.com: Azure KeyVault Set and Retrieve Secrets using Powershell 🌟
+- thomasmaurer.ch: Enable PowerShell SSH Remoting in PowerShell 7
+- hlokensgard.no: Get started with PowerShell 7.2 in Azure Automation Account
+- techcommunity.microsoft.com: Azure PowerShell Tips and Tricks
+- techcommunity.microsoft.com: Announcing a new login experience with Azure PowerShell and Azure CLI
Azure Enterprise Policy As Code (EPAC)
-- azure.github.io/enterprise-azure-policy-as-code: Enterprise Azure Policy as Code Overview Enterprise Azure Policy as Code (EPAC for short) is a number of PowerShell scripts which can be used in CI/CD based system or a semi-automated use to deploy Policies, Policy Sets, Policy Assignments, Policy Exemptions and Role Assignments. It also contains operational scripts to simplify operational tasks.
+- azure.github.io/enterprise-azure-policy-as-code: Enterprise Azure Policy as Code Overview Enterprise Azure Policy as Code (EPAC for short) is a number of PowerShell scripts which can be used in CI/CD based system or a semi-automated use to deploy Policies, Policy Sets, Policy Assignments, Policy Exemptions and Role Assignments. It also contains operational scripts to simplify operational tasks.
Microsoft Graph PowerShell SDK
@@ -9415,22 +9415,22 @@
- Samples: how to create a corresponding service principal from an application
-- docs.microsoft.com: Microsoft Graph migration Due to the deprecation of Azure Active Directory (Azure AD) Graph, the underlying Active Directory Graph API will be replaced by Microsoft Graph API in Azure CLI 2.37.0.
+- docs.microsoft.com: Microsoft Graph migration Due to the deprecation of Azure Active Directory (Azure AD) Graph, the underlying Active Directory Graph API will be replaced by Microsoft Graph API in Azure CLI 2.37.0.
- techtarget.com: Get up to speed with PowerShell and the Microsoft Graph API Microsoft plans to retire technologies that admins depend on to handle Office 365 and other cloud services via PowerShell. Learn how to start with this newer management method.
-- rakhesh.com: Graph cmdlets and Azure AD App Registrations
-- blog.yannickreekmans.be: Secretless applications: add permissions to a Managed Identity Your Managed Identity needs permissions to access other Azure resources or even other Azure AD protected applications and APIs. This is how you do that!
+- rakhesh.com: Graph cmdlets and Azure AD App Registrations
+- blog.yannickreekmans.be: Secretless applications: add permissions to a Managed Identity Your Managed Identity needs permissions to access other Azure resources or even other Azure AD protected applications and APIs. This is how you do that!
-- practical365.com: The Ups and Downs of Connecting to the Microsoft Graph Using the PowerShell SDK
-- practical365.com: Using Certificate-based Authentication with the Microsoft Graph PowerShell SDK
+- practical365.com: The Ups and Downs of Connecting to the Microsoft Graph Using the PowerShell SDK
+- practical365.com: Using Certificate-based Authentication with the Microsoft Graph PowerShell SDK
Powershell repos
-- Abhisheksinhacoder/collection-of-useful-scripts
+- Abhisheksinhacoder/collection-of-useful-scripts
- jrussellfreelance/powershell-scripts
- github.com/search?l=powershell
-- systemcenterdudes.com: Create Operational SCCM Collection Using Powershell Script
+- systemcenterdudes.com: Create Operational SCCM Collection Using Powershell Script
- prae1809/PowerShell-Scripts: OperationalCollections This script will create a set of 134 SCCM collections for your various needs. These collections can be used for operational tasks afterward.
@@ -9443,16 +9443,16 @@
Crescendo powershell module
-- Crescendo is an experimental module developed by Jim Truher, one of the main developers of PowerShell. Crescendo provides a framework to rapidly develop PowerShell cmdlets that wrap native commands, regardless of platform. The goal of a Crescendo-based module is to create PowerShell cmdlets that use a native command-line tool, but unlike the tool, return PowerShell objects instead of plain text.
-- devblogs.microsoft.com: My Crescendo journey
-- powershellgallery.com: Microsoft.PowerShell.Crescendo Module that improves user experience with native commands
+- Crescendo is an experimental module developed by Jim Truher, one of the main developers of PowerShell. Crescendo provides a framework to rapidly develop PowerShell cmdlets that wrap native commands, regardless of platform. The goal of a Crescendo-based module is to create PowerShell cmdlets that use a native command-line tool, but unlike the tool, return PowerShell objects instead of plain text.
+- devblogs.microsoft.com: My Crescendo journey
+- powershellgallery.com: Microsoft.PowerShell.Crescendo Module that improves user experience with native commands
- visualstudiomagazine.com: PowerShell Crescendo Now Generally Available
Secrets Management with Powershell
- https://www.powershellgallery.com/packages/Microsoft.PowerShell.SecretManagement
- https://www.powershellgallery.com/packages/Microsoft.PowerShell.SecretStore
-- commandline.ninja: Video Intro to Secret Management with Powershell
+- commandline.ninja: Video Intro to Secret Management with Powershell
Azure Resource Inventory
@@ -9460,22 +9460,22 @@
Azure CLI. AZ CLI
-- argonsys.com: How to query Azure resources using the Azure CLI
-- docs.microsoft.com: Expand virtual hard disks on a Linux VM with the Azure CLI
-- techcommunity.microsoft.com: Announcing template-based previews of Azure CLI and Azure PowerShell for Key Vault deployments
-- build5nines.com: Azure Resource Tags: Important Organization Strategies and Tips 🌟
-- build5nines.com: Azure CLI: Check if Blob Exists in Azure Storage
+- argonsys.com: How to query Azure resources using the Azure CLI
+- docs.microsoft.com: Expand virtual hard disks on a Linux VM with the Azure CLI
+- techcommunity.microsoft.com: Announcing template-based previews of Azure CLI and Azure PowerShell for Key Vault deployments
+- build5nines.com: Azure Resource Tags: Important Organization Strategies and Tips 🌟
+- build5nines.com: Azure CLI: Check if Blob Exists in Azure Storage
Azure Run Command
-- mandiant.com: Azure Run Command for Dummies
-- docs.microsoft.com: Run scripts in your Linux VM by using action Run Commands
-- docs.microsoft.com: Run scripts in your Windows VM by using action Run Commands
+- mandiant.com: Azure Run Command for Dummies
+- docs.microsoft.com: Run scripts in your Linux VM by using action Run Commands
+- docs.microsoft.com: Run scripts in your Windows VM by using action Run Commands
IaC with PowerShell DSC Desired State Configuration
-- docs.microsoft.com: Desired State Configuration overview for decision makers 🌟
-- docs.microsoft.com: Using configuration data in DSC
+- docs.microsoft.com: Desired State Configuration overview for decision makers 🌟
+- docs.microsoft.com: Using configuration data in DSC
- octopus.com: Getting started with PowerShell Desired State Configuration (DSC) PowerShell DSC is an Infrastructure as Code (IaC) technology that uses PowerShell to create Managed Object Format (MOF) files, which Windows Management Instrumentation (WMI) can use to configure a machine. In other words, PowerShell DSC uses PowerShell to programmatically configure your Windows-based computers. Additionally, DSC can monitor the state of the configured resources to make sure your machines stay consistent. Along with monitoring, DSC can also automatically correct the configuration of your system, so it’s always in the desired state. PowerShell != PowerShell DSC
Azure Bicep
@@ -9484,18 +9484,18 @@
- github.com/johnlokerse/azure-bicep-cheat-sheet: Azure Bicep Cheat Sheet Quick-reference guide on Azure Bicep 💪🏻
- github.com/nnellans/bicep-guide
- faun.pub: From Terraform to Azure Bicep: What You Need to Know about syntax
-- techcommunity.microsoft.com: How to install an AKS cluster with the Istio service mesh add-on via Bicep
-- techcommunity.microsoft.com: (Part-1) Leverage Bicep: Standard model to Automate Azure IaaS deployment
-- blog.cloudtrooper.net: Deploy (Azure) Network-as-Code as a champ
+- techcommunity.microsoft.com: How to install an AKS cluster with the Istio service mesh add-on via Bicep
+- techcommunity.microsoft.com: (Part-1) Leverage Bicep: Standard model to Automate Azure IaaS deployment
+- blog.cloudtrooper.net: Deploy (Azure) Network-as-Code as a champ
- learn.microsoft.com: Discover misconfigurations in Infrastructure as Code (IaC)
-- insight-services-apac.github.io: Getting Started with Bicep
-- build5nines.com: Get Started with Azure Bicep – Alternative to ARM Templates
-- linkedin.com/pulse: Exporting and importing variables between Bicep files: compileTimeImports | Freek Berson
-- luke.geek.nz: Using the Azure Naming Tool API to name your Bicep resources
-- microsoft.com: Revolutionizing our ARM template deployment at Microsoft with shift from JSON to BICEP
-- techcommunity.microsoft.com: Infra in Azure for Developers - The How (Part 2)
-- johnlokerse.dev: Lint Azure Bicep templates in Azure DevOps
-- techcommunity.microsoft.com: Announcing public preview of Bicep templates support for Microsoft Graph
+- insight-services-apac.github.io: Getting Started with Bicep
+- build5nines.com: Get Started with Azure Bicep – Alternative to ARM Templates
+- linkedin.com/pulse: Exporting and importing variables between Bicep files: compileTimeImports | Freek Berson
+- luke.geek.nz: Using the Azure Naming Tool API to name your Bicep resources
+- microsoft.com: Revolutionizing our ARM template deployment at Microsoft with shift from JSON to BICEP
+- techcommunity.microsoft.com: Infra in Azure for Developers - The How (Part 2)
+- johnlokerse.dev: Lint Azure Bicep templates in Azure DevOps
+- techcommunity.microsoft.com: Announcing public preview of Bicep templates support for Microsoft Graph
- github.com/Azure-Samples/azure-ai-studio-secure-bicep This repository contains a collection of Bicep modules designed to deploy a secure Azure AI Studio environment with robust network and identity security restrictions.
@@ -9503,58 +9503,58 @@
Azure Verified Modules
-- azure.github.io/Azure-Verified-Modules 🌟 Azure Verified Modules (AVM) is an initiative to consolidate and set the standards for what a good Infrastructure-as-Code module looks like. Modules will then align to these standards, across languages (Bicep, Terraform etc.) and will then be classified as AVMs and available from their respective language specific registries.
+- azure.github.io/Azure-Verified-Modules 🌟 Azure Verified Modules (AVM) is an initiative to consolidate and set the standards for what a good Infrastructure-as-Code module looks like. Modules will then align to these standards, across languages (Bicep, Terraform etc.) and will then be classified as AVMs and available from their respective language specific registries.
- youtube: Code To Cloud - Getting Started With: Azure Verified Modules
-- learn.microsoft.com: Introduction to using Azure Verified Modules for Terraform - github.com/azure-samples/avm-terraform-labs
+- learn.microsoft.com: Introduction to using Azure Verified Modules for Terraform - github.com/azure-samples/avm-terraform-labs
Azure Cross region Load Balancer
-- azure.microsoft.com: How Microsoft Azure Cross-region Load Balancer helps create region redundancy and low latency 🌟
+- azure.microsoft.com: How Microsoft Azure Cross-region Load Balancer helps create region redundancy and low latency 🌟
Azure Traffic Manager
Azure DNS
- learn.microsoft.com: What is Azure DNS Private Resolver? Azure DNS Private Resolver is a new service that enables you to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM based DNS servers. Customers will no longer need to provision IaaS based solutions on their Virtual Networks to resolve names registered on Azure Private DNS Zones and will be able to do conditional forwarding of domains back to on-prem, multi-cloud and public DNS servers.
- aidanfinn.com: Script – Document All Azure Private DNS Zones This post contains a script that will find all Azure Private DNS Zones in a tenant and export information on screen and as markdown in a file.
-- techcommunity.microsoft.com: Centralized private resolver architecture implementation using Azure private DNS resolver
+- techcommunity.microsoft.com: Centralized private resolver architecture implementation using Azure private DNS resolver
Azure OpenVPN
-- Create an Azure Active Directory tenant for P2S OpenVPN protocol connections
+- Create an Azure Active Directory tenant for P2S OpenVPN protocol connections
Azure Security
-- techcommunity.microsoft.com: Security Control: Implement security best practices
+- techcommunity.microsoft.com: Security Control: Implement security best practices
- github.com/Cloud-Architekt: Azure AD - Attack and Defense Playbook This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.
-- devops.com: DevSecOps in Azure
-- learn.microsoft.com: SC-100: Design a Zero Trust strategy and architecture [ARCHIVED]
+- devops.com: DevSecOps in Azure
+- learn.microsoft.com: SC-100: Design a Zero Trust strategy and architecture [ARCHIVED]
- learn.microsoft.com: Azure network security overview
- learn.microsoft.com: Conditional Access templates
-- learn.microsoft.com: Conditional Access architecture and personas
+- learn.microsoft.com: Conditional Access architecture and personas
Azure Microsoft Defender for Cloud
- github.com/Azure/Microsoft-Defender-for-Cloud Network Security Dashboard for Microsoft Defender for Cloud
-- techcommunity.microsoft.com: Microsoft Announces General Availability of Defender for APIs
-- techcommunity.microsoft.com: What’s new in Defender: How Copilot for Security can transform your SOC
+- techcommunity.microsoft.com: Microsoft Announces General Availability of Defender for APIs
+- techcommunity.microsoft.com: What’s new in Defender: How Copilot for Security can transform your SOC
Microsoft Sentinel
-- techcommunity.microsoft.com: Monitoring Microsoft Sentinel Reports with Dashboard Hub & Power BI
+- techcommunity.microsoft.com: Monitoring Microsoft Sentinel Reports with Dashboard Hub & Power BI
Microsoft Copilot for Azure
-- build5nines.com: Introducing Microsoft Copilot for Azure
+- build5nines.com: Introducing Microsoft Copilot for Azure
Azure Virtual WAN. vWAN
-- Azure Virtual WAN introduces its first SaaS offering
+- Azure Virtual WAN introduces its first SaaS offering
Azure Fleet
@@ -9589,49 +9589,49 @@
-- mssqltips.com: Choosing Between SQL Server Integration Services and Azure Data Factory
-- techcommunity.microsoft.com: Azure Data Factory: How to split a file into multiple output files with Bicep
+- mssqltips.com: Choosing Between SQL Server Integration Services and Azure Data Factory
+- techcommunity.microsoft.com: Azure Data Factory: How to split a file into multiple output files with Bicep
WinGet Windows Package Manager CLI
-- WinGet: Welcome to the Windows Package Manager Client (aka winget.exe) repository Windows Package Manager CLI (aka winget)
-- muycomputer.com: WinGet 1.0, ya está aquí el administrador de paquetes para Windows
-- thomasmaurer.ch: Getting started with Windows Package Manager WinGet
+- WinGet: Welcome to the Windows Package Manager Client (aka winget.exe) repository Windows Package Manager CLI (aka winget)
+- muycomputer.com: WinGet 1.0, ya está aquí el administrador de paquetes para Windows
+- thomasmaurer.ch: Getting started with Windows Package Manager WinGet
Windows 11
-- thenewstack.io: This Week in Programming: Windows Opens Up to Android Developers
+- thenewstack.io: This Week in Programming: Windows Opens Up to Android Developers
Azure API Management
-- azure.microsoft.com: Azure API Management
-- jmfloreszazo.com: Monetizar un API, con Azure API Management
+- azure.microsoft.com: Azure API Management
+- jmfloreszazo.com: Monetizar un API, con Azure API Management
- github.com/Azure-Samples/api-management-workspaces-migration: Azure API Management workspaces migration tool Tooling to ease migration of Azure API Management service-level resources to workspaces.
Azure Container Apps
-- Azure Container Apps Build and deploy modern apps and microservices using serverless containers
-- techcommunity.microsoft.com: Introducing Azure Container Apps: a serverless container service for running modern apps at scale
-- techcommunity.microsoft.com: Azure Policy for Azure Container Apps? Yes, please
+- Azure Container Apps Build and deploy modern apps and microservices using serverless containers
+- techcommunity.microsoft.com: Introducing Azure Container Apps: a serverless container service for running modern apps at scale
+- techcommunity.microsoft.com: Azure Policy for Azure Container Apps? Yes, please
- denniszielke.medium.com: Using Azure Container Apps at scale instead of your building your own NaaS on top of K8s?
Azure Container Instances
-- azure.microsoft.com: Azure Container Instances Launch containers with hypervisor isolation
-- unit42.paloaltonetworks.com: Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances
-- nedinthecloud.com: Using azure container instances for an azure dev ops self hosted agent
+- azure.microsoft.com: Azure Container Instances Launch containers with hypervisor isolation
+- unit42.paloaltonetworks.com: Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances
+- nedinthecloud.com: Using azure container instances for an azure dev ops self hosted agent
Azure Container Storage
-- techcommunity.microsoft.com: Azure Container Storage in Public Preview
+- techcommunity.microsoft.com: Azure Container Storage in Public Preview
Windows Server Container Host
-- thomasmaurer.ch: How to Install a Windows Server Container Host
+- thomasmaurer.ch: How to Install a Windows Server Container Host
Disaster Recovery
-- docs.microsoft.com: Using Policy with Azure Site Recovery Disaster Recovery with Azure Policy. Learn how to enable Policy Support to protect your VMs using Azure Site Recovery.
+- docs.microsoft.com: Using Policy with Azure Site Recovery Disaster Recovery with Azure Policy. Learn how to enable Policy Support to protect your VMs using Azure Site Recovery.
Azure Samples (Boilerplates)
@@ -9644,27 +9644,27 @@
- github.com/azure-devops
-- Azure Quickstart Templates 🌟 Deploy Azure resources through the Azure Resource Manager with community contributed templates to get more done. Deploy, learn, fork and contribute back.
+- Azure Quickstart Templates 🌟 Deploy Azure resources through the Azure Resource Manager with community contributed templates to get more done. Deploy, learn, fork and contribute back.
-- microsoft/azure-pipelines-yaml: Azure Pipelines YAML 🌟 YAML templates, samples, and community interaction for designing Azure Pipelines.
+- microsoft/azure-pipelines-yaml: Azure Pipelines YAML 🌟 YAML templates, samples, and community interaction for designing Azure Pipelines.
Azure Healthcare Data Services
-- Microsoft - DICOM Service
+- Microsoft - DICOM Service
- github.com/microsoft/dicom-server OSS Implementation of DICOMweb standard
- github.com/microsoft/fhir-server A service that implements the FHIR standard
-- Project InnerEye – Democratizing Medical Imaging AI
+- Project InnerEye – Democratizing Medical Imaging AI
- github.com/microsoft/InnerEye-Gateway The InnerEye-Gateway is a Windows service that acts as a DICOM end point to run inference on https://github.com/microsoft/InnerEye-DeepLearning models.
-- microsoft.com: Biomedical Research Platform Terra Now Available on Microsoft Azure
+- microsoft.com: Biomedical Research Platform Terra Now Available on Microsoft Azure
Office 365
@@ -9672,17 +9672,17 @@
Azure Books
-- azure.microsoft.com: Azure for Architects, Third Edition
+- azure.microsoft.com: Azure for Architects, Third Edition
- dev.to/javinpaul: 7 Free Courses to Learn Microsoft Azure Cloud Platform
- github.com/PacktPublishing/The-Azure-Cloud-Native-Architecture-Mapbook
Azure OpenAI
-- infoworld.com: Getting started with Azure OpenAI Microsoft’s Azure-hosted OpenAI language models are now generally available, and it’s surprisingly simple to use them in your code.
-- jamiemaguire.net: First Look: Azure Open AI Studio, Prompt Engineering. What You Can Do and How
-- techcommunity.microsoft.com: The AI Study Guide: Azure’s top free resources for learning generative AI in 2024
+- infoworld.com: Getting started with Azure OpenAI Microsoft’s Azure-hosted OpenAI language models are now generally available, and it’s surprisingly simple to use them in your code.
+- jamiemaguire.net: First Look: Azure Open AI Studio, Prompt Engineering. What You Can Do and How
+- techcommunity.microsoft.com: The AI Study Guide: Azure’s top free resources for learning generative AI in 2024
- hashicorp.com: Build secure AI applications on Azure with HashiCorp Terraform and Vault
-- techcommunity.microsoft.com: Azure OpenAI Landing Zone reference architecture
+- techcommunity.microsoft.com: Azure OpenAI Landing Zone reference architecture
Windows Tools
@@ -9706,7 +9706,7 @@
Click to expand!
-
+
Videos
@@ -9728,7 +9728,7 @@
-- Private Link Reality Bites: Service Endpoints vs Private Link - (Related to kubernetes-networking topic)
+- Private Link Reality Bites: Service Endpoints vs Private Link - (Related to kubernetes-networking topic)
diff --git a/caching.html b/caching.html
index 05268971..9487ec15 100644
--- a/caching.html
+++ b/caching.html
@@ -7819,14 +7819,14 @@
- Wikipedia: Web cache
- Wikipedia: Dynamic site acceleration
- Slideshare: Caching
-- nixCraft: 9 Awesome Open Source Web Performance Software For Linux and Unix-like Systems
+- nixCraft: 9 Awesome Open Source Web Performance Software For Linux and Unix-like Systems
- Dzone: An Introduction to Caching: How and Why We Do It 🌟 When it comes to caching, what was once a nice-to-have it now a must-have. Check out this detailed article to learn everything you need to know about caching!
- medium: Caching — System Design Concept 🌟
- medium: Microservices Distributed Caching In this article, we are going to talk about Microservices Distributed Caching for Microservices Architectures. As you know that we learned practices and patterns and add them into our design toolbox. And we will use these pattern and practices when designing e-commerce microservice architecture.
- kothiyal-anuj.medium.com: Serverless Diary: The Ultimate Guide to Caching in the Cloud | Anuj Kothiyal
- medium.com/rtkal: Distributed Cache Design
- learncsdesign.medium.com: An Overview of Distributed Caching 🌟 [ARCHIVED]
-- surfingcomplexity.blog: Cache invalidation really is one of the hardest problems in computer science
+- surfingcomplexity.blog: Cache invalidation really is one of the hardest problems in computer science
Java Caching
@@ -7841,8 +7841,8 @@
- In 2011, Red Hat began producing a commercial version of Infinispan, dubbed JBoss Enterprise Data Grid.
- Red Hat Data Grid Overview
- Red Hat Data Grid
-- Red Hat JBoss Data Grid is Not Just for Caching Java Objects Anymore 🌟
-- developers.redhat.com: Red Hat Data Grid 8.0 brings new server architecture, improved REST API, and more
+- Red Hat JBoss Data Grid is Not Just for Caching Java Objects Anymore 🌟
+- developers.redhat.com: Red Hat Data Grid 8.0 brings new server architecture, improved REST API, and more
CDN Content Delivery Network
@@ -7850,9 +7850,9 @@
- Traditional commercial CDNs 🌟
-- How content delivery networks (CDNs) work
-- imperva.com: CDN Caching
-- nczonline: How content delivery networks (CDNs) work - Nov 2011
+- How content delivery networks (CDNs) work
+- imperva.com: CDN Caching
+- nczonline: How content delivery networks (CDNs) work - Nov 2011
HAProxy
@@ -7862,20 +7862,20 @@
- slideshare: Haproxy best practice
- slideshare: How To Set Up SQL Load Balancing with HAProxy
- slideshare: Performance Tuning of HAProxy for Database Load Balancing
-- haproxy.com: The HAProxy Enterprise WAF 🌟
+- haproxy.com: The HAProxy Enterprise WAF 🌟
Varnish
-- Varnish Cache
+- Varnish Cache
- varnish-software.com Varnish Software is the company behind Varnish Cache, the open source HTTP accelerator.
- The Varnish Book Download the Varnish Book to learn how you can optimize your Varnish instance.
-- fedoramagazine.org: Varnish: Your site faster and more stable
-- Red Hat Developer Blog. Tag: Varnish
-- Red Hat Enterprise Linux Blog. Tag: Varnish
-- varnish-cache.org: Installation on RedHat
-- Hitch - scalable TLS proxy. Hitch is a libev-based high performance SSL/TLS proxy by Varnish Software
+- fedoramagazine.org: Varnish: Your site faster and more stable
+- Red Hat Developer Blog. Tag: Varnish
+- Red Hat Enterprise Linux Blog. Tag: Varnish
+- varnish-cache.org: Installation on RedHat
+- Hitch - scalable TLS proxy. Hitch is a libev-based high performance SSL/TLS proxy by Varnish Software
- slideshare: Varnish - Tips & Tricks - 4Developers 2015
- digitalocean.com: How To Speed Up Static Web Pages with Varnish Cache Server on Ubuntu 20.04
- github.com/IBM/varnish-operator Run and manage Varnish clusters on Kubernetes. Varnish operator manages Varnish clusters using a CustomResourceDefinition that defines a new Kind called VarnishCluster. The operator manages the whole lifecycle of the cluster: creating, deleting and keeping the cluster configuration up to date
@@ -7891,14 +7891,14 @@
- redis.io
- Slideshare: Introduction to Redis
- medium: Scaling Millions of Geospatial Queries per minute using Redis
-- architecturenotes.co: Redis Explained 🌟🌟 A deep technical dive into all things Redis. Covering various Redis topologies, data persistence and process forking.
+- architecturenotes.co: Redis Explained 🌟🌟 A deep technical dive into all things Redis. Covering various Redis topologies, data persistence and process forking.
- faun.pub: Redis High availability with Sentinel on Kubernetes(K8s) In this tutorial, you will learn how to deploy Redis with Sentinel in Kubernetes. You will also test the availability of the setup by simulating a master failure.
- medium.com/lightricks-tech-blog: Step by Step Guide: How to create a Dynamic Service Endpoint via K8S API This article explains how to deploy Redis HA in Kubernetes and create a Service that always points to the master Redis. It also demonstrates how to interact with Kubernetes API from inside a pod using a script to update the endpoint dynamically.
Nginx High-performance caching
- Nginxconf 2014. When Dynamic Becomes Static:The Next Step in Web Caching Techniques: Wim Godden
-- Nginx: a caching, thumbnailing, reverse proxying image server? 🌟
+- Nginx: a caching, thumbnailing, reverse proxying image server? 🌟
- highscalability.com: Building nginx and Tarantool based services 🌟
Tau Git-Native CDN PaaS
diff --git a/chaos-engineering.html b/chaos-engineering.html
index d56a1f4e..fc964842 100644
--- a/chaos-engineering.html
+++ b/chaos-engineering.html
@@ -7716,12 +7716,12 @@
Awesome Chaos Engineering 🌟 - A curated list of Chaos Engineering resources, covering principles, culture, books, tools, papers, and community events.
-
-
+
-- thenewstack.io: Why Chaos Engineering Isn’t Just for Operations
+- thenewstack.io: Why Chaos Engineering Isn’t Just for Operations
- medium.com/adidoescode: Chaos Engineering: How simulating adversity can help build eCommerce Resilience
-- opsmx.com: What is Chaos Engineering?
-- aws.amazon.com: Verify the resilience of your workloads using Chaos Engineering
+- opsmx.com: What is Chaos Engineering?
+- aws.amazon.com: Verify the resilience of your workloads using Chaos Engineering
- faun.pub: What is Chaos Engineering? Chaos Engineering is the discipline of experimenting on a system in order to build confidence in the system’s capability to withstand turbulent conditions in production.
Chaos Engineering for kubernetes/Openshift
@@ -7730,23 +7730,23 @@
Platform Democracy: Rethinking Who Builds and Consumes Your Internal Platform - (Related to devops topic)
-
-
+
- GitHub: kube-monkey An implementation of Netflix’s Chaos Monkey for Kubernetes clusters
- GitHub: monkey-ops, Openshift compliant, no cluster-admin required
-- Chaos Mesh
+- Chaos Mesh
- Litmus Chaos is a toolset to do chaos engineering in a kubernetes native way. Litmus provides chaos CRDs for Cloud-Native developers and SREs to inject, orchestrate and monitor chaos to find weaknesses in Kubernetes deployments
-- thenewstack.io: Using Chaos Engineering to Improve the Resilience of Stateful Applications on Kubernetes
-- infoq.com: Chaos Engineering on Kubernetes : Chaos Mesh Generally Available with v1.0
-- chaos-mesh.org: Chaos Mesh 1.0: Chaos Engineering on Kubernetes Made Easier
-- thenewstack.io: Develop a Daily Reporting System for Chaos Mesh to Improve System Resilience
-- pingcap.com: chaos-mesh-action: Integrate Chaos Engineering into Your CI
-- openshift.com: Introduction to Kraken, a Chaos Tool for OpenShift/Kubernetes
-- thenewstack.io: Chaos Engineering Progressively Moves to Production
-- blog.flant.com: Open Source solutions for chaos engineering in Kubernetes
+- thenewstack.io: Using Chaos Engineering to Improve the Resilience of Stateful Applications on Kubernetes
+- infoq.com: Chaos Engineering on Kubernetes : Chaos Mesh Generally Available with v1.0
+- chaos-mesh.org: Chaos Mesh 1.0: Chaos Engineering on Kubernetes Made Easier
+- thenewstack.io: Develop a Daily Reporting System for Chaos Mesh to Improve System Resilience
+- pingcap.com: chaos-mesh-action: Integrate Chaos Engineering into Your CI
+- openshift.com: Introduction to Kraken, a Chaos Tool for OpenShift/Kubernetes
+- thenewstack.io: Chaos Engineering Progressively Moves to Production
+- blog.flant.com: Open Source solutions for chaos engineering in Kubernetes
- kube-monkey
- chaoskube
- Chaos Mesh
@@ -7756,19 +7756,19 @@
- PowerfulSeal injects failure into your Kubernetes clusters, so that you can detect problems as early as possible. It allows for writing scenarios describing complete chaos experiments.
-- BuggyApp: Simulate performance problems BuggyApp can simulate various performance problems like Memory Leak, OutOfMemoryError, CPU spike, thread leak StackOverflowError, deadlock, unresponsiveness and so on. youtube: BuggyApp Demo
+- BuggyApp: Simulate performance problems BuggyApp can simulate various performance problems like Memory Leak, OutOfMemoryError, CPU spike, thread leak StackOverflowError, deadlock, unresponsiveness and so on. youtube: BuggyApp Demo
- medium.com: Getting Started with Chaos Engineering
-- Chaos Mesh 🌟 A Powerful Chaos Engineering Platform for Kubernetes - github ref
+- Chaos Mesh 🌟 A Powerful Chaos Engineering Platform for Kubernetes - github ref
- opensource.com: 5 lessons I learned about chaos engineering for Kubernetes
-- thenewstack.io: Chaos Engineering Made Simple
-- thenewstack.io: Use Chaos Engineering to Strengthen Your Incident Response
-- thenewstack.io: Operationalizing Chaos Engineering with GitOps
+- thenewstack.io: Chaos Engineering Made Simple
+- thenewstack.io: Use Chaos Engineering to Strengthen Your Incident Response
+- thenewstack.io: Operationalizing Chaos Engineering with GitOps
- medium.com/better-practices: Learn how your Kubernetes clusters respond to failure using Gremlin and Grafana Building resilient APIs with chaos engineering
-- Chaos engineering on Amazon EKS using AWS Fault Injection Simulator
-- aws.amazon.com: Chaos Engineering with LitmusChaos on Amazon EKS In this tutorial, you will create an Amazon EKS cluster, install LitmusChaos and deploy a demo application. Then, you will define chaos experiments to be run on it and observe the behaviour
+- Chaos engineering on Amazon EKS using AWS Fault Injection Simulator
+- aws.amazon.com: Chaos Engineering with LitmusChaos on Amazon EKS In this tutorial, you will create an Amazon EKS cluster, install LitmusChaos and deploy a demo application. Then, you will define chaos experiments to be run on it and observe the behaviour
- blog.container-solutions.com: Comparing Chaos Engineering Tools for Kubernetes Workloads How do Chaos Toolkit, Pumba, Litmus, and Chaos Mesh stack up against each other as chaos engineering tools for Kubernetes workloads? In this article, you will compare strengths and weaknesses.
-
-
blog.palark.com: Attaining harmony of chaos in Kubernetes with Chaos Mesh This article discusses chaos engineering solutions for Kubernetes using the Chaos Mesh operator. It covers tests on:
+blog.palark.com: Attaining harmony of chaos in Kubernetes with Chaos Mesh This article discusses chaos engineering solutions for Kubernetes using the Chaos Mesh operator. It covers tests on:
- Failing nodes
- Failing infrastructure dependencies
@@ -7782,18 +7782,18 @@
Chaos Engineering for serverless computing
-- thenewstack.io: Breaking Serverless on Purpose with Chaos Engineering
+- thenewstack.io: Breaking Serverless on Purpose with Chaos Engineering
Other Chaos Engineering Tools
- chaosblade An easy to use and powerful chaos engineering experiment toolkit. ChaosBlade is an Alibaba open source experimental injection tool that follows the principles of chaos engineering and chaos experimental models to help enterprises improve the fault tolerance of distributed systems and ensure business continuity during the process of enterprises going to cloud or moving to cloud native systems.
-- Azure Chaos Studio
-- techcommunity.microsoft.com: Announcing the Public Preview of Azure Chaos Studio
-- docs.microsoft.com: What is Azure Chaos Studio?
+- Azure Chaos Studio
-- aws.amazon.com: Automating and Scaling Chaos Engineering using AWS Fault Injection Simulator
+- aws.amazon.com: Automating and Scaling Chaos Engineering using AWS Fault Injection Simulator
Videos
diff --git a/chatgpt.html b/chatgpt.html
index 84267c04..fd11107f 100644
--- a/chatgpt.html
+++ b/chatgpt.html
@@ -7769,16 +7769,16 @@
Introduction
- medium.com/@andretost_75145: Using ChatGPT to learn Kubernetes and OpenShift
-- ansible.com: Ansible and ChatGPT: Putting it to the test You know we had to road test the hottest trend in #generativeAI! In this blog, we put ChatGPT to the test of developing Ansible Playbooks. We also explore Project Wisdom, an Ansible AI capability that is currently in development.
+- ansible.com: Ansible and ChatGPT: Putting it to the test You know we had to road test the hottest trend in #generativeAI! In this blog, we put ChatGPT to the test of developing Ansible Playbooks. We also explore Project Wisdom, an Ansible AI capability that is currently in development.
- betterprogramming.pub: ChatGPT and Software Architecture Let’s generate diagrams
- genbeta.com: En la era de la inteligencia artificial, Microsoft es el nuevo Google
- abcabhishek.substack.com: ChatGPT for generating SQL as a Data Engineer’s assistant Lets generate SQL using chatGPT and simplify our work
-- businessinsider.es: Uso ChatGPT entre 50 y 70 veces al día para todo, desde preparar reuniones hasta quitarme el pegamento de los dedos
-- thenewstack.io: Using ChatGPT for Questions Specific to Your Company Data ChatGPT is a powerful language model that can be used for a variety of tasks. But did you know you can use custom data to improve its accuracy and speed?
-- techrepublic.com: ChatGPT Cheat Sheet: Complete Guide for 2023
-- businessinsider.mx: 5 trucos de ChatGPT que pueden ayudar a reducir tu carga laboral
+- businessinsider.es: Uso ChatGPT entre 50 y 70 veces al día para todo, desde preparar reuniones hasta quitarme el pegamento de los dedos
+- thenewstack.io: Using ChatGPT for Questions Specific to Your Company Data ChatGPT is a powerful language model that can be used for a variety of tasks. But did you know you can use custom data to improve its accuracy and speed?
+- techrepublic.com: ChatGPT Cheat Sheet: Complete Guide for 2023
+- businessinsider.mx: 5 trucos de ChatGPT que pueden ayudar a reducir tu carga laboral
- christianmartinezfinancialfox.medium.com: How to use ChatGPT to improve your Microsft Excel skills?
-- thenewstack.io: Developers Put AI Bots to the Test of Writing Code With so many AI-powered assistants waiting to be explored, we’ve now entered the phase where excited coders are trying their own homegrown experiments — and sharing the results online.
+- thenewstack.io: Developers Put AI Bots to the Test of Writing Code With so many AI-powered assistants waiting to be explored, we’ve now entered the phase where excited coders are trying their own homegrown experiments — and sharing the results online.
- aihr.com: 21+ ChatGPT Prompts for HR To Accelerate Your Productivity
TableauGPT
@@ -7795,7 +7795,7 @@
Explained by ChatGPT
-- Discussion: Where is AI Still Completely Useless? - (Related to ai topic)
+- Discussion: Where is AI Still Completely Useless? - (Related to ai topic)
DevOps Compliance
@@ -7821,23 +7821,23 @@
Tools
-- Tech companies cutting devs for AI - (Related to ai topic)
-- Cerebras AI - (Related to ai topic)
+- Tech companies cutting devs for AI - (Related to ai topic)
+- Cerebras AI - (Related to ai topic)
- Awesome NotebookLM Slide Prompts - (Related to ai topic)
- LLMs-from-scratch - (Related to ai topic)
-- Claude 101: Free Guides to Master Claude - (Related to ai topic)
-- Think Python - (Related to python topic)
-- Microsoft Dragon Copilot: Unified Voice AI Assistant for Healthcare - (Related to ai topic)
+- Claude 101: Free Guides to Master Claude - (Related to ai topic)
+- Think Python - (Related to python topic)
+- Microsoft Dragon Copilot: Unified Voice AI Assistant for Healthcare - (Related to ai topic)
- Google Launches Gemini Code Assist, Challenging GitHub Copilot with Generous Free Tier - (Related to ai topic)
-
-
GitHub Copilot Now Explains Failed Actions Jobs (GA) - (Related to cicd topic)
+GitHub Copilot Now Explains Failed Actions Jobs (GA) - (Related to cicd topic)
-
-
github.com/robusta-dev/kubernetes-chatgpt-bot A ChatGPT bot for Kubernetes issues. Ask the AI how to solve your Prometheus alerts, get pithy responses.
+github.com/robusta-dev/kubernetes-chatgpt-bot A ChatGPT bot for Kubernetes issues. Ask the AI how to solve your Prometheus alerts, get pithy responses.
- itnext.io: K8sGPT + LocalAI: Unlock Kubernetes superpowers for free!
-- numerous.ai Prompt ChatGPT in bulk, in your spreadsheets. Use AI for writing content, product descriptions, SEO keywords, and more in bulk.
-- chat.openai.com/g/g-6eSNNNvsB-kubernetes-terraformer: Kubernetes Terraformer Converts Kubernetes YAML to Terraform HCL, extracting key variables. By Mark Tinderholt
+- numerous.ai Prompt ChatGPT in bulk, in your spreadsheets. Use AI for writing content, product descriptions, SEO keywords, and more in bulk.
+- chat.openai.com/g/g-6eSNNNvsB-kubernetes-terraformer: Kubernetes Terraformer Converts Kubernetes YAML to Terraform HCL, extracting key variables. By Mark Tinderholt
diff --git a/cheatsheets.html b/cheatsheets.html
index 3a46b3f4..94968963 100644
--- a/cheatsheets.html
+++ b/cheatsheets.html
@@ -8448,19 +8448,19 @@
Miscellaneous
-- wizardzines.com 🌟 programming zines by Julia Evans
-- cheatography.com
+- wizardzines.com 🌟 programming zines by Julia Evans
+- cheatography.com
- LeCoupa/awesome-cheatsheets
- detailyang/awesome-cheatsheet
- Red Hat Developer cheat sheets 🌟 Browse through our collection of cheat sheets to help you develop with Red Hat products, which you can download for free as a Red Hat Developer member. You’ll find handy guides on a range of the latest developer tools and technologies, including Kubernetes, microservices, containers, and more.
-- blog.jromanmartin.io: ActiveMQ, Kafka, Strimzi and CodeReady Containers
-- cheat-sheets.org 🌟
-- simplecheatsheet.com
+- blog.jromanmartin.io: ActiveMQ, Kafka, Strimzi and CodeReady Containers
+- cheat-sheets.org 🌟
+- simplecheatsheet.com
- medium: The DevOps Cheat Sheet This comprehensive guide covers everything DevOps
-- ABZ-Aaron/CheatSheets
+- ABZ-Aaron/CheatSheets
- developers.redhat.com: Intermediate Linux Cheat Sheet
- developers.redhat.com: MicroProfile Rest Client Cheat Sheet
-- cheat.sh 🌟
+- cheat.sh 🌟
- betterprogramming.pub: Cheat.sh — The Ultimate Multi-Language Cheat Sheet Introducing cheat.sh, a powerful syntax and code-snippet search engine.
@@ -8476,8 +8476,8 @@
Google Search
- wikipedia: Google Search
-- seranking.com: The cheat sheet of 30+ Google Search operators
-- supple.com.au: Google advanced search operators tips and tricks
+- seranking.com: The cheat sheet of 30+ Google Search operators
+- supple.com.au: Google advanced search operators tips and tricks
- blog.linkody.com: The Ultimate Google Search Operators Cheatsheet 🌟
Bash Shell
@@ -8489,29 +8489,29 @@
AWS Cheat Sheets
-- intellipaat.com: AWS Cheat Sheet 🌟
-- tutorialsdojo.com: AWS Cheat Sheets 🌟
-- igoroseledko.com: AWS CLI Cheat Sheet
+- intellipaat.com: AWS Cheat Sheet 🌟
+- tutorialsdojo.com: AWS Cheat Sheets 🌟
+- igoroseledko.com: AWS CLI Cheat Sheet
- docs.aws.amazon.com: Actions, resources, and condition keys for AWS services 🌟🌟🌟 There’s a Reference for all 𝗜𝗔𝗠 𝗔𝗰𝘁𝗶𝗼𝗻𝘀, 𝗿𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀, 𝗮𝗻𝗱 𝗰𝗼𝗻𝗱𝗶𝘁𝗶𝗼𝗻 𝗸𝗲𝘆𝘀 𝗳𝗼𝗿 𝗮𝗹𝗹 𝗔𝗪𝗦 𝘀𝗲𝗿𝘃𝗶𝗰𝗲𝘀 🔐 Bookmark it! 🔖
-- awsgeek.com/Amazon-S3
+- awsgeek.com/Amazon-S3
Google Cloud Cheat Sheets
- The Google Cloud Developer’s Cheat Sheet 🌟
-- googlecloudcheatsheet.withgoogle.com: Google Cloud Developer cheat sheet
+- googlecloudcheatsheet.withgoogle.com: Google Cloud Developer cheat sheet
Azure Cheat Sheets
-- cloud-architect.fr: AZ-CheatSheet: Become an expert in Azure Landing Zones Azure landing zones are the output of a multisubscription Azure environment that accounts for scale, security governance, networking, and identity. Azure landing…
+- cloud-architect.fr: AZ-CheatSheet: Become an expert in Azure Landing Zones Azure landing zones are the output of a multisubscription Azure environment that accounts for scale, security governance, networking, and identity. Azure landing…
API Cheatsheets
-- freecodecamp.org: API Cheatsheet – What is an API, How it Works, and How to Choose the Right API Testing Tools 🌟
+- freecodecamp.org: API Cheatsheet – What is an API, How it Works, and How to Choose the Right API Testing Tools 🌟
REST API
-- karneliuk.com: REST API 1. Basics cheat sheet (Ansible, Bash, Postman, and Python) for GET using NetBox and Docker as examples
-- karneliuk.com: REST API 2. Basics cheat sheet (Ansible, Bash, Postman, and Python) for POST/DELETE using NetBox and Docker as examples
+- karneliuk.com: REST API 1. Basics cheat sheet (Ansible, Bash, Postman, and Python) for GET using NetBox and Docker as examples
+- karneliuk.com: REST API 2. Basics cheat sheet (Ansible, Bash, Postman, and Python) for POST/DELETE using NetBox and Docker as examples
eBooks
@@ -8526,16 +8526,16 @@
Velocity (Windows, paid)
-- Velocity Velocity gives your Windows desktop offline access to over 150 API documentation sets
+- Velocity Velocity gives your Windows desktop offline access to over 150 API documentation sets
Zeal (Windows, Linux, Free)
-- Zeal Zeal is an offline documentation browser for software developers.
+- Zeal Zeal is an offline documentation browser for software developers.
Kubernetes Knowledge Hubs and Glossary
-- k8sref.io Kubernetes Reference - dev-k8sref-io.web.app 🌟 Imports paths are not always easy to find for a resource. Get some help from this doc.
-- Kubernetes Research. Research documents on node instance types, managed services, ingress controllers, CNIs, etc. 🌟 A research hub to collect all knowledge around Kubernetes. Those are in-depth reports and comparisons designed to drive your decisions. Should you use GKE, AKS, EKS? How many nodes? What instance type?
+- k8sref.io Kubernetes Reference - dev-k8sref-io.web.app 🌟 Imports paths are not always easy to find for a resource. Get some help from this doc.
+- Kubernetes Research. Research documents on node instance types, managed services, ingress controllers, CNIs, etc. 🌟 A research hub to collect all knowledge around Kubernetes. Those are in-depth reports and comparisons designed to drive your decisions. Should you use GKE, AKS, EKS? How many nodes? What instance type?
- Kubernetes Glossary 🌟
- mirantis.com: Kubernetes Cheat Sheet
- manifests.io 🌟
@@ -8549,41 +8549,41 @@
QuickRef.ME - Quick Reference Cheat Sheets 🌟 - QuickRef.ME is a curated collection of quick reference cheat sheets for various programming languages, tools, and technologies, including Kubernetes, Docker, Python, JavaScript, and more. It serves as a centralized repository for developers and engineers to quickly access essential commands, syntax, and configurations.
-
-
+
-- kubernetes.io 🌟
-- linuxacademy
+- kubernetes.io 🌟
+- linuxacademy
- fabric8 - kubectl
-- intellipaat.com 🌟
+- intellipaat.com 🌟
- dzone: kubectl commands cheat sheet
-- jimmysong.io: kubectl cheat sheet 🌟
+- jimmysong.io: kubectl cheat sheet 🌟
- cheatsheet.dennyzhang.com: kubectl kubernetes free cheat sheet 🌟
- opensource.com: 9 kubectl commands sysadmins need to know 🌟 Keep these 9 critical kubectl commands handy to help you with troubleshooting and managing your Kubernetes cluster administration.
- bluematador.com: kubectl cheatsheet
- dockerlabs.collabnix.com: Cheatsheet - Kubectl 🌟
- medium: Awesome Kubernetes Command-Line Hacks Tips for you to kubectl like a pro
-- akhilsharma.work: kubectl Get Resource - Short Names
-- blog.mimacom.com: Kubernetes Cheat Sheet
-- github: K8s in 30 mins 🌟 This is not a comprehensive guide to learn Kubernetes from scratch, rather this is just a small guide/cheat sheet to quickly setup and run applications with Kubernetes and deploy a very simple application on single workload VM. This repo can be served as quick learning manual to understand Kubernetes.
+- akhilsharma.work: kubectl Get Resource - Short Names
+- blog.mimacom.com: Kubernetes Cheat Sheet
+- github: K8s in 30 mins 🌟 This is not a comprehensive guide to learn Kubernetes from scratch, rather this is just a small guide/cheat sheet to quickly setup and run applications with Kubernetes and deploy a very simple application on single workload VM. This repo can be served as quick learning manual to understand Kubernetes.
- kunchalavikram1427: kubernetes Public
- betterprogramming.pub: Awesome Kubernetes Command-Line Hacks Tips for you to kubectl like a pro
-- thechief.io: The Definitive Kubectl Cheat Sheet
+- thechief.io: The Definitive Kubectl Cheat Sheet
- ithands-on.com: Kubernetes 101 : kubectl - communication with pods and containers / running commands inside pods and containers
- opensource.com: Learn essential Kubernetes commands with a new cheat sheet Start exploring kubectl, containers, pods, and more, then download our free cheat sheet so you always have the key commands at your fingertips.
-- computingforgeeks.com: Kubectl Cheat Sheet for Kubernetes Admins & CKA Exam Prep
+- computingforgeeks.com: Kubectl Cheat Sheet for Kubernetes Admins & CKA Exam Prep
- mirantis.com: Kubernetes Cheat Sheet
-- myfuturehub.com: Must Keep these Kubernetes Commands handy
+- myfuturehub.com: Must Keep these Kubernetes Commands handy
--tail=-1 lets you output all logs when you use a label selector:
kubectl logs -n etcd -l app=etcd -c etcd --tail=-1kubectl logs -l app=my.app --tail=-1
- cmcrowell.com/cheat-sheet 🌟
-- mirantis.com: Kubernetes Cheat Sheet 🌟
-- komodor.com: The Ultimate Kubectl Cheat Sheet 🌟
+- cmcrowell.com/cheat-sheet 🌟
+- mirantis.com: Kubernetes Cheat Sheet 🌟
+- komodor.com: The Ultimate Kubectl Cheat Sheet 🌟
- Top kubernetes troubleshooting Commands:
kubectl get pods -o widekubectl logs <pod>- faun.pub: Kubernetes Commands for Deployment and Management
- learncloudnative.com: Kubernetes CLI (kubectl) tips you didn’t know about
- cloudtechtwitter.com: kubernetes common commands
-- thenewstack.io: K8s Resource Management: An Autoscaling Cheat Sheet 🌟 A concise but comprehensive guide to using and managing horizontal and vertical autoscaling in the Kubernetes environment.
+- thenewstack.io: K8s Resource Management: An Autoscaling Cheat Sheet 🌟 A concise but comprehensive guide to using and managing horizontal and vertical autoscaling in the Kubernetes environment.
- abhirajdevops.hashnode.dev: A Cheat Sheet of Essential Commands for Managing and Debugging Your Kubernetes Cluster’s Networking
-- github.com/devoriales/kubectl-cheatsheet This repository contains a kubectl cheatsheet to use as a quick reference guide. It contains the most common commands used when working with Kubernetes.
+- github.com/devoriales/kubectl-cheatsheet This repository contains a kubectl cheatsheet to use as a quick reference guide. It contains the most common commands used when working with Kubernetes.
- dev.to/msfaizi: Kubernetes Cheatsheet: Essential Commands and Concepts for Efficient Container Orchestration
Kubernetes Kustomize Cheat Sheet
@@ -8612,13 +8612,13 @@
- dockerlux.github.io: Docker Cheat Sheet 🌟
- cheatsheetseries.owasp.org: Docker Security Cheat Sheet 🌟🌟
-- dockerlabs.collabnix.com: The Ultimate Docker Cheat Sheet 🌟
-- developers.redhat.com: Containers Cheat Sheet
+- dockerlabs.collabnix.com: The Ultimate Docker Cheat Sheet 🌟
+- developers.redhat.com: Containers Cheat Sheet
- github.com: Docker cheat Sheet
- intellipaat.com: Docker Cheat Sheet 🌟 - 2019, pdf
- developers.redhat.com: Containers Cheat Sheet
-- blog.gitguardian.com: Docker Security Best Practices & Cheat Sheet 🌟 Containers are no security devices. That’s why we’ve curated a set of easily actionable recommendations to improve your Docker containers security. Check out the one-page cheat sheet.
-- myfuturehub.com: Useful commands of Docker
+- blog.gitguardian.com: Docker Security Best Practices & Cheat Sheet 🌟 Containers are no security devices. That’s why we’ve curated a set of easily actionable recommendations to improve your Docker containers security. Check out the one-page cheat sheet.
+- myfuturehub.com: Useful commands of Docker
docker system prune --alldocker image prune -a -f --filter "until=720h"docker container prune -f --filter "until=48h"59 * * * * docker volume prune -f
-- linuxhandbook.com: Docker Commands for Managing Container Lifecycle (Definitive Guide)
+- linuxhandbook.com: Docker Commands for Managing Container Lifecycle (Definitive Guide)
- betterprogramming.pub: A Beginners’ Cheat Sheet for Docker | Arjav Dave Get to know what is docker and how to use it
- dev.to: Docker Commands Cheat Sheet | Pragyan Tripathi The 15 Commands You Need To Know
@@ -8639,8 +8639,8 @@
- docker-swarm-cheatsheet-sematext.pdf
-- lzone.de: Docker Swarm Cheat Sheet
-- kerneltalks.com: Docker swarm cheat sheet
+- lzone.de: Docker Swarm Cheat Sheet
+- kerneltalks.com: Docker swarm cheat sheet
- codingfriend.medium.com: Docker Swarm Cheatsheet (2017)
- blog.programster.org: Docker Swarm Cheatsheet
@@ -8650,41 +8650,41 @@
Git and GitHub Cheat Sheets
-- guides.github.com 🌟
+- guides.github.com 🌟
- dev.to: Git & Github Cheatsheet 🌟
- git-scm.com: Git reference
- zeroturnaround.com: Git cheat sheet 🌟
- ndpsoftware.com: Interactive git cheat sheet 🌟
-- The awesome git cheat sheet
-- developers.redhat.com: Git cheat sheet
+- The awesome git cheat sheet
+- developers.redhat.com: Git cheat sheet
- atlassian.com: Git cheat sheet
-- github.github.com/training-kit: Git cheat sheet
+- github.github.com/training-kit: Git cheat sheet
- education.github.com: Git cheat sheet 🌟
- dzone.com: refcard - getting started with git
-- git-tower.com: Git cheat sheet
+- git-tower.com: Git cheat sheet
- rogerdudler.github.io: git - the simple guide 🌟 Just a simple guide for getting started with git. no deep shit ;)
- towardsdatascience.com: 18 Git Commands I Learned During My First Year as a Software Developer
- dzone: Top 35 Git Commands With Examples 🌟 Git commands are essential, and they help to manage your source code effectively. In this guide, you will learn Git commands from Beginners to Advanced level.
-- gitexplorer.com: Git Command Explorer 🌟🌟 Find the right commands you need without digging through the web.
-- justingarrison.com: GitHub URL Hacks 🌟 GitHub’s UI has improved a lot over the years but sometimes you just need quick access without clicking. Here are a few GitHub URL tips to get you data you want faster. One cool thing is all of these tips give raw text output so they work great with curl and other CLI tools.
-- dev.to: Git it Right🔥🔥🚀(Git CheatSheet) 🌟
+- gitexplorer.com: Git Command Explorer 🌟🌟 Find the right commands you need without digging through the web.
+- justingarrison.com: GitHub URL Hacks 🌟 GitHub’s UI has improved a lot over the years but sometimes you just need quick access without clicking. Here are a few GitHub URL tips to get you data you want faster. One cool thing is all of these tips give raw text output so they work great with curl and other CLI tools.
+- dev.to: Git it Right🔥🔥🚀(Git CheatSheet) 🌟
- jan-krueger.net: Git cheat sheet, extended edition
- dev.to: A Git Cheat Sheet
-- geeksforgeeks.org: Essential Git Commands 🌟
+- geeksforgeeks.org: Essential Git Commands 🌟
- dev.to: Git Cheat Sheet- 20 commands I Use Everyday | Tabassum Khanum
- Find the first commit you ever made:
git log --reverse
- joshnh/Git-Commands 🌟 A list of commonly used Git commands
- dev.to: Git Commands Cheatsheet: Advanced (20+ Git Commands Advanced )
- dev.to: Git Cheat Sheet 📄 (50 commands + Free PDF and poster)
- enlear.academy: 20 Git Commands Every Developer Should Know 20 Git Command I Use All The Time — Git CheatSheet
-- freecodecamp.org: Git Cheat Sheet – 50 Git Commands You Should Know
+- freecodecamp.org: Git Cheat Sheet – 50 Git Commands You Should Know
- opensource.com: 10 Git tips we can’t live without Opensource.com community members share their favorite Git tips for saving time or preventing mistakes.
- Terminal tip: Always use
less -R to display colored terminal output properly: git diff --color=always | less -R
- betterprogramming.pub: 8 Advanced Git Commands Universities Won’t Teach You Advanced tips and tricks that will save you time and headaches.
-- intellipaat.com: GIT Cheat Sheet 🌟
+- intellipaat.com: GIT Cheat Sheet 🌟
- dev.to: 20 Git Commands That Will Make You a Version Control Pro
Git Flow Cheat Sheets
@@ -8698,34 +8698,34 @@
GitKraken Git Cheat
Ansible Cheat Sheets
-- Ansible Roles Explained | Cheat Sheet
-- edureka.co: Ansible Cheat Sheet – A DevOps Quick Start Guide
-- intellipaat.com: Ansible Basic Cheat Sheet
-- mrxpalmeiras: Ansible Cheat Sheet
-- google.com/site/mrxpalmeiras: Ansible Cheat Sheet 🌟
+- Ansible Roles Explained | Cheat Sheet
+- edureka.co: Ansible Cheat Sheet – A DevOps Quick Start Guide
+- intellipaat.com: Ansible Basic Cheat Sheet
+- mrxpalmeiras: Ansible Cheat Sheet
+- google.com/site/mrxpalmeiras: Ansible Cheat Sheet 🌟
- Ansible k8s cheat sheet 🌟 The Ansible k8s module enables you to manage Kubernetes objects with Ansible playbooks.
-- fosstechnix.com: Ansible ad hoc commands with Examples
+- fosstechnix.com: Ansible ad hoc commands with Examples
Packer and Terraform Cheat Sheets
- dzone: Terraform Cheat Sheet
-- terraform.io: Terraform Commands
+- terraform.io: Terraform Commands
- github.com/scraly: Terraform Cheat sheet
-- lzone.de: Terraform Cheat Sheet
+- lzone.de: Terraform Cheat Sheet
- thedevopsblog.co.uk: Terraform Cheat Sheet
-- acloudguru.com: The Ultimate Terraform Cheatsheet
+- acloudguru.com: The Ultimate Terraform Cheatsheet
- hashicorp.com: Using Template Files with HashiCorp Packer
-- searchitoperations.techtarget.com: Terraform cheat sheet: Notable commands, HCL and more Terraform has a lot going on. This cheat sheet rounds up the essentials, from configuration settings to the key commands for managing the Terraform directory.
-- techbeatly.com: Terraform Cheat Sheet
+- searchitoperations.techtarget.com: Terraform cheat sheet: Notable commands, HCL and more Terraform has a lot going on. This cheat sheet rounds up the essentials, from configuration settings to the key commands for managing the Terraform directory.
+- techbeatly.com: Terraform Cheat Sheet
- praveendandu24.medium.com: Mastering Terraform: Top 20 Essential Commands with Examples for Beginners
Linux Command Cheat Sheets
-- commandlinefu.com
+- commandlinefu.com
- opensource.com: 10 cheat sheets for Linux sysadmins
- curl cheat sheet for Linux and Unix users
- NetworkManager CLI cheatsheet
@@ -8733,33 +8733,33 @@
- opensource.com: Linux Parted cheat sheet
- opensource.com: GNU Screen cheat sheet
- catonmat.net: GNU Coreutils Cheat Sheet
-- cyberciti.biz: Linux ip Command Examples Deprecated Linux command and their replacement cheat sheet.
-- linuxhandbook.com: Yum Command Cheat Sheet
+- cyberciti.biz: Linux ip Command Examples Deprecated Linux command and their replacement cheat sheet.
+- linuxhandbook.com: Yum Command Cheat Sheet
- stationx.net: Hacking Tools Cheat Sheet
SSH Cheat Sheets
- ssh cheat sheet
-- lzone.de: ssh cheat sheet
+- lzone.de: ssh cheat sheet
- pentestmonkey.net: ssh cheat sheet
-- The SSH Commands Cheat Sheet for Linux SysAdmins / Users
+- The SSH Commands Cheat Sheet for Linux SysAdmins / Users
- opensource.com: Learn advanced SSH commands with this cheat sheet
Nmap Cheat Sheet
-- comparitech.com: Nmap Cheat Sheet Nmap Cheat Sheet plus Nmap + Nessus Cheat Sheet. We include all the commands in an easy to download and reference format. Downloadable JPEG or PDF files.
+- comparitech.com: Nmap Cheat Sheet Nmap Cheat Sheet plus Nmap + Nessus Cheat Sheet. We include all the commands in an easy to download and reference format. Downloadable JPEG or PDF files.
OpenShift Cheat Sheets
- mastertheboss.com: OpenShift Cheat Sheet
-- developers.redhat.com: Red Hat OpenShift Container Platform Cheat Sheet
+- developers.redhat.com: Red Hat OpenShift Container Platform Cheat Sheet
- github.com: Openshift cheat sheet 1
- gist.github.com: Openshift cheat sheet 2
- github.com: openshift cheat sheet 3
-- monodot.co.uk: openshift cheat sheet 4
-- openshift.tips
+- monodot.co.uk: openshift cheat sheet 4
+- openshift.tips
- dzone refcard: Getting Started With OpenShift 🌟
-- cookbook.openshift.org 🌟
+- cookbook.openshift.org 🌟
- cookbook.openshift.org: How do I import an image from an external image registry? 🌟
Debezium Cheat Sheets
@@ -8768,16 +8768,16 @@
Kubernetes Operator Cheat Sheets
-- developers.redhat.com: Writing a Kubernetes Operator in Java using Quarkus - Cheat Sheet 🌟
+- developers.redhat.com: Writing a Kubernetes Operator in Java using Quarkus - Cheat Sheet 🌟
Kubernetes POD Cheat Sheets
-- jimmysong.io/kubernetes-handbook/concepts/pod.html 🌟
+- jimmysong.io/kubernetes-handbook/concepts/pod.html 🌟
- https://dev.to/aurelievache: Understanding Kubernetes: part 1 – Pods
-- garba.org: Kubernetes Pod Life Cycle Cheat Sheet
+- garba.org: Kubernetes Pod Life Cycle Cheat Sheet
-
+
Buildah Cheat Sheets
@@ -8785,8 +8785,8 @@
Prometheus Cheat Sheets
-- iximiuz.com: Prometheus Cheat Sheet - How to Join Multiple Metrics (Vector Matching) 🌟
-- iximiuz.com: Prometheus Cheat Sheet - Moving Average, Max, Min, etc (Aggregation Over Time) Building anomaly detection with Prometheus requires the use of *_over_time function. But what do these functions do concretely?
+- iximiuz.com: Prometheus Cheat Sheet - How to Join Multiple Metrics (Vector Matching) 🌟
+- iximiuz.com: Prometheus Cheat Sheet - Moving Average, Max, Min, etc (Aggregation Over Time) Building anomaly detection with Prometheus requires the use of *_over_time function. But what do these functions do concretely?
Helm Cheat Sheets
@@ -8798,20 +8798,20 @@
- maven.apache.org: Maven Quick Reference Card
- jrebel.com/blog/maven-cheat-sheet
- medium 1
-- journaldev.com
-- cheatography.com
+- journaldev.com
+- cheatography.com
- javaguides.net
- bogotobogo.com
-- lzone.de/cheat-sheet/Maven
+- lzone.de/cheat-sheet/Maven
- gist.github.com/michaellihs (jenkins pipeline)
-- confluence.sakaiproject.org
+- confluence.sakaiproject.org
Gradle Cheat Sheets
-- polyglotdeveloper.com: Gradle Cheat Sheet
+- polyglotdeveloper.com: Gradle Cheat Sheet
- eta-lang.org: Gradle Cheat Sheet
-- mingliang.me: Gradle Cheat Sheet
-- rratliff.com: Gradle Cheat Sheet
+- mingliang.me: Gradle Cheat Sheet
+- rratliff.com: Gradle Cheat Sheet
- github.com/jahe: Gradle Cheat Sheet
- github.com/jiffle: Gradle Cheat Sheet
@@ -8821,24 +8821,24 @@
Jenkins Cheat Sheets
-- edureka.co: Jenkins Cheat Sheet 🌟
-- Jenkins Cheat Sheet
+- edureka.co: Jenkins Cheat Sheet 🌟
- medium: Jenkins Cheat Sheet
-- cheatography.com: Jenkins Cheat Sheet
-- intellipaat.com: Jenkins Cheat Sheet 🌟
+- cheatography.com: Jenkins Cheat Sheet
+- intellipaat.com: Jenkins Cheat Sheet 🌟
Bitbucket Pipelines
-- balajisblog.com: Cheatsheet for Bitbucket Pipelines
+- balajisblog.com: Cheatsheet for Bitbucket Pipelines
JMeter Cheat Sheets
- Dzone Refcard: Getting Started with Apache JMeter
- Groovy Templates Cheat Sheet for JMeter Need help with your Groovy templates? Check out this cheat sheet to help you get started with scripting in Apache JMeter.
-- JMeter Web Application Testing Cheatsheet
-- CheatSheet for JMeter __time Function Calls
+- JMeter Web Application Testing Cheatsheet
+- CheatSheet for JMeter __time Function Calls
- martkos-it.co.uk: JMeter Cheat Sheet This jmeter cheat sheet provides gentle reminders of the usage of jmeter gui/non-gui. It includes installation/execution, plugins, shortcut keys and functions and variables.
@@ -8847,21 +8847,21 @@
Quarkus Cheat Sheets
Markdown Cheat Sheets
-- markdownguide.org
-- Markdown Cheat Sheet 1
+- markdownguide.org
-- guides.github.com: Markdown Cheat Sheet 2
+- guides.github.com: Markdown Cheat Sheet 2
- Markdown Cheat Sheet 4
-- freecodecamp.org: Markdown Cheat Sheet – How to Write in Markdown with Examples
+- freecodecamp.org: Markdown Cheat Sheet – How to Write in Markdown with Examples
Kafka
-- codingharbour.com: kafkacat cheatsheet Kafkacat is a versatile tool for producing and consuming messages, as well as exploring the cluster and topic metadata. Download the 1-page cheatsheet to get the most out of this awesome CLI tool.
+- codingharbour.com: kafkacat cheatsheet Kafkacat is a versatile tool for producing and consuming messages, as well as exploring the cluster and topic metadata. Download the 1-page cheatsheet to get the most out of this awesome CLI tool.
- betterprogramming.pub: 15 Kafka CLI Commands For Everyday Programming Demonstrating the use of the most commonly used Kafka Command Line Interface Commands
Machine Learning
@@ -8880,9 +8880,9 @@
TypeScript
- React+TypeScript Cheatsheets
-- docs.microsoft.com: Build JavaScript applications using TypeScript
+- docs.microsoft.com: Build JavaScript applications using TypeScript
- levelup.gitconnected.com: NestJS: Microservices with gRPC, API Gateway, and Authentication — Part ½ Step-by-Step Guide: NestJS Applications with TypeScript, gRPC, API Gateway, Authentication, and Validation.
-- freecodecamp.org: How TypeScript Interfaces Work – Explained with Examples
+- freecodecamp.org: How TypeScript Interfaces Work – Explained with Examples
Jupyter
@@ -8890,20 +8890,20 @@
SQL
-- intellipaat.com: SQL Commands Cheat Sheet
-- sqltutorial.org: SQL Cheat Sheet
+- intellipaat.com: SQL Commands Cheat Sheet
+- sqltutorial.org: SQL Cheat Sheet
- Kanak Infosystems LLP. SQL Cheat Sheet
-- github.com/ABZ-Aaron: SQL Cheat Sheet 🌟
+- github.com/ABZ-Aaron: SQL Cheat Sheet 🌟
- github.com/enochtangg/quick-SQL-cheatsheet: Quick SQL Cheatsheet 🌟 A quick reminder of all SQL queries and examples on how to use them.
- hackr.io: SQL Commands Tutorial: DDL, DML, TCL and DQL Commands
- github.com/swapnakpanda: SQL_CheatSheet.png
-- TSQL and SQL Queries Cheat Sheet
+- TSQL and SQL Queries Cheat Sheet
- dev.to: Optimizing SQL Queries by 23x!!!
Postgres
-- postgrescheatsheet.com
-- datadoghq.com: PostgreSQL Cheatsheet Keep track of important resource and activity metrics from your PostgreSQL databases.
+- postgrescheatsheet.com
+- datadoghq.com: PostgreSQL Cheatsheet Keep track of important resource and activity metrics from your PostgreSQL databases.
MariaDB and mySQL
@@ -8911,12 +8911,12 @@
MongoDB
Python
- intellipaat.com: Python Cheat Sheet Basics This part of the Python tutorial offers you a cheat sheet on Python basics wherein you will learn about Python data types, operators, flow control method, functions, file operations, class, objects and more.
-- websitesetup.org: Python Cheat Sheet
+- websitesetup.org: Python Cheat Sheet
- https://blog.finxter.com/python-cheat-sheets
- https://www.pythoncheatsheet.org
- python.plainenglish.io: The Ultimate Python Cheat Sheet | Muhammad Umair
@@ -8926,7 +8926,7 @@
- devhints.io/go: Go cheatsheet
- github.com: golang-cheat-sheet
-- simplecheatsheet.com/tag/golang-cheat-sheet
+- simplecheatsheet.com/tag/golang-cheat-sheet
NodeJS
@@ -8939,17 +8939,17 @@
C++
Selenium
- dev.to: Selenium Cheat Sheet
-- lambdatest.com: The Ultimate Selenium Python Cheat Sheet for Test Automation
-- intellipaat.com: Selenium Cheat Sheet
+- lambdatest.com: The Ultimate Selenium Python Cheat Sheet for Test Automation
+- intellipaat.com: Selenium Cheat Sheet
RPA
Data Science
@@ -8959,14 +8959,14 @@
Scrum Cheat Sheet
Images
Click to expand!
-
+
diff --git a/chef.html b/chef.html
index 4f96ef15..bad60675 100644
--- a/chef.html
+++ b/chef.html
@@ -7612,8 +7612,8 @@
Chef
diff --git a/cicd-kubernetes-plugins.html b/cicd-kubernetes-plugins.html
index d1596ce3..55a37b68 100644
--- a/cicd-kubernetes-plugins.html
+++ b/cicd-kubernetes-plugins.html
@@ -7700,8 +7700,8 @@
Jenkins Kubernetes Plugins
-- Jenkins Kubernetes Plugin
-- Kubernetes Continuous Deploy
+- Jenkins Kubernetes Plugin
+- Kubernetes Continuous Deploy
Jenkins OpenShift Plugins
@@ -7712,8 +7712,8 @@
Argo CD Config Management Plugins
GitLab Kubernetes Agent
-- GitLab Kubernetes Agent
-- GitLab Kubernetes Agent available on GitLab.com
+- GitLab Kubernetes Agent
+- GitLab Kubernetes Agent available on GitLab.com
diff --git a/cicd.html b/cicd.html
index 71dfb535..670a9674 100644
--- a/cicd.html
+++ b/cicd.html
@@ -7886,26 +7886,26 @@
- martinfowler.com: Continuous Integration (original version)
-
+
CI/CD Continuous Integration and Continuous Delivery
- DZone: Continuous Integration: Servers and Tools Learning to Utilize DevOps with Servers and Tools
-- sdtimes.com: CI/CD pipelines are expanding 🌟 The “basic” CI/CD pipeline includes five processes, which are: merge, build, test, package and deploy. All of these are individually defined so readers have a common reference point. The basic pipeline includes sub-pipelines associated with each step, such as moving artifacts from a build into a repository.
-- devopsonline.co.uk: ChatOps, DevOps, ScrumOps and 5 Other Ops religions
+- sdtimes.com: CI/CD pipelines are expanding 🌟 The “basic” CI/CD pipeline includes five processes, which are: merge, build, test, package and deploy. All of these are individually defined so readers have a common reference point. The basic pipeline includes sub-pipelines associated with each step, such as moving artifacts from a build into a repository.
+- devopsonline.co.uk: ChatOps, DevOps, ScrumOps and 5 Other Ops religions
- opensource.com: A beginner’s guide to building DevOps pipelines with open source tools If you’re new to DevOps, check out this five-step process for building your first pipeline.
- acloud.guru: How youtr org predicts your CI/CD pipeline
- dev.to: CI/CD Continuous Integration & Delivery Explained 🌟🌟
-- mindtheproduct.com: The Product Managers’ Guide to Continuous Delivery and DevOps 🌟🌟
+- mindtheproduct.com: The Product Managers’ Guide to Continuous Delivery and DevOps 🌟🌟
- tech.buzzfeed.com: Continuous Deployments at BuzzFeed
- Dzone refcard: Continuous Delivery - Patterns and Anti-Patterns in the Software Lifecycle 🌟
-- infoworld.com: What is CI/CD? Continuous integration and continuous delivery explained The CI/CD pipeline is one of the best practices for devops teams to implement, for delivering code changes more frequently and reliably
-- devops.com: How to Implement an Effective CI/CD Pipeline
-- ammeon.com: 5 Tips For Building A CI/CD Pipeline
+- infoworld.com: What is CI/CD? Continuous integration and continuous delivery explained The CI/CD pipeline is one of the best practices for devops teams to implement, for delivering code changes more frequently and reliably
+- devops.com: How to Implement an Effective CI/CD Pipeline
+- ammeon.com: 5 Tips For Building A CI/CD Pipeline
- medium: What is CI/CD Pipeline in DevOps? 🌟🌟 Understanding the Importance of CI/CD Pipeline.
-- aws.amazon.com: Automating safe, hands-off deployments 🌟🌟
-- techuz.com: What is CI/CD? An Introduction to Continuous Integration, Continuous Deployment and CI/CD Pipeline
-- kodekloud.com: What is CI/CD Pipeline in DevOps CI/CD plays an important role in your DevOps implementation path. Here are some important things to consider while building a CI/CD pipeline:
+- aws.amazon.com: Automating safe, hands-off deployments 🌟🌟
+- techuz.com: What is CI/CD? An Introduction to Continuous Integration, Continuous Deployment and CI/CD Pipeline
+- kodekloud.com: What is CI/CD Pipeline in DevOps CI/CD plays an important role in your DevOps implementation path. Here are some important things to consider while building a CI/CD pipeline:
- Peer code review
- Build in a containerized environment
- Shorten the feedback loop
@@ -7917,56 +7917,56 @@
- medium: How to build an efficient CI/CD pipeline 🌟🌟
-- developers.redhat.com: The present and future of CI/CD with GitOps on Red Hat OpenShift
+- developers.redhat.com: The present and future of CI/CD with GitOps on Red Hat OpenShift
- CI/CD Best Practices 🌟
-- harness.io: What is a CI/CD Platform and why should I care? 🌟
-- harness.io: 3 Ways to Use Automation in CI/CD Pipelines
+- harness.io: What is a CI/CD Platform and why should I care? 🌟
+- harness.io: 3 Ways to Use Automation in CI/CD Pipelines
- cloudbees.com: 7 Tips for Creating A Successful CI/CD Pipeline 🌟
- javi-kata.medium.com: CI/CD the journey of a dummy team 🌟 This article tries to help people in how to achieve CI/CD starting from a feature branching model (gitflow).
- thinkinglabs.io: Feature Branching considered evil 🌟
-- tripwire.com: Everything You Need to Know About CI/CD and Security
-- harness.io: CI/CD Pipeline: Everything You Need to Know 🌟
-- stackoverflow.blog: Fulfilling the promise of CI/CD 🌟 When people say “CI/CD,” they are only talking about continuous integration. Nobody is talking about (or practicing) continuous deployment. AT ALL. It’s like we have all forgotten it exists. It’s time to change that.
-- Top 5 CI/CD best practices for 2021 🌟
-- harness.io: What is Continuous Integration? 🌟
-- cd.foundation: 2021 Technology Trends and Predictions
+- tripwire.com: Everything You Need to Know About CI/CD and Security
+- harness.io: CI/CD Pipeline: Everything You Need to Know 🌟
+- stackoverflow.blog: Fulfilling the promise of CI/CD 🌟 When people say “CI/CD,” they are only talking about continuous integration. Nobody is talking about (or practicing) continuous deployment. AT ALL. It’s like we have all forgotten it exists. It’s time to change that.
+- Top 5 CI/CD best practices for 2021 🌟
+- harness.io: What is Continuous Integration? 🌟
+- cd.foundation: 2021 Technology Trends and Predictions
- opsmx.com: What is a CI/CD Pipeline ?
-- continuousdelivery.com: Patterns 🌟
-- devops.com: 7 Popular Open Source CI/CD Tools
-- testguild.com: Pipeline as Code with Mohamed Labouardy
-- harness.io: Understanding the Phases of the Software Development Life Cycle
+- continuousdelivery.com: Patterns 🌟
+- devops.com: 7 Popular Open Source CI/CD Tools
+- testguild.com: Pipeline as Code with Mohamed Labouardy
+- harness.io: Understanding the Phases of the Software Development Life Cycle
- cloudbees.com: Key Components of a CI/CD Pipeline
- blog.thundra.io: Why a CI/CD Pipeline Makes Good Business Sense
-- jfrog.com: Cloud Native CI/CD: The Ultimate Checklist
-- jfrog.com: How to Accelerate Software Delivery with Hybrid Cloud CI/CD (e-commerce) 🌟
-- harness.io: Streamlining CI/CD and Optimizing AWS Cloud Spend
-- sdtimes.com: The State of CI/CD “A few years ago, CI/CD started off as a method to help continuous deployment, but that definition of CI/CD is long defunct. CI/CD now has QA and security elements to it. We may have seen people refer to the current trend as DevSecOps. In my mind, DevSecOps is changing to be Dev-Infra-Sec-Ops (infrastructure-as-a-service) and will soon be called “Dev-Infra-Sec-Analytics-Ops (including analytics-as-a-service). One day the trend of CI/CD will eventually lead to touchless software development and maintenance. We are on the brink of major efficiency shift in the industry now and AI/ML and LCNC [low code/no code] technologies are enabling this shift.”
+- jfrog.com: Cloud Native CI/CD: The Ultimate Checklist
+- jfrog.com: How to Accelerate Software Delivery with Hybrid Cloud CI/CD (e-commerce) 🌟
+- harness.io: Streamlining CI/CD and Optimizing AWS Cloud Spend
+- sdtimes.com: The State of CI/CD “A few years ago, CI/CD started off as a method to help continuous deployment, but that definition of CI/CD is long defunct. CI/CD now has QA and security elements to it. We may have seen people refer to the current trend as DevSecOps. In my mind, DevSecOps is changing to be Dev-Infra-Sec-Ops (infrastructure-as-a-service) and will soon be called “Dev-Infra-Sec-Analytics-Ops (including analytics-as-a-service). One day the trend of CI/CD will eventually lead to touchless software development and maintenance. We are on the brink of major efficiency shift in the industry now and AI/ML and LCNC [low code/no code] technologies are enabling this shift.”
- javacodegeeks.com: The Case Against CI/CD What’s the Point of CI/CD?
-- thenewstack.io: Improve Dev Experience to Maximize the Business Value of CD
-- community.dataminer.services: CI/CD and the Agile Principles
+- thenewstack.io: Improve Dev Experience to Maximize the Business Value of CD
+- community.dataminer.services: CI/CD and the Agile Principles
- medium: Automated Build and Deploy Pipelines for Kubernetes
- medium: Next Generation Kubernetes Deployments
- levelup.gitconnected.com: Basics of CI/CD
-- techrepublic.com: CI/CD platforms: How to choose the right continuous integration and delivery system for your business
-- stackoverflow.blog: Fulfilling the promise of CI/CD When people say “CI/CD,” they are only talking about continuous integration. Nobody is talking about (or practicing) continuous deployment. AT ALL. It’s like we have all forgotten it exists. It’s time to change that.
+- techrepublic.com: CI/CD platforms: How to choose the right continuous integration and delivery system for your business
+- stackoverflow.blog: Fulfilling the promise of CI/CD When people say “CI/CD,” they are only talking about continuous integration. Nobody is talking about (or practicing) continuous deployment. AT ALL. It’s like we have all forgotten it exists. It’s time to change that.
- speakerdeck.com: Deployment Scripting != Continuous Delivery
-- lambdatest.com: Top 10 CI/CD Pipeline Implementation Challenges And Solutions
+- lambdatest.com: Top 10 CI/CD Pipeline Implementation Challenges And Solutions
- devopsdigest.com: CI/CD Deployments: How to Expedite Across a Kubernetes Environment With DevOps Orchestration
- medium.com/softwareimprovementgroup: CI/CD best practices: How to set up your pipeline
- medium.com/dynatrace-engineering: How to combine and automate infrastructure and application deployment in a microservice environment A collection of best practices to improve your confidence in your deployed applications.
-- thenewstack.io: 4 Best Practices to Drive Successful Adoption of CI/CD
-- about.gitlab.com: How to keep up with CI/CD best practices
-- harness.io: Modern Software Delivery Best Practices & Software Delivery Management
-- linkedin pulse: Enabling CI/CD to Boost DevOps | Pavan Belagatti
-- about.gitlab.com: How to learn CI/CD fast
-- thenewstack.io: Are Monolith CI/CD Pipelines Killing Quality in Your Software? This creates complex challenges for developers trying to push commits with confidence and DevOps teams responsible for fine-tuning their pipelines.
-- clickittech.com: CI/CD Best Practices: Top 10 Practices for Financial Services
+- thenewstack.io: 4 Best Practices to Drive Successful Adoption of CI/CD
+- about.gitlab.com: How to keep up with CI/CD best practices
+- harness.io: Modern Software Delivery Best Practices & Software Delivery Management
+- linkedin pulse: Enabling CI/CD to Boost DevOps | Pavan Belagatti
+- about.gitlab.com: How to learn CI/CD fast
+- thenewstack.io: Are Monolith CI/CD Pipelines Killing Quality in Your Software? This creates complex challenges for developers trying to push commits with confidence and DevOps teams responsible for fine-tuning their pipelines.
+- clickittech.com: CI/CD Best Practices: Top 10 Practices for Financial Services
- medium.com/@rifkikarimr: Continuous Integration and Continuous Deployment: Best Practices for DevOps 🌟 Explore the basics of CICD. What they’re, why they’re important, how to set up CI/CD pipeline, the best practices for CI/CD, and how to overcome common challenges
- guru99.com: CI/CD Pipeline: Learn with Example 🌟🌟🌟 CICD automates the process of app delivery. It builds code, runs tests, helps to safely deploy new version of the app. It reduces manual errors, provides feedback, and allows fast product iterations.
- dzone.com: How To Build an Effective CI/CD Pipeline This article leads you through an exploration of practical steps for creating pipelines that accelerate deployments.
- groundcover.com: Cloud-native CI/CD? Yeah, that’s a thing 🌟 Discover how leveraging CI/CD pipelines based on Kubernetes gives organizations improved control and more efficient management, allowing for faster recovery and replication of runtime environments.
- spacelift.io: Kubernetes CI/CD Pipelines – 7 Best Practices and Tools | James Walker 🌟 CICD pipelines enhance app delivery process by automating key stages like testing, security scanning, and deployment. Adopting pipeline-based workflow helps to ship more quickly.
-- thenewstack.io: Embracing Database Deployments in CI/CD Practices with Git Databases have not been well integrated into the CI/CD tooling landscape, but applying git-like concepts can help.
+- thenewstack.io: Embracing Database Deployments in CI/CD Practices with Git Databases have not been well integrated into the CI/CD tooling landscape, but applying git-like concepts can help.
- hart-michael.medium.com: Why You Need Continuous Deployment
CI/CD Pipelines With Kubernetes
@@ -7979,17 +7979,17 @@
-
dzone.com: An Overview of CI/CD Pipelines With Kubernetes Take a look at CI/CD approaches in a Kubernetes ecosystem, best practices for implementing an efficient CI/CD framework, and popular open-source CI/CD tools.
-- thenewstack.io: Kubernetes CI/CD Pipelines Explained Building an effective CI/CD pipeline requires diligent technical analysis, a generous amount of planning and choosing the right set of tools.
+- thenewstack.io: Kubernetes CI/CD Pipelines Explained Building an effective CI/CD pipeline requires diligent technical analysis, a generous amount of planning and choosing the right set of tools.
Observability
-- betanews.com: Overcoming observability challenges in the CI/CD Pipeline
+- betanews.com: Overcoming observability challenges in the CI/CD Pipeline
Code Review
-- Purposeful Commits - (Related to git topic)
+- Purposeful Commits - (Related to git topic)
-
-
Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - This article details how to leverage Azure OpenAI’s large language models to automatically generate pull request descriptions in Azure DevOps. It outlines a process where Azure Pipelines, triggered by pull request creation, use Azure DevOps variables to interact with the Azure OpenAI API. The LLM summarizes code changes into natural language, which is then programmatically set as the pull request description via the Azure DevOps API. This aims to enhance developer experience by providing context without manual effort.
+Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI - This article details how to leverage Azure OpenAI’s large language models to automatically generate pull request descriptions in Azure DevOps. It outlines a process where Azure Pipelines, triggered by pull request creation, use Azure DevOps variables to interact with the Azure OpenAI API. The LLM summarizes code changes into natural language, which is then programmatically set as the pull request description via the Azure DevOps API. This aims to enhance developer experience by providing context without manual effort.
-
developers.redhat.com: 10 tips for reviewing code you don’t like
@@ -7997,22 +7997,22 @@
Security in CI/CD
-- Deploying to Azure: Secure Your GitHub Workflow with OIDC 🌟 - This blog post explains the benefits of using OpenID Connect (OIDC) for securing GitHub Actions workflows when deploying to Azure. It provides a step-by-step guide on setting up OIDC authentication using Azure CLI, including creating an Azure AD application with federated credentials, and demonstrates its implementation within a GitHub repository workflow. The article highlights how OIDC eliminates the need for long-lived secrets in GitHub, thus enhancing security and simplifying credential management.
+- Deploying to Azure: Secure Your GitHub Workflow with OIDC 🌟 - This blog post explains the benefits of using OpenID Connect (OIDC) for securing GitHub Actions workflows when deploying to Azure. It provides a step-by-step guide on setting up OIDC authentication using Azure CLI, including creating an Azure AD application with federated credentials, and demonstrates its implementation within a GitHub repository workflow. The article highlights how OIDC eliminates the need for long-lived secrets in GitHub, thus enhancing security and simplifying credential management.
- Securing Azure DevOps When Using Private Repositories - (Related to azure topic)
- Avoiding Mistakes with AWS OIDC Integration Conditions - (Related to aws-security topic)
-
-
Update to Azure DevOps Allowed IP Addresses - (Related to azure topic)
+Update to Azure DevOps Allowed IP Addresses - (Related to azure topic)
-
-
CI Checks Are Not Enough: Combat Configuration Drift in Kubernetes Resources
+CI Checks Are Not Enough: Combat Configuration Drift in Kubernetes Resources
-- devops.com: 8 Security Considerations for CI/CD
+- devops.com: 8 Security Considerations for CI/CD
Progressive Delivery
-- split.io: Progressive Delivery
-- harness.io: Progressive Delivery: Everything You Need to Know
-- weave.works: Progressively Delivering Applications Across Cloud and On-Premise. Using Kuma & GitOps to implement canary releasing
+- split.io: Progressive Delivery
+- harness.io: Progressive Delivery: Everything You Need to Know
+- weave.works: Progressively Delivering Applications Across Cloud and On-Premise. Using Kuma & GitOps to implement canary releasing
Deployment Strategies
@@ -8022,12 +8022,12 @@
- Last but not least, a shadow release is complex and requires extra work to mock egress traffic which is mandatory when calling external dependencies with mutable actions (email, bank, etc.). However, this technique can be useful when migrating to a new database technology and use shadow traffic to monitor system performance under load.
-- harness.io: Intro to Deployment Strategies: Blue-Green, Canary, and More 🌟
+- harness.io: Intro to Deployment Strategies: Blue-Green, Canary, and More 🌟
- medium: Continuous Kubernetes blue-green deployments on Azure using Nginx, AppGateway or TrafficManager — part 2
- gitconnected.com: Blue-Green with Canary Deployment — A Novel approach
-- semaphoreci.com: Continuous Blue-Green Deployments With Kubernetes 🌟
+- semaphoreci.com: Continuous Blue-Green Deployments With Kubernetes 🌟
- cd.foundation: Intro to Deployment Strategies: Blue-Green, Canary, and More 🌟
-- opsmx.com: What is Blue Green Deployment ?
+- opsmx.com: What is Blue Green Deployment ?
- devopslearners.com: Blue-Green vs Canary Deployment
- youtube: Kubernetes Deployment Strategies | DevOps FAQ | DevOps DevOps Interview Q&A
@@ -8036,50 +8036,50 @@
Pipeline Patterns
-- Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) 🌟 - A comprehensive guide to building a production-ready Azure DevOps pipeline for Terraform, focusing on safety, reusability, security, and structure. It covers OIDC authentication, reusable templates, gated approvals, private module access, and dynamic state file naming, presenting a robust pattern beyond basic ‘plan and apply’ scripts.
+- Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) 🌟 - A comprehensive guide to building a production-ready Azure DevOps pipeline for Terraform, focusing on safety, reusability, security, and structure. It covers OIDC authentication, reusable templates, gated approvals, private module access, and dynamic state file naming, presenting a robust pattern beyond basic ‘plan and apply’ scripts.
-
-
Kiro: Engineering Rigor for Agentic Development - (Related to ai-agents-mcp topic)
+Kiro: Engineering Rigor for Agentic Development - (Related to ai-agents-mcp topic)
-
-
harness.io: Pipeline Patterns for CI/CD Pipelines 🌟 Button Push Pattern, Test Automation Pattern, Full Approval Pattern.
+harness.io: Pipeline Patterns for CI/CD Pipelines 🌟 Button Push Pattern, Test Automation Pattern, Full Approval Pattern.
CI/CD with Kubernetes
- Automating Microsoft Sentinel Deployment with Azure DevOps CI/CD - (Related to azure topic)
-
-
Azure Landing Zone IaC Accelerator - (Related to iac topic)
+Azure Landing Zone IaC Accelerator - (Related to iac topic)
-
-
+
-- Devtron Labs: Devtron provides a ‘seamless,’ ‘implementation agnostic uniform interface’ across Kubernetes Life Cycle integrated with most Opensource and commercial tools
-- thenewstack.io: 7 features that make kubernetes ideal for CI/CD
-- thenewstack.io: CI/CD with kubernetes 🌟
-- harness.io: Kubernetes CI/CD Best Practices With all of the benefits that Kubernetes has, having good CI/CD practices is key. Kubernetes did not magically erase the discipline that your CI/CD journey has taken you on before Kubernetes. Leverage Kubernetes’s strengths to further your CI/CD journey.
+- Devtron Labs: Devtron provides a ‘seamless,’ ‘implementation agnostic uniform interface’ across Kubernetes Life Cycle integrated with most Opensource and commercial tools
+- thenewstack.io: 7 features that make kubernetes ideal for CI/CD
+- thenewstack.io: CI/CD with kubernetes 🌟
+- harness.io: Kubernetes CI/CD Best Practices With all of the benefits that Kubernetes has, having good CI/CD practices is key. Kubernetes did not magically erase the discipline that your CI/CD journey has taken you on before Kubernetes. Leverage Kubernetes’s strengths to further your CI/CD journey.
CI/CD with OpenShift
-- developers.redhat.com: The present and future of CI/CD with GitOps on Red Hat OpenShift 🌟
+- developers.redhat.com: The present and future of CI/CD with GitOps on Red Hat OpenShift 🌟
CI/CD with AWS
-- Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - (Related to kubernetes-tools topic)
-- RunsOn: Self-hosted GitHub Actions Runners in AWS 🌟 - RunsOn provides a self-hosted solution for GitHub Actions runners, allowing you to run them within your own AWS account. This enables significant cost savings (up to 90%) compared to GitHub-hosted runners and offers greater control over instance types (x64, ARM64, GPU) and configurations. It integrates seamlessly with existing workflow syntax and handles runner management, caching, networking, and observability.
+- Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - (Related to kubernetes-tools topic)
+- RunsOn: Self-hosted GitHub Actions Runners in AWS 🌟 - RunsOn provides a self-hosted solution for GitHub Actions runners, allowing you to run them within your own AWS account. This enables significant cost savings (up to 90%) compared to GitHub-hosted runners and offers greater control over instance types (x64, ARM64, GPU) and configurations. It integrates seamlessly with existing workflow syntax and handles runner management, caching, networking, and observability.
-
-
Install Java 23 in an Azure DevOps Pipeline - (Related to azure topic)
+Install Java 23 in an Azure DevOps Pipeline - (Related to azure topic)
-
-
mediatemple.net: Cloud-Native CI/CD Workflows in AWS: 3 Use Cases
+mediatemple.net: Cloud-Native CI/CD Workflows in AWS: 3 Use Cases
-- trek10.com: Enterprise CI/CD on AWS: a pragmatic approach How can we work within the constraints of a large organization to develop CI/CD flows that help us deploy applications quickly, safely, and accountably on AWS?
+- trek10.com: Enterprise CI/CD on AWS: a pragmatic approach How can we work within the constraints of a large organization to develop CI/CD flows that help us deploy applications quickly, safely, and accountably on AWS?
Reports on the Enterprise CI/CD Market
-- GigaOm’s Radar for Enterprise CI/CD 🌟 is a must-see report for any DevOps enthusiast. The goal of an end-to-end Continuous Integration/Continuous Delivery (CI/CD) pipeline is to deliver software-based innovation and business value at both speed and scale. CI/CD plays a very important role in the company’s DevOps journey. Keeping several factors in mind, Gigaom has come up with it’sown research and presented who leads and who lags in the CI/CD market.
+- GigaOm’s Radar for Enterprise CI/CD 🌟 is a must-see report for any DevOps enthusiast. The goal of an end-to-end Continuous Integration/Continuous Delivery (CI/CD) pipeline is to deliver software-based innovation and business value at both speed and scale. CI/CD plays a very important role in the company’s DevOps journey. Keeping several factors in mind, Gigaom has come up with it’sown research and presented who leads and who lags in the CI/CD market.
-
+
Tools
@@ -8087,26 +8087,26 @@
- feat(ui): Add AppSet to Application Resource Tree in Argo CD - (Related to argo topic)
- Claude Code in Action - (Related to ai topic)
- Terraform & OpenTofu Skill for AI Agents - (Related to terraform topic)
-- Draw.io MCP for Diagram Generation: Why It’s Worth Using - (Related to cloud-arch-diagrams topic)
-- Buildbot - Buildbot is an open-source Python-based framework for automating software build, test, and release processes. It facilitates continuous integration and continuous delivery pipelines.
-- PMEase QuickBuild - QuickBuild is a flexible continuous integration and continuous deployment (CI/CD) server designed for DevOps teams. It offers features like build promotion, integration with LDAP, and support for various build customization options. Version 16.0 includes updates for Java LTS, improved build subscriptions, artifact reservation, and API enhancements.
+- Draw.io MCP for Diagram Generation: Why It’s Worth Using - (Related to cloud-arch-diagrams topic)
+- Buildbot - Buildbot is an open-source Python-based framework for automating software build, test, and release processes. It facilitates continuous integration and continuous delivery pipelines.
+- PMEase QuickBuild - QuickBuild is a flexible continuous integration and continuous deployment (CI/CD) server designed for DevOps teams. It offers features like build promotion, integration with LDAP, and support for various build customization options. Version 16.0 includes updates for Java LTS, improved build subscriptions, artifact reservation, and API enhancements.
- FossFLOW - A CI/CD pipeline for GitHub projects using GitHub Actions, Argo CD for GitOps, and FluxCD.
-- Canine: A Developer-friendly PaaS for Kubernetes - (Related to kubernetes-tools topic)
+- Canine: A Developer-friendly PaaS for Kubernetes - (Related to kubernetes-tools topic)
- Azure DevOps MCP Server - (Related to azure topic)
-- Azure DevOps MCP Server Public Preview - (Related to ai topic)
+- Azure DevOps MCP Server Public Preview - (Related to ai topic)
- Best Practices for Using GitHub Copilot - (Related to ai topic)
-- Programming with GitHub Copilot Agent Mode - (Related to ai topic)
+- Programming with GitHub Copilot Agent Mode - (Related to ai topic)
- InfraCost + Terraform PRs: Making Cost Awareness Effortless - (Related to terraform topic)
-- Automate Terraform Testing with Azure DevOps Pipelines - (Related to terraform topic)
+- Automate Terraform Testing with Azure DevOps Pipelines - (Related to terraform topic)
- Google Launches Gemini Code Assist, Challenging GitHub Copilot with Generous Free Tier - (Related to ai topic)
-- Back of the Napkin Guide to Updating Jenkins - (Related to jenkins topic)
+- Back of the Napkin Guide to Updating Jenkins - (Related to jenkins topic)
- Terraform Module Releaser GitHub Action - (Related to iac topic)
- Gama: Terminal UI for GitHub Actions - Gama is a terminal-based user interface (TUI) tool that allows users to manage GitHub Actions workflows directly from their terminal. It enables listing, triggering, and managing workflows, with support for extended workflow inputs and workflow history.
- Migrating CI/CD from Jenkins to Argo Workflows 🌟 - This article from DEV Community details Intuit’s experience and considerations when migrating their CI/CD pipelines from Jenkins to Argo Workflows. It discusses the challenges of running Jenkins at scale on Kubernetes and explores how Argo Workflows can be used alongside Argo CD for cloud-native CI/CD. The post focuses on the CI aspect and provides insights into mapping Jenkins functionalities to Argo Workflows, with an example to illustrate the differences.
-- Dependabot Version Updates in Azure DevOps - This article details how to integrate Dependabot-like functionality into Azure DevOps pipelines, allowing for automated dependency updates in repositories. It covers installing the ‘Dependabot’ extension from the Azure DevOps Marketplace and configuring a pipeline to run the task regularly, mimicking GitHub’s Dependabot behavior. The setup includes utilizing a
dependabot.yml configuration file, similar to its GitHub counterpart, to define package ecosystems and update strategies.
+- Dependabot Version Updates in Azure DevOps - This article details how to integrate Dependabot-like functionality into Azure DevOps pipelines, allowing for automated dependency updates in repositories. It covers installing the ‘Dependabot’ extension from the Azure DevOps Marketplace and configuring a pipeline to run the task regularly, mimicking GitHub’s Dependabot behavior. The setup includes utilizing a
dependabot.yml configuration file, similar to its GitHub counterpart, to define package ecosystems and update strategies.
- action-tmate: Debug GitHub Actions via SSH - This GitHub Action allows users to debug their GitHub Actions by providing SSH access to the runner system itself. It leverages tmate to establish a secure shell connection, enabling real-time interaction and inspection of the execution environment.
-
-
GitHub Copilot Now Explains Failed Actions Jobs (GA) - GitHub’s Copilot can now assist users by explaining why an Actions job failed. This feature, now Generally Available, allows users to select ‘Explain Error’ from a failing check in the pull request merge box or on the Actions job page. Copilot analyzes the job and provides tailored guidance for resolution, consuming one chat message per use. This integration aims to streamline debugging and improve CI/CD workflows.
+GitHub Copilot Now Explains Failed Actions Jobs (GA) - GitHub’s Copilot can now assist users by explaining why an Actions job failed. This feature, now Generally Available, allows users to select ‘Explain Error’ from a failing check in the pull request merge box or on the Actions job page. Copilot analyzes the job and provides tailored guidance for resolution, consuming one chat message per use. This integration aims to streamline debugging and improve CI/CD workflows.
-
plutora.com: Artifacts management tools
@@ -8154,7 +8154,7 @@
-- GitBook Webinar: GitBook for Public Docs - Webinar sobre el uso de GitBook para la documentación pública, útil para equipos que gestionan documentación de proyectos de Kubernetes y Cloud Native.
+- GitBook Webinar: GitBook for Public Docs - Webinar sobre el uso de GitBook para la documentación pública, útil para equipos que gestionan documentación de proyectos de Kubernetes y Cloud Native.
diff --git a/cloud-arch-diagrams.html b/cloud-arch-diagrams.html
index e702e3ae..eafb0112 100644
--- a/cloud-arch-diagrams.html
+++ b/cloud-arch-diagrams.html
@@ -7737,7 +7737,7 @@
Introduction
-
-
CloudCanvas - Diagramming for Cloud Infrastructure - CloudCanvas is a web-based tool that allows users to visually design and document their cloud infrastructure. It supports various cloud providers and services, enabling the creation of detailed architecture diagrams.
+CloudCanvas - Diagramming for Cloud Infrastructure - CloudCanvas is a web-based tool that allows users to visually design and document their cloud infrastructure. It supports various cloud providers and services, enabling the creation of detailed architecture diagrams.
-
betterprogramming.pub: Solutions Architect Tips — The 5 Types of Architecture Diagrams The flow, service, persona, infrastructure, and developer diagram
@@ -7747,88 +7747,88 @@
MultiCloud
-- CloudSkew Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool
-- diagrams.net Diagram with anyone, anywhere. Open source, online, desktop and container deployable diagramming software.
-- Hyperglance Cloud diagrams & inventory - Cost optimization & alerting - Security & compliance monitoring - Automatic policy enforcement - Self-hosted deployment - Free trial.
-- CloudSkew Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool
-- PlantUML
-- draw.io
+- CloudSkew Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool
+- diagrams.net Diagram with anyone, anywhere. Open source, online, desktop and container deployable diagramming software.
+- Hyperglance Cloud diagrams & inventory - Cost optimization & alerting - Security & compliance monitoring - Automatic policy enforcement - Self-hosted deployment - Free trial.
+- CloudSkew Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool
+- PlantUML
+- draw.io
- opensource.com: Open source mind mapping with Draw.io Next time you need to brainstorm, organize ideas, or plan a project, start with Draw.io.
-- chcommunity.microsoft.com: Draw.io Azure infrastructure diagrams through code like an artist
+- chcommunity.microsoft.com: Draw.io Azure infrastructure diagrams through code like an artist
- Isoflow Infrastructure Diagrams
-- acloudguru.com: The top cloud diagramming tools, ranked
-- redhat.com: 6 architectural diagramming tools for cloud infrastructure Communicating a vision for cloud computing requires meaningful diagrams of logical, physical, and every layer in between. Here are tools that will help make them.
-- autodraw.com Fast drawing for everyone. AutoDraw pairs machine learning with drawings from talented artists to help you draw stuff fast.
-- redhat.com: Try these 5 diagramming tools for network architecture
-- redhat.com: Design professional enterprise architecture diagrams with this open source tool (diagrams.net) Walk step-by-step through creating enterprise architecture diagrams like an expert in this DevConf workshop.
-- kubernetes.io: Diagram Guide - Mermaid JavaScript library 🌟
+- acloudguru.com: The top cloud diagramming tools, ranked
+- redhat.com: 6 architectural diagramming tools for cloud infrastructure Communicating a vision for cloud computing requires meaningful diagrams of logical, physical, and every layer in between. Here are tools that will help make them.
+- autodraw.com Fast drawing for everyone. AutoDraw pairs machine learning with drawings from talented artists to help you draw stuff fast.
+- redhat.com: Try these 5 diagramming tools for network architecture
+- redhat.com: Design professional enterprise architecture diagrams with this open source tool (diagrams.net) Walk step-by-step through creating enterprise architecture diagrams like an expert in this DevConf workshop.
+- kubernetes.io: Diagram Guide - Mermaid JavaScript library 🌟
- mingrammer/diagrams 🎨 Diagram as Code for prototyping cloud system architectures
- github.com/dcasati/kubernetes-PlantUML Kubernetes diagrams using VS Code. Kubernetes-PlantUML contains the PlantUML sprites, macros and stereotypes for creating PlantUML diagrams with the Kubernetes components. This work is based on the official Kubernetes Icons Set.
- excalidraw.com
-- diagrams.mingrammer.com: Diagram as Code Diagrams lets you draw the cloud system architecture in Python code.
+- diagrams.mingrammer.com: Diagram as Code Diagrams lets you draw the cloud system architecture in Python code.
K8s Diagrams
-
-
Draw.io MCP for Diagram Generation: Why It’s Worth Using - This blog post discusses the benefits of using Draw.io MCP (Model Context Protocol) to generate diagrams from structured input like text, CSV, or Mermaid. It highlights how this approach integrates diagrams with code and infrastructure, turning them into living assets that evolve with the system, especially relevant for cloud, platform, and AI-assisted engineering workflows.
+Draw.io MCP for Diagram Generation: Why It’s Worth Using - This blog post discusses the benefits of using Draw.io MCP (Model Context Protocol) to generate diagrams from structured input like text, CSV, or Mermaid. It highlights how this approach integrates diagrams with code and infrastructure, turning them into living assets that evolve with the system, especially relevant for cloud, platform, and AI-assisted engineering workflows.
-
-
cloudogu/k8s-diagrams A collection of diagrams explaining kubernetes by cloudogu, written in PlantUML.
+cloudogu/k8s-diagrams A collection of diagrams explaining kubernetes by cloudogu, written in PlantUML.
Architecture Icons
-- AWS Architecture Icons
-- Azure Architecture Icons - thomasmaurer.ch: Download New Azure Architecture Icons now!
+- AWS Architecture Icons
+- Azure Architecture Icons - thomasmaurer.ch: Download New Azure Architecture Icons now!
- Google Cloud Architecture Icons
- aquasecurity/cloudsec-icons A collection of cloud security icons ☁️🔒
-- github.com/kubernetes: Kubernetes Icons Set These icons are a way to standardize Kubernetes architecture diagrams for presentation. Having uniform architecture diagrams improve understandability
+- github.com/kubernetes: Kubernetes Icons Set These icons are a way to standardize Kubernetes architecture diagrams for presentation. Having uniform architecture diagrams improve understandability
AWS
- AZVerify: Bridging Azure Resources, Bicep Templates, and Diagrams with GitHub Copilot - (Related to azure topic)
-- Enterprise Web App Patterns - Azure Architecture Center - (Related to azure topic)
+- Enterprise Web App Patterns - Azure Architecture Center - (Related to azure topic)
- Azure Products by Region Table - (Related to azure topic)
- Hub-Spoke Network Topology in Azure - Azure Architecture Center - (Related to azure topic)
-- Azure Landing Zone Technical Documentation - (Related to azure topic)
-- Azure Landing Zone - Microsoft Cloud Adoption Framework - (Related to azure topic)
+- Azure Landing Zone Technical Documentation - (Related to azure topic)
+- Azure Landing Zone - Microsoft Cloud Adoption Framework - (Related to azure topic)
-
Architecture Best Practices for Azure Kubernetes Service (AKS) - (Related to azure topic)
-
-
AWS Architecture Icons The official AWS icon set for building architecture diagrams
+AWS Architecture Icons The official AWS icon set for building architecture diagrams
-- cloudcraft.co
-- diagrams.net: Use Cloudcraft to export your AWS architecture to a .drawio diagram
+- cloudcraft.co
-- hava.io
-- draw.io
-- CloudMapper (OSS)
-- Lucidchart
-- Lucidscale: Import your architecture Lucidscale is the cloud visualization solution that helps organizations see and understand their cloud environment.
+- hava.io
+- draw.io
+- CloudMapper (OSS)
+- Lucidchart
+- Lucidscale: Import your architecture Lucidscale is the cloud visualization solution that helps organizations see and understand their cloud environment.
-- infviz.io
+- infviz.io
- AWS Account Cloud9 Visualizer
- AWS CloudFormer + AWS CloudFormation Designer
-- AWS Architecture Icons The official AWS icon set for building architecture diagrams
-- cloudcraft.co
-- hava.io
-- CloudMapper (OSS)
-- Lucidchart
-- infviz.io
+- AWS Architecture Icons The official AWS icon set for building architecture diagrams
+- cloudcraft.co
+- hava.io
+- CloudMapper (OSS)
+- Lucidchart
+- infviz.io
- AWS CloudFormer + AWS CloudFormation Designer
- What is the best way to generate a visual diagram of the AWS environment which includes VPC, VPN, EC2, and AMIs?
-- AWS Perspective 🌟 a tool to automatically visualise your loud workloads.
+- AWS Perspective 🌟 a tool to automatically visualise your loud workloads.
- https://github.com/awslabs/aws-perspective
- Perspective inventories your aws accounts and can automatically create architecture diagrams with your resources along with the relationships between them. The diagrams are dynamic and you have the ability to explore them to discover how your resources are associated and connected.
- Perspective displays indicative costing data for the resources in your diagrams and works cross-account and cross-region.
@@ -7841,7 +7841,7 @@
Google Cloud Architecture Diagramming Tool
-- cloud.google.com: Introducing a Google Cloud architecture diagramming tool
+- cloud.google.com: Introducing a Google Cloud architecture diagramming tool
Airflow
diff --git a/cloud-asset-inventory.html b/cloud-asset-inventory.html
index 08456031..bbc91052 100644
--- a/cloud-asset-inventory.html
+++ b/cloud-asset-inventory.html
@@ -7701,19 +7701,19 @@
CloudQuery
- https://github.com/cloudquery/cloudquery
-- cloudquery.io: Cloud Query: The open-source cloud asset inventory powered by SQL CloudQuery enables you to assess, audit, and evaluate the configurations of your cloud assets.
-- cloudquery.io: Building an Open-Source Cloud Asset Inventory with CloudQuery and Grafana
+- cloudquery.io: Cloud Query: The open-source cloud asset inventory powered by SQL CloudQuery enables you to assess, audit, and evaluate the configurations of your cloud assets.
+- cloudquery.io: Building an Open-Source Cloud Asset Inventory with CloudQuery and Grafana
Steampipe
-- ServerlessHorrors: A Web Compiling Nightmares in the Serverless World - (Related to serverless topic)
+- ServerlessHorrors: A Web Compiling Nightmares in the Serverless World - (Related to serverless topic)
Azure Architecture
kubernetes-storage
- Ceph: A Distributed Object, Block, and File Storage Platform - (Related to kubernetes-storage topic)
- AWS Cloud Practitioner - Curso Completo 2023 - (Related to aws-training topic)
-- CloudCanvas - Diagramming for Cloud Infrastructure - (Related to cloud-arch-diagrams topic)
+- CloudCanvas - Diagramming for Cloud Infrastructure - (Related to cloud-arch-diagrams topic)
- Transitioning an Existing Azure Environment to the Azure Landing Zone Reference Architecture - (Related to azure topic)
-
Subscription Vending Implementation Guidance - (Related to azure topic)
@@ -7721,7 +7721,7 @@
-
steampipe Steampipe is an open source tool for querying cloud APIs in a universal way and reasoning about the data in SQL.
-- Querying AWS at scale across APIs, Regions, and accounts
+- Querying AWS at scale across APIs, Regions, and accounts
diff --git a/cloudflare.html b/cloudflare.html
index 082c146f..ef5f16c9 100644
--- a/cloudflare.html
+++ b/cloudflare.html
@@ -7665,16 +7665,16 @@
Email Services
-
-
How to Set Up a Custom Email with Cloudflare and Mailgun - This article provides a step-by-step guide on how to set up a custom email address (e.g., info@yourdomain.com) for free using Cloudflare for DNS management and Mailgun for email services. It explains how to integrate these services to manage custom emails directly within a Gmail inbox, focusing on efficiency, reliability, and security.
+How to Set Up a Custom Email with Cloudflare and Mailgun - This article provides a step-by-step guide on how to set up a custom email address (e.g., info@yourdomain.com) for free using Cloudflare for DNS management and Mailgun for email services. It explains how to integrate these services to manage custom emails directly within a Gmail inbox, focusing on efficiency, reliability, and security.
-
-
+
-- Cloudflare workers (Serverless)
-- venturebeat.com: Cloudflare acquires Linc to automate web app deployment
-- blog.cloudflare.com: Network Performance Update: Full Stack Week
-- blog.cloudflare.com: Guest Blog: k8s tunnels with Kudelski Security
-- blog.cloudflare.com: Zero Trust Private Networking Rules
+- Cloudflare workers (Serverless)
+- venturebeat.com: Cloudflare acquires Linc to automate web app deployment
+- blog.cloudflare.com: Network Performance Update: Full Stack Week
+- blog.cloudflare.com: Guest Blog: k8s tunnels with Kudelski Security
+- blog.cloudflare.com: Zero Trust Private Networking Rules
diff --git a/container-managers.html b/container-managers.html
index 25675a66..c79e8218 100644
--- a/container-managers.html
+++ b/container-managers.html
@@ -7924,15 +7924,15 @@
Introduction
-- A Practical Introduction to Container Terminology
-- inovex.de: Welcome To The Container Jungle: Docker vs. containerd vs. Nabla vs. Kata vs. Firecracker and more! 🌟
-- blog.alexellis.io: Building containers without Docker 🌟
-- thenewstack.io: Container Best Practices: What They Are and Why You Should Care
+- A Practical Introduction to Container Terminology
+- inovex.de: Welcome To The Container Jungle: Docker vs. containerd vs. Nabla vs. Kata vs. Firecracker and more! 🌟
+- blog.alexellis.io: Building containers without Docker 🌟
+- thenewstack.io: Container Best Practices: What They Are and Why You Should Care
OCI Project. Open Container Initiative
-- OCI: Open Container Initiative
-- scrivano.org: the journey to speed up running OCI containers
+- OCI: Open Container Initiative
+- scrivano.org: the journey to speed up running OCI containers
OCI Runtimes
runc
@@ -7952,74 +7952,74 @@
- containerd - An open and reliable container runtime 🌟 - The containerd GitHub repository hosts the source code and documentation for containerd, an open and reliable container runtime. It is a core component for running containers, often used by higher-level orchestrators like Kubernetes and Docker.
- Controlling Process Resources with Linux Control Groups (cgroups) - (Related to kubernetes topic)
-
-
What is Podman and How Does it Compare to Docker? - An article from Build5Nines providing a detailed overview of Podman, an open-source container engine developed by Red Hat. It explains Podman’s key features such as its daemonless architecture, rootless execution, native pod support, and Docker-compatible CLI, and contrasts it with Docker’s daemon-based model. The article aims to help developers transition between the two container management tools.
+What is Podman and How Does it Compare to Docker? - An article from Build5Nines providing a detailed overview of Podman, an open-source container engine developed by Red Hat. It explains Podman’s key features such as its daemonless architecture, rootless execution, native pod support, and Docker-compatible CLI, and contrasts it with Docker’s daemon-based model. The article aims to help developers transition between the two container management tools.
-
-
+
- Docker
-- containerd.io
-- Frakti
+- containerd.io
+- Frakti
CRI-O
-- cri-o.io Lightweight Container Runtime for Kubernetes
-- Why Red Hat is investing in CRI-O and Podman
+- cri-o.io Lightweight Container Runtime for Kubernetes
+- Why Red Hat is investing in CRI-O and Podman
Podman. Pod Manager tool
-- Podman.io
-- Libpod: Library and tool for running OCI-based containers in Pods
+- Podman.io
+- Libpod: Library and tool for running OCI-based containers in Pods
- Libpod is a library used to create container pods. Home of Podman.
- Libpod provides a library for applications looking to use the Container Pod concept, popularized by Kubernetes. Libpod also contains the Pod Manager tool (Podman). Podman manages pods, containers, container images, and container volumes.
-- Intro to Podman
+- Intro to Podman
- redhat.com: Be careful when pulling images by short name
-- developers.redhat.com: Podman and Buildah for Docker users 🌟
+- developers.redhat.com: Podman and Buildah for Docker users 🌟
- podmain.io: Announcing Podman v2 Featuring a new REST API, Remote Clients, Auto-update, Systemd Integration Improvements and more!
- youtube: Getting started with Podman
-- Podman remote clients for macOS and Windows Podman manages your containers on a Linux host. Manage your containers from macOS or Windows by using the Podman remote client.
-- developers.redhat.com: Rootless containers with Podman: The basics
-- tecmint.com: How to Manage Containers Using Podman and Skopeo in RHEL 8
-- thenewstack.io: Tutorial: Host a Local Podman Image Registry 🌟
-- redhat.com: Using Podman and Docker Compose Podman 3.0 now supports Docker Compose to orchestrate containers.
-- redhat.com: From Docker Compose to Kubernetes with Podman Use Podman 3.0 to convert Docker Compose YAML to a format Podman recognizes.
-- fedoramagazine.org: Manage containers with Podman Compose
+- Podman remote clients for macOS and Windows Podman manages your containers on a Linux host. Manage your containers from macOS or Windows by using the Podman remote client.
+- developers.redhat.com: Rootless containers with Podman: The basics
+- tecmint.com: How to Manage Containers Using Podman and Skopeo in RHEL 8
+- thenewstack.io: Tutorial: Host a Local Podman Image Registry 🌟
+- redhat.com: Using Podman and Docker Compose Podman 3.0 now supports Docker Compose to orchestrate containers.
+- redhat.com: From Docker Compose to Kubernetes with Podman Use Podman 3.0 to convert Docker Compose YAML to a format Podman recognizes.
+- fedoramagazine.org: Manage containers with Podman Compose
- medium: Podman: Getting Started
- oldgitops.medium.com: Setting up Podman on WSL2 in Windows 10 🌟
- youtube: Podman in Podman (Running a container within a container)
-- “Forget about Docker image updating hassle. Podman offers simple auto updating capabilities. It works with conjunction with systemd. Just add label “io.containers.autoupdate=image” and run podman auto-update in cron or with help of systemd.timer and be done with it” puksiarz
+- “Forget about Docker image updating hassle. Podman offers simple auto updating capabilities. It works with conjunction with systemd. Just add label “io.containers.autoupdate=image” and run podman auto-update in cron or with help of systemd.timer and be done with it” puksiarz
- wbhegedus.me: Configuring Podman for WSL2 🌟
-- redhat.com: How to replace Docker with Podman on a Mac Want to use Podman to work with containers? Here’s what you need to know about Podman on a Mac.
-- redhat.com: Exploring the new Podman secret command 🌟 Use the new podman secret command to secure sensitive data when working with containers.
+- redhat.com: How to replace Docker with Podman on a Mac Want to use Podman to work with containers? Here’s what you need to know about Podman on a Mac.
+- redhat.com: Exploring the new Podman secret command 🌟 Use the new podman secret command to secure sensitive data when working with containers.
- developers.redhat.com: Using Podman Compose with Microcks: A cloud-native API mocking and testing tool
-- redhat.com: How to automate Podman installation and deployment using Ansible 🌟 Learn how to easily install and deploy Podman using Ansible in your environment.
-- tutorialworks.com: How to Start Containers Automatically, with Podman and Systemd
+- redhat.com: How to automate Podman installation and deployment using Ansible 🌟 Learn how to easily install and deploy Podman using Ansible in your environment.
+- tutorialworks.com: How to Start Containers Automatically, with Podman and Systemd
- youtube: Podman 3 and Docker Compose - How Does the Dockerless Compose Work? 🌟
-- fedoramagazine.org: Use Docker Compose with Podman to Orchestrate Containers on Fedora Linux
+- fedoramagazine.org: Use Docker Compose with Podman to Orchestrate Containers on Fedora Linux
- opensource.com: Run a Linux virtual machine in Podman Use Podman Machine to create a basic Fedora CoreOS VM to use with containers and containerized workloads.
- developers.redhat.com: Transitioning from Docker to Podman 🌟
-- pythonspeed.com: Using Podman with BuildKit, the better Docker image builder 🌟
-- devopscube.com: Podman Tutorial For Beginners: Step by Step Guides 🌟
-- kubernetespodcast.com: Podman, with Daniel Walsh and Brent Baude
-- redhat.com: How to use auto-updates and rollbacks in Podman
+- pythonspeed.com: Using Podman with BuildKit, the better Docker image builder 🌟
+- devopscube.com: Podman Tutorial For Beginners: Step by Step Guides 🌟
+- kubernetespodcast.com: Podman, with Daniel Walsh and Brent Baude
+- redhat.com: How to use auto-updates and rollbacks in Podman
- New auto-update capabilities enable you to use Podman in edge use cases, update workloads once they are connected to the network, and roll back failures to a known-good state.
- Podman: the best tool for running containers on the edge servers. On the edge you want no human intervention. Podman+systemd support auto-update of container image & rollback, when update fails.
- opensource.com: Get podman up and running on Windows using Linux Enable WSL 2 guests to run the podman, skopeo, or buildah commands from within Windows using the Linux distribution of your choice.
-- crunchtools.com: Should I Use Docker Compose Or Podman Compose With Podman?
+- crunchtools.com: Should I Use Docker Compose Or Podman Compose With Podman?
- medium.com: Exploring Docker alternative — Podman
- darumatic.com: Podman - Introduction 🌟
-- redhat.com: Build Kubernetes pods with Podman play kube Enhancements include building images and tearing down pods with play kube and support for Kubernetes-style init containers.
-- iongion.github.io: Podman Desktop Companion 🌟 Cross-platform desktop integrated application with consistent UI
-- redhat.com: How to replace Docker with Podman on a Mac, revisited Want to use Podman on macOS? There’s a new way with podman machine. Here’s what you need to know.
-- imaginarycloud.com: Podman vs Docker: What are the differences?
+- redhat.com: Build Kubernetes pods with Podman play kube Enhancements include building images and tearing down pods with play kube and support for Kubernetes-style init containers.
+- iongion.github.io: Podman Desktop Companion 🌟 Cross-platform desktop integrated application with consistent UI
+- redhat.com: How to replace Docker with Podman on a Mac, revisited Want to use Podman on macOS? There’s a new way with podman machine. Here’s what you need to know.
+- imaginarycloud.com: Podman vs Docker: What are the differences?
- opensource.com: Run containers on Linux without sudo in Podman Configure your system for rootless containers.
-- redhat.com: Create fast, easy, and repeatable containers with Podman and shell scripts
-- redhat.com: How to use Podman to get information about your containers Use the podman ps command to get size, resource consumption, and other information about your containers.
-- redhat.com: 5 Podman features to try now Improve how you use containers with these new Podman features: –latest, –replace, –all, –ignore, and –tz.
+- redhat.com: Create fast, easy, and repeatable containers with Podman and shell scripts
+- redhat.com: How to use Podman to get information about your containers Use the podman ps command to get size, resource consumption, and other information about your containers.
+- redhat.com: 5 Podman features to try now Improve how you use containers with these new Podman features: –latest, –replace, –all, –ignore, and –tz.
- Here’s how I stop all containers before: 🐳
docker stop $(docker ps -aq)
- Here’s how I stop/remove all containers with podman:
podman stop -a; podman rm -a
@@ -8027,11 +8027,11 @@
- medium.com/@raghavendraguttur: Podman Containers — Beginner’s Guide In this article, you will learn about Podman — an open-source tool for managing containers, images, volumes, and pods (group of containers). You will also compare it to buildah and skopeo.
- nilesh93.medium.com: Replacing Docker Desktop with Podman and Kind in MacOS
- dev.to: Containers without Docker (podman, buildah, and skopeo) In this article, you will learn how you can use Podman, Buildah, and Skopeo as replacements for the traditional Docker workflow, without the use of a daemon or root privileges
-- redhat.com/sysadmin/quadlet-podman Make systemd better for Podman with Quadlet. Quadlet, a tool merged into Podman 4.4, hides the complexity of running containers under systemd to make it easier to maintain unit files written from scratch.
+- redhat.com/sysadmin/quadlet-podman Make systemd better for Podman with Quadlet. Quadlet, a tool merged into Podman 4.4, hides the complexity of running containers under systemd to make it easier to maintain unit files written from scratch.
Podman Desktop
Containers In High Security Environments with Podman
@@ -8041,16 +8041,16 @@
Container Images
- sherifabdlnaby/kubephp 🐳 Production Grade, Rootless, and Optimized PHP Container Image Template for Cloud-Native Deployments and Kubernetes.
-- iximiuz.com: In Pursuit of Better Container Images: Alpine, Distroless, Apko, Chisel, DockerSlim, oh my!
+- iximiuz.com: In Pursuit of Better Container Images: Alpine, Distroless, Apko, Chisel, DockerSlim, oh my!
Red Hat Universal Base Image
- Introducing the Red Hat Universal Base Image 🌟
-- What is Red Hat Universal Base Image?
+- What is Red Hat Universal Base Image?
- RH Universal Base Image FAQ
-- Red Hat Ecosystem Catalog
+- Red Hat Ecosystem Catalog
- ubi-micro: RHEL tiny images to build containers 🌟
-- developers.redhat.com: How to pick the right container base image
+- developers.redhat.com: How to pick the right container base image
Container Tools
@@ -8058,30 +8058,30 @@
bul: Interactive TUI for Exploring Kubernetes Container Logs - (Related to kubernetes-tools topic)
-
-
How to use the –privileged flag with container engines Let’s take a deep dive into what the –privileged flag does for container engines such as Podman, Docker, and Buildah.
+How to use the –privileged flag with container engines Let’s take a deep dive into what the –privileged flag does for container engines such as Podman, Docker, and Buildah.
- itnext.io: Docker, Kaniko, Buildah Different ways to build container images
- blog.kubesimplify.com: Getting started with ko: A fast container image builder for your Go applications
Buildah
-- Buildah.io A tool that facilitates building Open Container Initiative (OCI) container images
+- Buildah.io A tool that facilitates building Open Container Initiative (OCI) container images
-- developers.redhat.com: Getting started with Buildah
+- developers.redhat.com: Getting started with Buildah
- youtube: How to live without Docker for developers - Part 1 | Migration from Docker to Buildah and Podman
Skopeo
- Skopeo is a command line utility that performs various operations on container images and image repositories.
-- Promoting container images between registries with skopeo
+- Promoting container images between registries with skopeo
Images
Click to expand!
-
+
Tweets
diff --git a/crossplane.html b/crossplane.html
index 9f06bda1..cc07aaae 100644
--- a/crossplane.html
+++ b/crossplane.html
@@ -7688,13 +7688,13 @@
Introduction
-- crossplane.io Crossplane is an open source Kubernetes add-on that supercharges your Kubernetes clusters enabling you to provision and manage infrastructure, services, and applications from kubectl.
-- Crossplane, a Universal Control Plane API for Cloud Computing
-- Crossplane as an OpenShift Operator to manage and provision cloud-native services
-- Crossplane: A Kubernetes Control Plane to Roll Your Own PaaS
+- crossplane.io Crossplane is an open source Kubernetes add-on that supercharges your Kubernetes clusters enabling you to provision and manage infrastructure, services, and applications from kubectl.
+- Crossplane, a Universal Control Plane API for Cloud Computing
+- Crossplane as an OpenShift Operator to manage and provision cloud-native services
+- Crossplane: A Kubernetes Control Plane to Roll Your Own PaaS
- medium: Using Crossplane to Provision a Kubernetes Cluster in Google Cloud
- upbound/platform-ref-multi-k8s: Upbound’s reference platform for multi-cloud Kubernetes with Crossplane Use crossplane and provision new EKS/AKS/GKE clusters declaratively and have them continuously managed for you.
-- codefresh.io: Using GitOps for Infrastructure and Applications With Crossplane and Argo CD
+- codefresh.io: Using GitOps for Infrastructure and Applications With Crossplane and Argo CD
- itnext.io: Why do developers find Kubernetes so hard? And how can Crossplane Kubernetes Provider help
- faun.pub: Defining Infrastructure Declaratively with Crossplane
- itnext.io: GitOpsify Cloud Infrastructure with Crossplane and Flux In this article, we are going to learn how to automate the provisioning of cloud resources via Crossplane and combine it with GitOps practices.
diff --git a/crunchydata.html b/crunchydata.html
index 439f5ea5..20db4efe 100644
--- a/crunchydata.html
+++ b/crunchydata.html
@@ -7948,87 +7948,87 @@
Introduction
-- crunchydata.com
-- learn.crunchydata.com 🌟
+- crunchydata.com
+- learn.crunchydata.com 🌟
- github.com/CrunchyData
- github.com/CrunchyData/postgres-operator
-- Documentation: Crunchy Data Container Suite 🌟
-- crunchydata blog: Deploying Active-Active PostgreSQL on Kubernetes
-- crunchydata blog: What’s New in Crunchy PostgreSQL Operator 4.0
-- slideshare.net: Deploying PostgreSQL on Kubernetes
-- slideshare.net: Operating PostgreSQL at Scale with Kubernetes
+- Documentation: Crunchy Data Container Suite 🌟
+- crunchydata blog: Deploying Active-Active PostgreSQL on Kubernetes
+- crunchydata blog: What’s New in Crunchy PostgreSQL Operator 4.0
+- slideshare.net: Deploying PostgreSQL on Kubernetes
+- slideshare.net: Operating PostgreSQL at Scale with Kubernetes
- Youtube: Demo of Crunchy Data Postgres Operator v1.0.0 (2017)
- Youtube: Crunchy PostgreSQL Operator for Kubernetes 3.4 Overview (2018)
- Youtube: OpenShift Meetup Tokyo #05 - Operator and Operator Lifecycle Manager on OpenShift (2019, openshift 4.1)
-- info.crunchydata.com: Monitoring PostgreSQL clusters in kubernetes
-- info.crunchydata.com: Deploy High-Availability PostgreSQL Clusters on Kubernetes by Example
-- info.crunchydata.com: Migrating from Oracle to PostgreSQL: Tips and Tricks
-- info.crunchydata.com: Scheduled PostgreSQL Backups and Retention Policies with Kubernetes
-- info.crunchydata.com: Guard Against Transaction Loss with PostgreSQL Synchronous Replication
-- info.crunchydata.com: Crunchy PostgreSQL for Kubernetes 4.3 Released Crunchy #PostgreSQL for #Kubernetes 4.3 released! Now supports multi-Kubernetes deployments, easier customization + installation, TLS, pgAdmin 4, improved pgBouncer support, and much more!
-- info.crunchydata.com: Deploy pgAdmin4 with PostgreSQL on Kubernetes
-- info.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
-- info.crunchydata.com: Quickly Document Your Postgres Database Using psql Meta-Commands
-- info.crunchydata.com: Fast CSV and JSON Ingestion in PostgreSQL with COPY
-- info.crunchydata.com: Composite Primary Keys, PostgreSQL and Django
-- info.crunchydata.com: Getting Started with PostgreSQL Operator 4.3 in OpenShift
-- info.crunchydata.com: Introducing the Postgres Prometheus Adapter
-- info.crunchydata.com: Getting Started with PostgreSQL Operator 4.3 in OpenShift
-- info.crunchydata.com: Deploying Active-Active PostgreSQL on Kubernetes
+- info.crunchydata.com: Monitoring PostgreSQL clusters in kubernetes
+- info.crunchydata.com: Deploy High-Availability PostgreSQL Clusters on Kubernetes by Example
+- info.crunchydata.com: Migrating from Oracle to PostgreSQL: Tips and Tricks
+- info.crunchydata.com: Scheduled PostgreSQL Backups and Retention Policies with Kubernetes
+- info.crunchydata.com: Guard Against Transaction Loss with PostgreSQL Synchronous Replication
+- info.crunchydata.com: Crunchy PostgreSQL for Kubernetes 4.3 Released Crunchy #PostgreSQL for #Kubernetes 4.3 released! Now supports multi-Kubernetes deployments, easier customization + installation, TLS, pgAdmin 4, improved pgBouncer support, and much more!
+- info.crunchydata.com: Deploy pgAdmin4 with PostgreSQL on Kubernetes
+- info.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
+- info.crunchydata.com: Quickly Document Your Postgres Database Using psql Meta-Commands
+- info.crunchydata.com: Fast CSV and JSON Ingestion in PostgreSQL with COPY
+- info.crunchydata.com: Composite Primary Keys, PostgreSQL and Django
+- info.crunchydata.com: Getting Started with PostgreSQL Operator 4.3 in OpenShift
+- info.crunchydata.com: Introducing the Postgres Prometheus Adapter
+- info.crunchydata.com: Getting Started with PostgreSQL Operator 4.3 in OpenShift
+- info.crunchydata.com: Deploying Active-Active PostgreSQL on Kubernetes
- opensource.com: Scaling PostgreSQL with Kubernetes Operators 🌟 Operators let users create standardized interfaces for managing stateful applications, like PostgreSQL, across Kubernetes-enabled cloud environments.
-- info.crunchydata.com: Setup ora2pg for Oracle to Postgres Migration
-- info.crunchydata.com: pgBackRest - Performing Backups on a Standby Cluster
-- thenewstack.io: Advanced Kubernetes Namespace Management with the PostgreSQL Operator 🌟
-- postgresql.org: Crunchy PostgreSQL Operator 4.5: Enhanced Monitoring, Custom Annotations, PostgreSQL 13 🌟
-- info.crunchydata.com: How to Setup PostgreSQL Monitoring in Kubernetes
-- info.crunchydata.com: PostgreSQL Monitoring for Application Developers: The DBA Fundamentals
+- info.crunchydata.com: Setup ora2pg for Oracle to Postgres Migration
+- info.crunchydata.com: pgBackRest - Performing Backups on a Standby Cluster
+- thenewstack.io: Advanced Kubernetes Namespace Management with the PostgreSQL Operator 🌟
+- postgresql.org: Crunchy PostgreSQL Operator 4.5: Enhanced Monitoring, Custom Annotations, PostgreSQL 13 🌟
+- info.crunchydata.com: How to Setup PostgreSQL Monitoring in Kubernetes
+- info.crunchydata.com: PostgreSQL Monitoring for Application Developers: The DBA Fundamentals
- youtube: OCB: High Availability PostgreSQL and more on OpenShift - Jonathan Katz (Crunchy Data) 🌟 Learn how the PostgreSQL Operator from Crunchy Data makes it easy to deploy high availability Postgres clusters on OpenShift. Beyond that, we’ll look at how the Operator pattern makes it possible to run your own open source database-as-a-service and cover the essential features: provisioning, HA, disaster recovery, monitoring, and how to do it all securely!
-- info.crunchydata.com: Tuning Your Postgres Database for High Write Loads
-- info.crunchydata.com: Using the PostgreSQL Operator with Rook Ceph Storage
-- info.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
-- info.crunchydata.com: An Easy Recipe for Creating a PostgreSQL Cluster with Docker Swarm
-- info.crunchydata.com: Deploying the PostgreSQL Operator on GKE
-- info.crunchydata.com: Using GitOps to Self-Manage Postgres in Kubernetes 🌟
-- info.crunchydata.com: Kubernetes Pod Tolerations and Postgres Deployment Strategies
-- blog.crunchydata.com: Helm, GitOps and the Postgres Operator
-- blog.crunchydata.com: Crunchy Postgres Operator 4.6.0 🌟
-- blog.crunchydata.com: Deploy PostgreSQL With TLS in Kubernetes
-- blog.crunchydata.com: Announcing Google Cloud Storage (GCS) Support for pgBackRest
+- info.crunchydata.com: Tuning Your Postgres Database for High Write Loads
+- info.crunchydata.com: Using the PostgreSQL Operator with Rook Ceph Storage
+- info.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
+- info.crunchydata.com: An Easy Recipe for Creating a PostgreSQL Cluster with Docker Swarm
+- info.crunchydata.com: Deploying the PostgreSQL Operator on GKE
+- info.crunchydata.com: Using GitOps to Self-Manage Postgres in Kubernetes 🌟
+- info.crunchydata.com: Kubernetes Pod Tolerations and Postgres Deployment Strategies
+- blog.crunchydata.com: Helm, GitOps and the Postgres Operator
+- blog.crunchydata.com: Crunchy Postgres Operator 4.6.0 🌟
+- blog.crunchydata.com: Deploy PostgreSQL With TLS in Kubernetes
+- blog.crunchydata.com: Announcing Google Cloud Storage (GCS) Support for pgBackRest
- youtube: Install and use Crunchy PostgreSQLfor OpenShift operator for simple todo app on OpenShift 🌟
-- blog.crunchydata.com: Query Optimization in Postgres with pg_stat_statements
-- blog.crunchydata.com: Kubernetes Pod Tolerations and Postgres Deployment Strategies 🌟
-- blog.crunchydata.com: Active-Active PostgreSQL Federation on Kubernetes
-- blog.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
-- blog.crunchydata.com: Next Generation Crunchy Postgres for Kubernetes 5.0 Released
-- blog.crunchydata.com: pgBackRest Point-In-Time Recovery Using Crunchy PostgreSQL Operator
-- blog.crunchydata.com: Using Cert Manager to Deploy TLS for Postgres on Kubernetes
+- blog.crunchydata.com: Query Optimization in Postgres with pg_stat_statements
+- blog.crunchydata.com: Kubernetes Pod Tolerations and Postgres Deployment Strategies 🌟
+- blog.crunchydata.com: Active-Active PostgreSQL Federation on Kubernetes
+- blog.crunchydata.com: Multi-Kubernetes Cluster PostgreSQL Deployments
+- blog.crunchydata.com: Next Generation Crunchy Postgres for Kubernetes 5.0 Released
+- blog.crunchydata.com: pgBackRest Point-In-Time Recovery Using Crunchy PostgreSQL Operator
+- blog.crunchydata.com: Using Cert Manager to Deploy TLS for Postgres on Kubernetes
- dzone: PostgreSQL HA and Kubernetes I share my thoughts about how to set up a PostgreSQL Database in Kubernetes with some level of high availability, introducing 3 different architectural styles to do so.
-- blog.crunchydata.com: Can’t Resize your Postgres Kubernetes Volume? No Problem!
-- blog.crunchydata.com: Your Guide to Connection Management in Postgres 🌟
-- blog.crunchydata.com: PostgreSQL 14 on Kubernetes (with examples!)
-- blog.crunchydata.com: Kubernetes + Postgres Cluster From Scratch on Rocky 8
-- blog.crunchydata.com: Kubernetes + Postgres Cluster From Scratch on Rocky 8
-- blog.crunchydata.com: Announcing Postgres Container Apps: Easy Deploy Postgres Apps With Postgres Container Apps you can, from directly inside Postgres with a simple function call, spin up a container that is running right alongside your Postgres database.
+- blog.crunchydata.com: Can’t Resize your Postgres Kubernetes Volume? No Problem!
+- blog.crunchydata.com: Your Guide to Connection Management in Postgres 🌟
+- blog.crunchydata.com: PostgreSQL 14 on Kubernetes (with examples!)
+- blog.crunchydata.com: Kubernetes + Postgres Cluster From Scratch on Rocky 8
+- blog.crunchydata.com: Kubernetes + Postgres Cluster From Scratch on Rocky 8
+- blog.crunchydata.com: Announcing Postgres Container Apps: Easy Deploy Postgres Apps With Postgres Container Apps you can, from directly inside Postgres with a simple function call, spin up a container that is running right alongside your Postgres database.
Crunchy Data Developer Portal
-- Announcing the Crunchy Data Developer Portal
+- Announcing the Crunchy Data Developer Portal
- Crunchy Data Developer Portal Self-service tools for developers and data scientists to easily get productive with PostgreSQL and Crunchy Data products.
Crunchy Data Postgres Operator in OpenShift 4. Overview & Proof of Concept
-- In earlier days, Red Hat recommended running PostgreSQL database outside the Kubernetes cluster. Now, with Kubernetes Operator technology, you can run stateful database applications on Kubernetes.
+- In earlier days, Red Hat recommended running PostgreSQL database outside the Kubernetes cluster. Now, with Kubernetes Operator technology, you can run stateful database applications on Kubernetes.
- Crunchy PostgreSQL Operator extends Kubernetes to give you the power to easily create, configure and manage PostgreSQL clusters at scale. When combined with the Crunchy PostgreSQL Container Suite, the Crunchy PostgreSQL Operator provides an open source software solution for PostgreSQL scaling, high-availability, disaster recovery, monitoring, and more. All of this capability comes with the repeatability and automation that comes from Operators on Kubernetes.
- Crunchy PostgreSQL Operator is open source and developed in close collaboration with users to support enterprise deployments of cloud agnostic PostgreSQL-as-a-Service capability. This release comes after extensive feedback from our customers and the community to ensure the scalability and security that sysadmins, DBAs, and developers have come to rely on.
-- Crunchy PostgreSQL and Openshift
+- Crunchy PostgreSQL and Openshift
- Crunchy Postgres Solutions:
- Postgres Operator Community Edition:
- ‘pgo’ CLI tool
- Not certified by Red Hat
- The Operator can be deployed by multiple methods including:
-- The PostgreSQL Operator Installer with kubectl
-- Install Operator Using Bash (the one used in this overview)
-- Ansible playbook installation
+- The PostgreSQL Operator Installer with kubectl
+- Install Operator Using Bash (the one used in this overview)
+- Ansible playbook installation
- CLI installation using OLM (Deprecated): new CatalogSource added via “pgo.catalogsource.yaml”.
- Openshift Console installation using OLM (OperatorHub):
- New CatalogSource requirement.
@@ -8051,8 +8051,8 @@
- Crunchy Containers Community Edition:
- Installation:
-- Installation guide
-- Pgadmin4 install (easy)
+- Installation guide
+- Pgadmin4 install (easy)
- Not certified by Red Hat
@@ -8187,7 +8187,7 @@ role "view"
SCC Recommendations
-- Use OpenShift’s Security Context Constraint feature, which has been contributed to Kubernetes as Pod Security Policies (PSP). PSPs are still beta in Kubernetes 1.10, 1.11, 1.12, 1.13, 1.14, 1.15 .
+- Use OpenShift’s Security Context Constraint feature, which has been contributed to Kubernetes as Pod Security Policies (PSP). PSPs are still beta in Kubernetes 1.10, 1.11, 1.12, 1.13, 1.14, 1.15 .
- Use the restricted SCC as the default
- For pods that require additional access, use the SCC that grants the least amount of additional privileges or create a custom SCC
- Remediation: Apply the SCC with the least privilege required
@@ -8294,7 +8294,7 @@ openshift.io/scc: restricted
-
References:
@@ -8306,7 +8306,7 @@ openshift.io/scc: restricted
Environment setup. Port Forward and WSL
-- Deployment method used in this presentation: Install Operator Using Bash
+- Deployment method used in this presentation: Install Operator Using Bash
- Config files setup by installer are saved in:
- “pgo” Project -> Deployments
- “pgo” Project -> Deployment Configs (empty, openshift feature not provided by CrunchyData)
@@ -8315,7 +8315,7 @@ openshift.io/scc: restricted
- References:
- WSL (Windows Subystem for Linux): alog/olog/clog functions must be adapted to be run in WSL’s Ubuntu:
@@ -8561,8 +8561,8 @@ Type "help"
Automate SQL Server Backups with PowerShell - (Related to kubernetes-backup-migrations topic)
+Automate SQL Server Backups with PowerShell - (Related to kubernetes-backup-migrations topic)
Expanding SQL Server Big Data Clusters capabilities, now on Red Hat OpenShift
+Expanding SQL Server Big Data Clusters capabilities, now on Red Hat OpenShift
SHMIG A database migration tool written in BASH consisting of just one file - shmig.
Awesome NotebookLM Slide Prompts - (Related to ai topic)
extraPortMappings to forward requests from your host to an NGINX ingress controllerGetting Started with Data Wrangler in VS Code - (Related to visual-studio topic)
developers.redhat.com: Developing on OpenShift (katacoda interactive learning) 🌟 Learn how to access an OpenShift cluster, manage apps with the odo command-line tool, then try image and source-based deployment techniques.
+developers.redhat.com: Developing on OpenShift (katacoda interactive learning) 🌟 Learn how to access an OpenShift cluster, manage apps with the odo command-line tool, then try image and source-based deployment techniques.
Public APIs Directory - (Related to api topic)
+Public APIs Directory - (Related to api topic)
What is a GitHub Wiki and How Do You Use it? - This article explains what a GitHub Wiki is, its benefits for project documentation, and provides a step-by-step guide on how to enable, create, and locally clone a wiki for a GitHub repository. It highlights that wikis are integrated with GitHub repositories and primarily use Markdown for content creation.
+What is a GitHub Wiki and How Do You Use it? - This article explains what a GitHub Wiki is, its benefits for project documentation, and provides a step-by-step guide on how to enable, create, and locally clone a wiki for a GitHub repository. It highlights that wikis are integrated with GitHub repositories and primarily use Markdown for content creation.
These tools help you manage servers and deploy happier and more often with more confidence.
DockSTARTer - (Related to docker topic)
@@ -7816,10 +7816,10 @@You know what’s missing? An easy tool that just installs capibilities (ArgoCD, Datadog, KubeVirt, etc.) in an easy way. One command to do it all. A tool that easily gets whatever capabilities you want your kubernetes cluster to have deployed in production. Capipe, which stands for Capibility Platform Engineering, allows you to specify capabilities that you want to install within your Platform Engineering environment.
GitHub Copilot Now Explains Failed Actions Jobs (GA) - (Related to cicd topic)
+GitHub Copilot Now Explains Failed Actions Jobs (GA) - (Related to cicd topic)
10 Real-World Kubernetes Troubleshooting Scenarios and Solutions - (Related to kubernetes-troubleshooting topic)
+10 Real-World Kubernetes Troubleshooting Scenarios and Solutions - (Related to kubernetes-troubleshooting topic)
Terraform: Get User Principal Name (UPN) of User Running Deployment without Entra ID Read Permissions - (Related to terraform topic)
+Terraform: Get User Principal Name (UPN) of User Running Deployment without Entra ID Read Permissions - (Related to terraform topic)
Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - (Related to kubernetes-tools topic)
+Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - (Related to kubernetes-tools topic)
Cloudburn: An Open-Source Policy Engine for AWS Spending - (Related to aws topic)
Update to Azure DevOps Allowed IP Addresses - (Related to azure topic)
+Update to Azure DevOps Allowed IP Addresses - (Related to azure topic)
dzone: 3 GPT-3 Tools for Developers, Software and DevOps Engineers, and SREs This article will explore GPT-3 applications in the developer space to discuss how GPT-3 can help DevOps Engineers, SREs, technical customer support, and developers.
Configure Microsoft Entra for Increased Security - (Related to kubernetes-security topic)
thenewstack.io: How Do Authentication and Authorization Differ?
+thenewstack.io: How Do Authentication and Authorization Differ?
Automating Microsoft Sentinel Deployment with Azure DevOps CI/CD - (Related to azure topic)
thenewstack.io: Security Insights into Infrastructure-as-Code
+thenewstack.io: Security Insights into Infrastructure-as-Code
traceable.ai: Use the OWASP API Top 10 To Secure Your APIs The OWASP API Top 10 documents the risks associated with API development. Here are the vulnerabilities highlighted in the most recent OWASP API Top 10:
+traceable.ai: Use the OWASP API Top 10 To Secure Your APIs The OWASP API Top 10 documents the risks associated with API development. Here are the vulnerabilities highlighted in the most recent OWASP API Top 10:
cequence.ai: The OWASP API Security Top 10 From a Real-World Perspective
+cequence.ai: The OWASP API Security Top 10 From a Real-World Perspective
GitHub Code Security Risk Assessment: Free Vulnerability Scanning - This blog post from GitHub introduces the Code Security Risk Assessment, a free, one-click tool that scans up to 20 active repositories for vulnerabilities using CodeQL. It provides a dashboard summarizing findings by severity, language, detected rules, and vulnerable repositories, aiming to help organizations quickly identify and prioritize code security risks.
+GitHub Code Security Risk Assessment: Free Vulnerability Scanning - This blog post from GitHub introduces the Code Security Risk Assessment, a free, one-click tool that scans up to 20 active repositories for vulnerabilities using CodeQL. It provides a dashboard summarizing findings by severity, language, detected rules, and vulnerable repositories, aiming to help organizations quickly identify and prioritize code security risks.
GitHub security: what does it take to protect your company from credentials leaking on GitHub? 🌟
+GitHub security: what does it take to protect your company from credentials leaking on GitHub? 🌟
medium.com/@nikhil.purva: Securing Kubernetes Secrets with HashiCorp Vault
Who is still copying images between registries with:
Docker for LLMs - This page from Docker introduces how Docker can be leveraged to deploy and manage Large Language Models (LLMs), highlighting its capabilities in simplifying the LLM development lifecycle. It covers aspects like packaging models, managing dependencies, and scaling LLM applications.
+Docker for LLMs - This page from Docker introduces how Docker can be leveraged to deploy and manage Large Language Models (LLMs), highlighting its capabilities in simplifying the LLM development lifecycle. It covers aspects like packaging models, managing dependencies, and scaling LLM applications.
Docker Hardened Images for Every Developer 🌟 - This article from Docker introduces their new hardened images, designed to provide developers with a more secure foundation for building and deploying containerized applications. It highlights the benefits of using these images and how they contribute to a stronger security posture.
+Docker Hardened Images for Every Developer 🌟 - This article from Docker introduces their new hardened images, designed to provide developers with a more secure foundation for building and deploying containerized applications. It highlights the benefits of using these images and how they contribute to a stronger security posture.
thehackernews.com: Docker Images Containing Cryptojacking Malware Distributed via Docker Hub
docker scan that scans local images against the Snyk security engine, providing you with security visibility into your local Dockerfiles and images.docker scan that scans local images against the Snyk security engine, providing you with security visibility into your local Dockerfiles and images.scratch as the base imageBUILDKIT_INLINE_CACHE=1 build-arg is a neat flag that you could add to your docker build to reduce the build time upto 89%DockSTARTer - DockSTARTer is a project designed to simplify the process of running applications within Docker. It aims to provide a quick and easy way to get started with Docker, offering users the option to rely on it for various Docker system configurations or use it as a learning tool for more advanced setups.
stepchowfun/docuum: Docuum: LRU eviction of Docker images 🌟 Docuum performs least recently used (LRU) eviction of Docker images.
What is Podman and How Does it Compare to Docker? - (Related to container-managers topic)
+What is Podman and How Does it Compare to Docker? - (Related to container-managers topic)
Extend your coding agent with .NET Skills - (Related to ai topic)
+Extend your coding agent with .NET Skills - (Related to ai topic)
Oakton Add Robust Command Line Options to .Net Applications
+Oakton Add Robust Command Line Options to .Net Applications
medium.com/@tarunbehal02: AWS Cost Optimizations : My Learnings
A Guide to Azure Data Transfer Pricing - (Related to azure topic)
ServerlessHorrors: A Web Compiling Nightmares in the Serverless World - (Related to serverless topic)
+ServerlessHorrors: A Web Compiling Nightmares in the Serverless World - (Related to serverless topic)
medium.com/compass-true-north: Halving Kubernetes Compute Costs With Vertical Pod Autoscaler In this article, you’ll learn how the team at Compass managed to reduce the need for over 50 per cent of the total nodes in each cluster (halving their compute costs) by using the vertical pod autoscaler
@@ -7912,8 +7912,8 @@OpenOps: No-Code FinOps Automation Platform with AI - OpenOps is a no-code platform designed for FinOps automation, integrating AI capabilities to manage cloud costs and operations efficiently. It aims to simplify financial operations in cloud environments.
CAST AI cuts your cloud bill automatically so engineers can focus on building a better product
+CAST AI cuts your cloud bill automatically so engineers can focus on building a better product
Wikipedia: Design by contract (DbC), also known as contract programming, programming by contract and design-by-contract programming, is an approach for designing software.
@@ -8737,14 +8737,14 @@git help workflowsgit flow commands versus raw git commandsWhat is a GitHub Wiki and How Do You Use it? - (Related to developerportals topic)
+What is a GitHub Wiki and How Do You Use it? - (Related to developerportals topic)
github.blog: Testing cloud apps with GitHub Actions and cloud-native open source tools
+github.blog: Testing cloud apps with GitHub Actions and cloud-native open source tools
workflow_dispatchworkflow_dispatchharness.io: Managing the ‘Git’ in ‘GitOps’: 4 Ways to Structure Code in Your GitOps Repos 🌟 Declarative, immutable, and continuously reconciled infrastructure brings many benefits when managed through GitOps best practices. Here are four approaches to managing code used in those pipelines.
+harness.io: Managing the ‘Git’ in ‘GitOps’: 4 Ways to Structure Code in Your GitOps Repos 🌟 Declarative, immutable, and continuously reconciled infrastructure brings many benefits when managed through GitOps best practices. Here are four approaches to managing code used in those pipelines.
Announcing Private Preview: ArgoCD through Microsoft GitOps 🌟 - Microsoft is announcing the private preview of ArgoCD delivered as a cluster extension for Azure Kubernetes Service (AKS) and Azure Arc-enabled Kubernetes. This offering aims to provide a consistent management, security, and deployment experience for ArgoCD across heterogeneous environments, complementing existing Flux support. Key advantages highlighted include simplified deployment, managed upgrades, official supportability, integration with Azure identity, and sample application deployments.
FluxCD, ArgoCD or Jenkins X: Which Is the Right GitOps Tool for You?
+FluxCD, ArgoCD or Jenkins X: Which Is the Right GitOps Tool for You?
Terraform Best Practices - (Related to terraform topic)
ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API - (Related to kubernetes topic)
+ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API - (Related to kubernetes topic)
medium.com/bumble-tech: GitOps for multi-cluster K8s environments 🌟 A single repository approach for scalability and transparency
@@ -8416,15 +8416,15 @@
Koa.js - (Related to web-servers topic)
go-micro Go Micro is a framework for distributed systems development
+go-micro Go Micro is a framework for distributed systems development
IntelliJ vs. VSCode for Rust Development - (Related to devel-sites topic)
jcchavezs/porto Tool for adding vanity imports URI to Go files. If you want to enforce vanity import paths, it automates the addition of the import directive.
+jcchavezs/porto Tool for adding vanity imports URI to Go files. If you want to enforce vanity import paths, it automates the addition of the import directive.
blog.searce.com: Transform Kubernetes Manifests into Helm Chart
helm-docs tool auto-generates documentation from helm charts into markdown files. The resulting files contain metadata about their respective chart and a table with each of the chart’s values, their defaults, and an optional description parsed from comments.Automating Kubernetes Deployments with Helm Charts 🌟 - This article explains how to automate Kubernetes deployments using Helm charts. It covers the creation of Helm charts, their structure, and how to use them for consistent and repeatable application deployments in Kubernetes environments.
Platform Engineering Guide - 5 Key Use Cases of Internal Developer Platforms - (Related to devops topic)
stackoverflow.blog: Infrastructure as code: Create and configure infrastructure elements in seconds IaC allows developers to supply IT environments with multiple lines of code and can be deployed in a matter of minutes (in contrast to manual infrastructure, which can take hours if not days to be deployed).
+stackoverflow.blog: Infrastructure as code: Create and configure infrastructure elements in seconds IaC allows developers to supply IT environments with multiple lines of code and can be deployed in a matter of minutes (in contrast to manual infrastructure, which can take hours if not days to be deployed).
AWS Well-Architected IaC Analyzer - (Related to aws-architecture topic)
+AWS Well-Architected IaC Analyzer - (Related to aws-architecture topic)
Checkmarx/kics Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx. KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
@@ -7856,9 +7856,9 @@Azure Cloud Adoption Framework: Platform Landing Zone Implementation Options - (Related to azure topic)
IBM Vault 2.0 UI Enhancements and Reporting Improvements - This update to IBM Vault 2.0 focuses on improving the user interface for better feature discoverability and product usability. It also includes reporting enhancements to provide greater transparency and support for forecasting.
Nubenetes V2: Agentic Elite Edition is now live!
Looking for a high-density, AI-curated experience? Explore our V2 Elite Portal - Optimized for 2026 Architectural Standards.
A curated list of awesome references collected since 2018. Microservices architectures rely on DevOps practices, automation, CI/CD (Continuous Integration & Delivery), and API-focused designs.
-Nubenetes is also available at this other site.
+Nubenetes is also available at this other site.
“I do not believe you can do today’s job with yesterday’s methods and be in business tomorrow” (Horatio Nelson Jackson)
-
-
+
+
-
+
The 12-Factor App: An Updated Guide 🌟 - An updated guide to the 12-Factor App methodology, originally introduced by Adam Wiggins of Heroku. This article reviews the methodology, its original formulation, and its evolution in modern software development, touching on aspects like codebase management and dependency handling.
Enterprise Web App Patterns - Azure Architecture Center - (Related to azure topic)
+Enterprise Web App Patterns - Azure Architecture Center - (Related to azure topic)
dzone: 7 Microservices Best Practices for Developers 🌟 In this article, we’ll look at some microservices best practices and suggest a few ways to help you design, orchestrate, and secure your microservices architecture.
javarevisited.blogspot.com: Top 10 Microservices Design Patterns and Principles - Examples
GitHub for Beginners: Getting Started with OSS Contributions - (Related to git topic)
+GitHub for Beginners: Getting Started with OSS Contributions - (Related to git topic)
ubiqum.com: 20 Software Development Tools that will make you more productive
+ubiqum.com: 20 Software Development Tools that will make you more productive
AKS Labs - Introduction - (Related to kubernetes-tutorials topic)
+AKS Labs - Introduction - (Related to kubernetes-tutorials topic)
itnext.io: Observing gRPC-based Microservices on Amazon EKS running Istio Observing a gRPC-based Kubernetes application using Jaeger, Zipkin, Prometheus, Grafana, and Kiali on Amazon EKS running Istio service mesh
@@ -8015,9 +8015,9 @@ IstioMesh, PrometheusIO, Flux v2 & Flagger.Implementing Istio From Start To Finish 🌟 - A comprehensive guide on implementing Istio as a Service Mesh in a Kubernetes environment, covering installation methods (Helm), enabling mTLS, and ensuring sidecar injection into pods. It highlights the common reasons for adopting a service mesh, such as encryption, traffic visibility, and network resilience.
+Implementing Istio From Start To Finish 🌟 - A comprehensive guide on implementing Istio as a Service Mesh in a Kubernetes environment, covering installation methods (Helm), enabling mTLS, and ensuring sidecar injection into pods. It highlights the common reasons for adopting a service mesh, such as encryption, traffic visibility, and network resilience.
Istio Performance/Stability Testing
diff --git a/java-and-java-performance-optimization.html b/java-and-java-performance-optimization.html index a50a8479..933801f9 100644 --- a/java-and-java-performance-optimization.html +++ b/java-and-java-performance-optimization.html @@ -7872,8 +7872,8 @@| StackOverflowError | -ref | +ref |
| etc | @@ -7967,20 +7967,20 @@
PermGen no pertenece al heap y los objetos no son promocionados a esta sección de memoria gestionada durante un GC. Como bien dices es un espacio contiguo al heap, pero también se limpia cada vez que la tenured/old generation procede a un GC. No es una generación separada del mismo modo que es la young generation, y no hay un mecanismo específico para un GC separado de PermGen. La tenured/old generation y la permanent generation proceden a un GC cuando una de las dos se llena.
diff --git a/java_app_servers.html b/java_app_servers.html index f71be934..77413733 100644 --- a/java_app_servers.html +++ b/java_app_servers.html @@ -7765,7 +7765,7 @@Install Java 23 in an Azure DevOps Pipeline - (Related to azure topic)
+Install Java 23 in an Azure DevOps Pipeline - (Related to azure topic)
## Hibernate
@KubernetesApplication(name="my-app") in your code, that generates your deployment manifest yml:IntelliJ vs. VSCode for Rust Development - (Related to devel-sites topic)
canva.com Create cover images, graphs, videos and more
+canva.com Create cover images, graphs, videos and more
Clean Architecture on Frontend - (Related to aws-architecture topic)
+Clean Architecture on Frontend - (Related to aws-architecture topic)
cult.honeypot.io: Best Frontend JavaScript Frameworks To Learn 2021
+cult.honeypot.io: Best Frontend JavaScript Frameworks To Learn 2021
Buildbot - (Related to cicd topic)
+Buildbot - (Related to cicd topic)
Back of the Napkin Guide to Updating Jenkins - A personal guide detailing the process of updating Jenkins servers, particularly for those less experienced. It covers pre-work like plugin management and changelog review, backup strategies for security roles and user configurations, and emphasizes taking snapshots before starting the upgrade.
+Back of the Napkin Guide to Updating Jenkins - A personal guide detailing the process of updating Jenkins servers, particularly for those less experienced. It covers pre-work like plugin management and changelog review, backup strategies for security roles and user configurations, and emphasizes taking snapshots before starting the upgrade.
Jenkins X is a specialized Jenkins for Kubernetes: This is how it works from a bird eye the CI/CD: a developer creates a branch, then Jenkins X creates a ephemeral namespace with that branch. The developer tests it and once it is ok, a PR is created, then, the branch is deployed in staging. When I merge it, it goes to QA, and with a manual command “jx promote” it goes to production. Jenkins X deletes automatically after N hours the branch namespace.
-Why Do We Need Jenkins X To Be Serverless? Initially, Jenkins X had a stripped-down version of Jenkins but, since the release 2, not a single line of the traditional Jenkins is left in Jenkins X. Now it is fully serverless thanks to Tekton and a lot of custom code written from scratch to support the need for a modern Kubernetes-based solution.
+Jenkins X is a specialized Jenkins for Kubernetes: This is how it works from a bird eye the CI/CD: a developer creates a branch, then Jenkins X creates a ephemeral namespace with that branch. The developer tests it and once it is ok, a PR is created, then, the branch is deployed in staging. When I merge it, it goes to QA, and with a manual command “jx promote” it goes to production. Jenkins X deletes automatically after N hours the branch namespace.
+Why Do We Need Jenkins X To Be Serverless? Initially, Jenkins X had a stripped-down version of Jenkins but, since the release 2, not a single line of the traditional Jenkins is left in Jenkins X. Now it is fully serverless thanks to Tekton and a lot of custom code written from scratch to support the need for a modern Kubernetes-based solution.
kubectl. Just add verbose logging level of 8+ and you will get the API calls!kubectl. Just add verbose logging level of 8+ and you will get the API calls!kubectl get pods -v=8kubectl create job my-job --image=busybox --dry-run=server -v8for r in $(kubectl api-resources|grep -v ^N|awk '{print $1}');do kubectl explain $r --recursive;done
source <(kubectl completion bash) # setup autocomplete in bash into the current shell, bash-completion package should be installed first.
@@ -7979,12 +7979,12 @@
kubectl exec
-
-
A Complete Guide to Kubectl exec - (Related to kubernetes-tools topic)
+A Complete Guide to Kubectl exec - (Related to kubernetes-tools topic)
-
itnext.io: Connect to containers using Kubectl Exec In this article, we will look at the kubectl exec command to show how to get a shell into a running container in your Kubernetes (K8S) cluster, and how to run individual commands on a container with some useful examples.
-- goteleport.com: kubectl exec vs SSH This article compares
kubectl exec and SSH and discusses their strengths and weaknesses
+- goteleport.com: kubectl exec vs SSH This article compares
kubectl exec and SSH and discusses their strengths and weaknesses
kubectl scale
kubectl debug
@@ -8020,8 +8020,8 @@
Export resources with kubectl and python
Buildkit CLI for kubectl a drop in replacement for docker build
-- container-registry.com: Lifting Developers’ Productivity 🌟 With BuildKit CLI for kubectl a drop in replacement for docker build. In this post, you will learn how to build container images with BuildKit CLI for kubectl (a replacement for the
docker build command)
-- vmware-tanzu/buildkit-cli-for-kubectl (kubectl plugin) BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster.
+- container-registry.com: Lifting Developers’ Productivity 🌟 With BuildKit CLI for kubectl a drop in replacement for docker build. In this post, you will learn how to build container images with BuildKit CLI for kubectl (a replacement for the
docker build command)
+- vmware-tanzu/buildkit-cli-for-kubectl (kubectl plugin) BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster.
Kubectl Alternatives
@@ -8030,13 +8030,13 @@
Manage Kubernetes (K8s) objects with Ansible Kubernetes Module
-- Manage Kubernetes (K8s) objects
-- ansibleforkubernetes.com 🌟
+- Manage Kubernetes (K8s) objects
+- ansibleforkubernetes.com 🌟
Jenkins Kubernetes Plugins
-- Jenkins Kubernetes Plugin
-- Kubernetes Continuous Deploy
+- Jenkins Kubernetes Plugin
+- Kubernetes Continuous Deploy
Videos
diff --git a/kubernetes-alternatives.html b/kubernetes-alternatives.html
index 77481e58..97fb32a3 100644
--- a/kubernetes-alternatives.html
+++ b/kubernetes-alternatives.html
@@ -7828,14 +7828,14 @@
Introduction
-- simform.com: Top Alternatives to Kubernetes to Overcome Business Challenges Looking for alternatives to Kubernetes to overcome orchestration challenges? Here are eight alternatives for optimized containerization!
+- simform.com: Top Alternatives to Kubernetes to Overcome Business Challenges Looking for alternatives to Kubernetes to overcome orchestration challenges? Here are eight alternatives for optimized containerization!
Why Not Use Kubernetes
- medium: Why Not Use Kubernetes? Is Kubernetes really right for your stack?
- medium: Your team might not need Kubernetes
-- thenewstack.io: Do I Really Need Kubernetes?
-- infoworld.com: When Kubernetes is not the solution
+- thenewstack.io: Do I Really Need Kubernetes?
+- infoworld.com: When Kubernetes is not the solution
- ably.com: No, we don’t use Kubernetes
Heroku
@@ -7844,53 +7844,53 @@
Amazon ECS
-- techtarget.com: Amazon ECS vs. Kubernetes: Which should you use on AWS? How can you approach container orchestration on AWS? Learn the basics about ECS, EKS, DIY Kubernetes and Fargate before you choose an application architecture for your workloads.
-- thenewstack.io: No Kubernetes Needed: Amazon ECS Anywhere The idea of ECS Anywhere is simple — run the same ECS agent designed for EC2 instances in external hosts such as bare metal servers, VMs, and even instances running in other public cloud environments.
+- techtarget.com: Amazon ECS vs. Kubernetes: Which should you use on AWS? How can you approach container orchestration on AWS? Learn the basics about ECS, EKS, DIY Kubernetes and Fargate before you choose an application architecture for your workloads.
+- thenewstack.io: No Kubernetes Needed: Amazon ECS Anywhere The idea of ECS Anywhere is simple — run the same ECS agent designed for EC2 instances in external hosts such as bare metal servers, VMs, and even instances running in other public cloud environments.
Cycle.io
- Cycle.io
-- thenewstack.io: Cycle.io: Meet the Team on a Mission to Replace Kubernetes
-- thenewstack.io: Cycle.io: A Container Orchestration Platform Aimed at Developers “Kubernetes has not been able to deliver this level of multicloud portability and ease of use with containers. Cycle promises to fill this gap.”
+- thenewstack.io: Cycle.io: Meet the Team on a Mission to Replace Kubernetes
+- thenewstack.io: Cycle.io: A Container Orchestration Platform Aimed at Developers “Kubernetes has not been able to deliver this level of multicloud portability and ease of use with containers. Cycle promises to fill this gap.”
Nomad
-- Nomad
-- Nomad an alternative to Kubernetes
-- “Let’s use Kubernetes!” Now you have 8 problems
-- nomadproject.io: Nomad vs. Kubernetes
-- codemotion.com: Nomad vs Kubernetes but without the complexity
+- Nomad
+- Nomad an alternative to Kubernetes
+- “Let’s use Kubernetes!” Now you have 8 problems
+- nomadproject.io: Nomad vs. Kubernetes
+- codemotion.com: Nomad vs Kubernetes but without the complexity
- sysadmincasts.com: Nomad 🌟
-- blog.cloudflare.com: How we use HashiCorp Nomad (Cloudflare using Nomad and Consul)
+- blog.cloudflare.com: How we use HashiCorp Nomad (Cloudflare using Nomad and Consul)
- atodorov.me: Why you should take a look at Nomad before jumping on Kubernetes
-- thenewstack.io: Conductor: Why We Migrated from Kubernetes to Nomad “After examining the Kubernetes source code, we realized that the default Kubernetes autoscaler is not designed for batch jobs, which typically have a low tolerance for delay.”
-- imaginarycloud.com: Nomad VS. Kubernetes: Container Orchestration Tools Compared
-- nomadproject.io: An alternative to Kubernetes
-- chaordic.io: Is Nomad a better Kubernetes?
+- thenewstack.io: Conductor: Why We Migrated from Kubernetes to Nomad “After examining the Kubernetes source code, we realized that the default Kubernetes autoscaler is not designed for batch jobs, which typically have a low tolerance for delay.”
+- imaginarycloud.com: Nomad VS. Kubernetes: Container Orchestration Tools Compared
+- nomadproject.io: An alternative to Kubernetes
+- chaordic.io: Is Nomad a better Kubernetes?
Portainer
-- Portainer Making Docker management easy
+- Portainer Making Docker management easy
- stackshare.io: Kubernetes vs Portainer
Docker Enterprise and Docker Universal Control Plane (UCP)
-- Universal Control Plane overview Docker Universal Control Plane (UCP) is the enterprise-grade cluster management solution from Docker. You install it on-premises or in your virtual private cloud, and it helps you manage your Docker cluster and applications through a single interface.
+- Universal Control Plane overview Docker Universal Control Plane (UCP) is the enterprise-grade cluster management solution from Docker. You install it on-premises or in your virtual private cloud, and it helps you manage your Docker cluster and applications through a single interface.
Docker Swarm
-- Docker Swarm
+- Docker Swarm
- galaxy.ansible.com: Docker Ansible Role Setup Docker on RHEL/CentOS and Debian/Ubuntu servers. The role supports Docker Engine’s “Swarm Mode” to create a cluster of Docker nodes.
- Kubernetes vs Docker Swarm: A Comprehensive Comparison
-- Alternative to Kubernetes: Docker Swarm
-- dotnettricks.com: Kubernetes vs Docker: Analyzing The Differences
-- freecodecamp.org: Kubernetes VS Docker: What’s the Difference? Explained With Example
+- Alternative to Kubernetes: Docker Swarm
+- dotnettricks.com: Kubernetes vs Docker: Analyzing The Differences
+- freecodecamp.org: Kubernetes VS Docker: What’s the Difference? Explained With Example
- kpatronas.medium.com: Docker swarm: High Availability
-- semaphoreci.com: Kubernetes vs Docker: Understanding Containers in 2021
-- linkedin.com: Docker Series : Docker Swarm - Lionel GURRET
-- cloudsavvyit.com: What is Docker Swarm Mode and When Should You Use It?
+- semaphoreci.com: Kubernetes vs Docker: Understanding Containers in 2021
+- linkedin.com: Docker Series : Docker Swarm - Lionel GURRET
+- cloudsavvyit.com: What is Docker Swarm Mode and When Should You Use It?
- swarmlet/swarmlet: Swarmlet A self-hosted, open-source Platform as a Service that enables easy swarm deployments, load balancing, automatic SSL, metrics, analytics and more.
-- thinksys.com: Docker Swarm vs. Kubernetes: Comparison 2022
+- thinksys.com: Docker Swarm vs. Kubernetes: Comparison 2022
Simplenetes
@@ -7900,14 +7900,14 @@
- Taubyte Alternative to Kubernetes that aims to eliminate as much ops as possible (NoOps)
- tau Implementation of Taubyte. Build a Cloud Computing Platform running few commands.
-- dreamland Implementation of Taubyte for local development and E2E testing automation.
+- dreamland Implementation of Taubyte for local development and E2E testing automation.
- llama.cpp plugin llama.cpp integration for WebAssembly
More comparisons and alternatives
-- blog.opstree.com: A Comparison Between Various Container Orchestration Services! (ECS vs Kubernetes)
-- itprotoday.com: 4 Alternatives to Kubernetes Container Orchestrator While nearly nine out of 10 organizations use Kubernetes, there are alternatives to consider if looking for a container orchestrator in 2022.
-- portainer.io: Kubernetes vs Docker Swarm vs Nomad - the orchestrator wars continue?
+- blog.opstree.com: A Comparison Between Various Container Orchestration Services! (ECS vs Kubernetes)
+- itprotoday.com: 4 Alternatives to Kubernetes Container Orchestrator While nearly nine out of 10 organizations use Kubernetes, there are alternatives to consider if looking for a container orchestrator in 2022.
+- portainer.io: Kubernetes vs Docker Swarm vs Nomad - the orchestrator wars continue?
- coolify.io Made self-hosting simple. An open-source & self-hostable Heroku / Netlify alternative (and even more).
Images
diff --git a/kubernetes-autoscaling.html b/kubernetes-autoscaling.html
index e4ef7b37..2bf168b7 100644
--- a/kubernetes-autoscaling.html
+++ b/kubernetes-autoscaling.html
@@ -7817,23 +7817,23 @@
Introduction
- levelup.gitconnected.com: Effects of Docker Image Size on AutoScaling w.r.t Single and Multi-Node Kube Cluster
-- infracloud.io: 3 Autoscaling Projects to Optimise Kubernetes Costs Three autoscaling use cases:
+- infracloud.io: 3 Autoscaling Projects to Optimise Kubernetes Costs Three autoscaling use cases:
- Autoscaling Event-driven workloads
- Autoscaling real-time workloads
- Autoscaling Nodes/Infrastructure
-- blog.scaleway.com: Understanding Kubernetes Autoscaling
-- infracloud.io: Kubernetes Autoscaling with Custom Metrics (updated) 🌟
-- sysdig.com: Kubernetes pod autoscaler using custom metrics
-- learnk8s.io: Architecting Kubernetes clusters — choosing the best autoscaling strategy 🌟 How to configure multiple autoscalers in Kubernetes to minimise scaling time and found out that 4 factors affect scaling:
+- blog.scaleway.com: Understanding Kubernetes Autoscaling
+- infracloud.io: Kubernetes Autoscaling with Custom Metrics (updated) 🌟
+- sysdig.com: Kubernetes pod autoscaler using custom metrics
+- learnk8s.io: Architecting Kubernetes clusters — choosing the best autoscaling strategy 🌟 How to configure multiple autoscalers in Kubernetes to minimise scaling time and found out that 4 factors affect scaling:
- HPA reaction time.
- CA reaction time.
- Node provisioning time.
- Pod creation time.
-- thenewstack.io: Reduce Kubernetes Costs Using Autoscaling Mechanisms
+- thenewstack.io: Reduce Kubernetes Costs Using Autoscaling Mechanisms
- cast.ai: Guide to Kubernetes autoscaling for cloud cost optimization 🌟
- thenewstack.io: Scaling Microservices on Kubernetes 🌟
- Horizontally scaling a monolith is much more difficult; and we simply can’t independently scale any of the “parts” of a monolith. This isn’t ideal, because it might only be a small part of the monolith that causes the performance problem. Yet, we would have to vertically scale the entire monolith to fix it. Vertically scaling a large monolith can be an expensive proposition.
@@ -7845,15 +7845,15 @@
- medium.com/airbnb-engineering: Dynamic Kubernetes Cluster Scaling at Airbnb In this post, you’ll learn about how Airbnb dynamically size their clusters using the Kubernetes Cluster Autoscaler, and highlight the functionality they’ve contributed to the sig-autoscaling community
- chaitu-kopparthi.medium.com: Scaling Kubernetes workloads using custom Prometheus metrics
- medium.com/@niklas.uhrberg: Auto scaling in Kubernetes using Kafka and application metrics — part 1 In this article, you will find a case study on auto scaling long-running jobs in Kubernetes using external metrics from Kafka and the application itself.
-- openai.com: Scaling Kubernetes to 7,500 Nodes
-- thinksys.com: Understanding Kubernetes Autoscaling Types of Kubernetes Autoscaling:
+- openai.com: Scaling Kubernetes to 7,500 Nodes
+- thinksys.com: Understanding Kubernetes Autoscaling Types of Kubernetes Autoscaling:
- Horizontal Pod Autoscaler (HPA)
- Vertical Pod Autoscaler (VPA)
- Cluster Autoscaler
- medium.com/mindboard: What is Autoscaling in Kubernetes? Autoscaling is useful feature in Kubernetes that helps you to automatically adjust the number & resource consumption of pods in your deployment to meet the changing needs of your app.
-- clickittech.com: Kubernetes Autoscaling: How to use the Kubernetes Autoscaler In this tutorial, you’ll install and test three different autoscaler on EKS:
+- clickittech.com: Kubernetes Autoscaling: How to use the Kubernetes Autoscaler In this tutorial, you’ll install and test three different autoscaler on EKS:
- Horizontal Pod Autoscaler
- Vertical Pod Autoscaler
- Cluster Autoscaler
@@ -7863,21 +7863,21 @@
Cluster Autoscaler Kubernetes Tool
- github.com/kubernetes: Kubernetes Cluster Autoscaler
-- Kubernetes Autoscaling in Production: Best Practices for Cluster Autoscaler, HPA and VPA In this article we will take a deep dive into Kubernetes autoscaling tools including the cluster autoscaler, the horizontal pod autoscaler and the vertical pod autoscaler. We will also identify best practices that developers, DevOps and Kubernetes administrators should follow when configuring these tools.
+- Kubernetes Autoscaling in Production: Best Practices for Cluster Autoscaler, HPA and VPA In this article we will take a deep dive into Kubernetes autoscaling tools including the cluster autoscaler, the horizontal pod autoscaler and the vertical pod autoscaler. We will also identify best practices that developers, DevOps and Kubernetes administrators should follow when configuring these tools.
- gitconnected.com: Kubernetes Autoscaling 101: Cluster Autoscaler, Horizontal Pod Autoscaler, and Vertical Pod Autoscaler
-- packet.com: Kubernetes Cluster Autoscaler
+- packet.com: Kubernetes Cluster Autoscaler
- itnext.io: Kubernetes Cluster Autoscaler: More than scaling out
- cloud.ibm.com: Containers Troubleshoot Cluster Autoscaler
-- platform9.com: Kubernetes Autoscaling Options: Horizontal Pod Autoscaler, Vertical Pod Autoscaler and Cluster Autoscaler
-- banzaicloud.com: Autoscaling Kubernetes clusters
-- tech.deliveryhero.com: Dynamically overscaling a Kubernetes cluster with cluster-autoscaler and Pod Priority
+- platform9.com: Kubernetes Autoscaling Options: Horizontal Pod Autoscaler, Vertical Pod Autoscaler and Cluster Autoscaler
+- banzaicloud.com: Autoscaling Kubernetes clusters
+- tech.deliveryhero.com: Dynamically overscaling a Kubernetes cluster with cluster-autoscaler and Pod Priority
- medium: Build Kubernetes Autoscaling for Cluster Nodes and Application Pods 🌟
- Auto-Scaling Your Kubernetes Workloads (K8s) 🌟
- medium: Cluster Autoscaler in Kubernetes
- itnext.io: Kubernetes Resources and Autoscaling — From Basics to Greatness 🌟
- kubedex.com: autoscaling 🌟
- chrisedrego.medium.com: Kubernetes AutoScaling Series: Cluster AutoScaler 🌟
-- symbiosis.host: Benchmarking Kubernetes node initialization In this benchmark, you will compare cluster initialization time across 8 managed Kubernetes providers
+- symbiosis.host: Benchmarking Kubernetes node initialization In this benchmark, you will compare cluster initialization time across 8 managed Kubernetes providers
- Kubernetes nodes are slow to initialize. OS’s have to be booted, networks have to be configured, kubelets need to initialize, certificates need to be issued and approved, and so on…
- The unfortunate side effect is that cluster autoscaling is limited by the time it takes to add more nodes into the pool. If your environment sees a sudden spike in usage there might not be enough time to scale up to handle the additional load.
- This volatility in usage will impact the amount of additional capacity that is necessary for your cluster to function during high stress. For very bursty settings you will need to configure more headroom to account for the hightened variance.
@@ -7885,16 +7885,16 @@
- In this benchmark we compared initialization time across 8 managed Kubernetes providers.
-- the-gigi.github.io: Advanced Kubernetes Scheduling and Autoscaling
+- the-gigi.github.io: Advanced Kubernetes Scheduling and Autoscaling
-
+
HPA and VPA
-- HPA: Horizontal Pod Autoscaler
+- HPA: Horizontal Pod Autoscaler
- VPA: Vertical Pod Autoscaler
-- returngis.net: Escalado vertical de tus pods en Kubernetes con VerticalPodAutoscaler
+- returngis.net: Escalado vertical de tus pods en Kubernetes con VerticalPodAutoscaler
- medium: Build Kubernetes Autoscaling for Cluster Nodes and Application Pods Via the Cluster Autoscaler, Horizontal Pod Autoscaler, and Vertical Pod Autoscaler
- itnext.io: Horizontal Pod Autoscaling with Custom Metric from Different Namespace
- Kubernetes autoscaling with Istio metrics 🌟 Scaling based on traffic is not something new to Kubernetes, an ingress controllers such as NGINX can expose Prometheus metrics for HPA. The difference in using Istio is that you can autoscale backend services as well, apps that are accessible only from inside the mesh.
@@ -7903,15 +7903,15 @@
- medium: 3/3 Autoscaling in Kubernetes: Why doesn’t the Horizontal Pod Autoscaler work for me?
-- around25.com: Horizontal Pod Autoscaler in Kubernetes 🌟
-- superawesome.com: Scaling pods with HPA using custom metrics. How we scale our kid-safe technology using Kubernetes 🌟
+- around25.com: Horizontal Pod Autoscaler in Kubernetes 🌟
+- superawesome.com: Scaling pods with HPA using custom metrics. How we scale our kid-safe technology using Kubernetes 🌟
- velotio.com: Autoscaling in Kubernetes using HPA and VPA
- kubectl-vpa Tool to manage VPAs (vertical-pod-autoscaler) resources in a kubernetes-cluster
- itnext.io: K8s Vertical Pod Autoscaling 🌟
- czakozoltan08.medium.com: Stupid Simple Scalability
-- sysdig.com: Trigger a Kubernetes HPA with Prometheus metrics Using Keda to query #prometheus in order to automatically create a Kubernetes HPA
-- cloudnatively.com: Understanding Horizontal Pod Autoscaling
-- blog.px.dev: Horizontal Pod Autoscaling with Custom Metrics in Kubernetes 🌟 In this post, you’ll learn how to autoscale your Kubernetes deployment using custom application metrics (i.e. HTTP requests/second)
+- sysdig.com: Trigger a Kubernetes HPA with Prometheus metrics Using Keda to query #prometheus in order to automatically create a Kubernetes HPA
+- cloudnatively.com: Understanding Horizontal Pod Autoscaling
+- blog.px.dev: Horizontal Pod Autoscaling with Custom Metrics in Kubernetes 🌟 In this post, you’ll learn how to autoscale your Kubernetes deployment using custom application metrics (i.e. HTTP requests/second)
- awstip.com: Kubernetes HPA HPA, the short form Horizontal pod autoscaling, is nothing but a piece of software that dynamically scales the pods based on thresholds like CPU, Memory, HTTP requests (custom metrics).
- medium.com/@CloudifyOps: Setting up a Horizontal Pod Autoscaler for Kubernetes cluster
- betterprogramming.pub: Advanced Features of Kubernetes’ Horizontal Pod Autoscaler Kubernetes’ Horizontal Pod Autoscaler has features you probably don’t know about. Here’s how to use them to your advantage.
@@ -7924,7 +7924,7 @@
- pauldally.medium.com: HorizontalPodAutoscaler uses request (not limit) to determine when to scale by percent In this article, you will learn how the Horizontal Pod Autoscaler uses requests (and not limits) when computing the target utilization percentage to scale pods
- dev.to: Scaling Your Application With Kubernetes | Pavan Belagatti
- github.com/jthomperoo: Predictive Horizontal Pod Autoscaler Horizontal Pod Autoscaler built with predictive abilities using statistical models. Predictive Horizontal Pod Autoscalers (PHPAs) are Horizontal Pod Autoscalers (HPAs) with extra predictive capabilities baked in, allowing you to apply statistical models to the results of HPA calculations to make proactive scaling decisions.
-- thenewstack.io: K8s Resource Management: An Autoscaling Cheat Sheet 🌟 A concise but comprehensive guide to using and managing horizontal and vertical autoscaling in the Kubernetes environment.
+- thenewstack.io: K8s Resource Management: An Autoscaling Cheat Sheet 🌟 A concise but comprehensive guide to using and managing horizontal and vertical autoscaling in the Kubernetes environment.
- waswani.medium.com: Autoscaling Pods in Kubernetes If you are hosting your workload in a cloud environment, and your traffic pattern is fluctuating in nature (think unpredictable), you need a mechanism to automatically scale out (and off-course scale in) your workload to ensure the service is able to perform as per defined Service Level Objective (SLO), without impacting the User Experience. This semantic is referred to as Autoscaling, to be very precise Horizontal Scaling.
- mckornfield.medium.com: Working with HPAs in Kubernetes How to make your Kubernetes workloads scale with a few simple steps
- code.egym.de: Vertical Pod Autoscaler in Kubernetes Learn how to use Vertical Pod Autoscaler (VPA) to vertically scale services in Kubernetes automatically based on resource metrics.
@@ -7935,22 +7935,22 @@
Kubernetes Scale to Zero
- dzone: Scale to Zero With Kubernetes with KEDA and/or Knative This article reviews how Kubernetes provides the platform capabilities for dynamic deployment, scaling, and management in Cloud-native applications.
-- dev.to/danielepolencic: Request-based autoscaling in Kubernetes: scaling to zero - linode.com: Scaling Kubernetes to Zero (And Back) In this article, you will learn how to monitor the HTTP requests to your apps in Kubernetes and define autoscaling rules to increase and decrease replicas for your workloads.
+- dev.to/danielepolencic: Request-based autoscaling in Kubernetes: scaling to zero - linode.com: Scaling Kubernetes to Zero (And Back) In this article, you will learn how to monitor the HTTP requests to your apps in Kubernetes and define autoscaling rules to increase and decrease replicas for your workloads.
Cluster Autoscaler and Helm
-- hub.helm.sh: cluster-autoscaler The cluster autoscaler scales worker nodes within an AWS autoscaling group (ASG) or Spotinst Elastigroup.
+- hub.helm.sh: cluster-autoscaler The cluster autoscaler scales worker nodes within an AWS autoscaling group (ASG) or Spotinst Elastigroup.
KEDA Kubernetes Event Driven Autoscaling
- keda.sh: Kubernetes Event-driven Autoscaling. Application autoscaling made simple. KEDA is a Kubernetes-based Event Driven Autoscaler. With KEDA, you can drive the scaling of any container in Kubernetes based on the number of events needing to be processed. https://github.com/kedacore/keda
- medium.com/backstagewitharchitects: How Autoscaling Works in Kubernetes? Why You Need To Start Using KEDA?
-- partlycloudy.blog: Horizontal Autoscaling in Kubernetes #3 – KEDA
-- thenewstack.io: CNCF KEDA 2.0 Scales up Event-Driven Programming on Kubernetes
+- partlycloudy.blog: Horizontal Autoscaling in Kubernetes #3 – KEDA
+- thenewstack.io: CNCF KEDA 2.0 Scales up Event-Driven Programming on Kubernetes
- blog.cloudacode.com: How to Autoscale Kubernetes pods based on ingress request — Prometheus, KEDA, and K6 In this article, you will learn how autoscale pods with KEDA, Prometheus and the metrics from the ingress-nginx. You will use k6 to generate the load and observe the pod count increase as more requests are handled by the ingress controller.
- medium.com/@toonvandeuren: Kubernetes Scaling: The Event Driven Approach - KEDA In this article, you’ll discuss two different approaches to automatic scaling of your apps within a Kubernetes cluster: the Horizontal Pod Autoscaler and the Kubernetes Event-Driven Autoscaler (KEDA) - youtube: Application Autoscaling Made Easy With Kubernetes Event-Driven Autoscaling (KEDA)
- Dzone: Autoscaling Your Kubernetes Microservice with KEDA Introduction to KEDA—event-driven autoscaler for Kubernetes, Apache Camel, and ActiveMQ Artemis—and how to use it to scale a Java microservice on Kubernetes.
-- tomd.xyz: Event-driven integration on Kubernetes with Camel & KEDA 🌟 Can we develop apps in Kubernetes that autoscale based on events? Perhaps, with this example using KEDA, ActiveMQ and Apache Camel.
+- tomd.xyz: Event-driven integration on Kubernetes with Camel & KEDA 🌟 Can we develop apps in Kubernetes that autoscale based on events? Perhaps, with this example using KEDA, ActiveMQ and Apache Camel.
- faun.pub: Scaling an app in Kubernetes with KEDA (no Prometheus is needed)
- itnext.io: Event Driven Autoscaling KEDA expands the capabilities of Kubernetes by managing the integration with external sources allowing you to auto-scale your Kubernetes Deployments based on data from both internal and external metrics.
- medium.com/@casperrubaek: Why KEDA is a game-changer for scaling in Kubernetes KEDA makes it possible to easily scale based on any metric imaginable from almost any metric provider and is running at a massive scale in production in the cloud at some of the largest corporations in the world.
@@ -7959,24 +7959,24 @@
- purushothamkdr453.medium.com: Event driven autoscaling in kubernetes using KEDA
- medium.com/@rtaplamaci: Horizontal Scaling on Kubernetes Clusters Based on AWS CloudWatch Metrics with KEDA In this article, you will learn how to use KEDA to horizontally scale the workloads running in a Kubernetes cluster based on the custom metrics exposed via AWS CloudWatch
- medium.com/@hirushanonline: Dynamic Scaling with Kubernetes Event-driven Autoscaling (KEDA)
-- kedify.io: Prometheus and Kubernetes Horizontal Pod Autoscaler don’t talk, KEDA does
+- kedify.io: Prometheus and Kubernetes Horizontal Pod Autoscaler don’t talk, KEDA does
- github.com/kedacore/keda/issues/2214 Scaler for Amazon managed service for Prometheus
-- opcito.com: A guide to mastering autoscaling in Kubernetes with KEDA
+- opcito.com: A guide to mastering autoscaling in Kubernetes with KEDA
- dev.to/vinod827: Scale your apps using KEDA in Kubernetes
Cluster Autoscaler and DockerHub
Cluster Autoscaler in GKE, EKS, AKS and DOKS
-- Amazon Web Services: EKS Cluster Autoscaler
-- eksworkshop.com: Configure Cluster Autoscaler (CA)
+- Amazon Web Services: EKS Cluster Autoscaler
-- Azure: AKS Cluster Autoscaler
-- Google Cloud Platform: GKE Cluster Autoscaler
-- DigitalOcean Kubernetes: DOKS Cluster Autoscaler
+- Azure: AKS Cluster Autoscaler
+- Google Cloud Platform: GKE Cluster Autoscaler
+- DigitalOcean Kubernetes: DOKS Cluster Autoscaler
Cluster Autoscaler in OpenShift
@@ -7991,7 +7991,7 @@
- itnext.io: Kubernetes: load-testing and high-load tuning — problems and solutions
- engineering.zalando.com: Building an End to End load test automation system on top of Kubernetes Learn how we built an end-to-end load test automation system to make load tests a routine task.
-- thenewstack.io: Sidecars are Changing the Kubernetes Load-Testing Landscape Sidecars don’t just capture traffic. They can replay it as well. They can also transform any metadata, like timestamps, before it sends it to your application.
+- thenewstack.io: Sidecars are Changing the Kubernetes Load-Testing Landscape Sidecars don’t just capture traffic. They can replay it as well. They can also transform any metadata, like timestamps, before it sends it to your application.
- medium.com/teamsnap-engineering: Load Testing a Service with ~20,000 Requests per Second with Locust, Helm, and Kustomize
Tweets
diff --git a/kubernetes-backup-migrations.html b/kubernetes-backup-migrations.html
index ea68df10..68a4eb6b 100644
--- a/kubernetes-backup-migrations.html
+++ b/kubernetes-backup-migrations.html
@@ -7810,12 +7810,12 @@
- kube-backup: Kubernetes resource state sync to git
- Stash If you are running production workloads in Kubernetes, you might want to take backup of your disks, databases etc. Stash is a cloud native data backup and recovery solution for Kubernetes workloads
-- thenewstack.io: Cloud Native Backups, Disaster Recovery and Migrations on Kubernetes
-- rancher.com: The No. 1 Rule of Disaster Recovery
-- rancher.com: Disaster Recovery Preparedness for Your Kubernetes Clusters 🌟
+- thenewstack.io: Cloud Native Backups, Disaster Recovery and Migrations on Kubernetes
+- rancher.com: The No. 1 Rule of Disaster Recovery
+- rancher.com: Disaster Recovery Preparedness for Your Kubernetes Clusters 🌟
- k8s-snapshots: Automatic Volume Snapshots on Kubernetes is an operator that creates and expires snapshots according to annotations to your PersistentVolume or PersistentVolumeClaim resources.
- infracloud.io: Protecting Kubernetes applications data using Kanister
-- kanister.io 🌟 An extensible open-source framework for application-level data management on Kubernetes. KANISTER allows domain experts to capture application specific data management tasks in blueprints which can be easily shared and extended. The framework takes care of the tedious details around execution on Kubernetes and presents a homogeneous operational experience across applications at scale.
+- kanister.io 🌟 An extensible open-source framework for application-level data management on Kubernetes. KANISTER allows domain experts to capture application specific data management tasks in blueprints which can be easily shared and extended. The framework takes care of the tedious details around execution on Kubernetes and presents a homogeneous operational experience across applications at scale.
- blog.kasten.io: Move Fast and Test in Kubernetes without Breaking Things with kanister and CI/CD 🌟
- When using data mobility to improve your CI/CD pipeline, it’s important to consider the data at different layers in your application stack. In many instances, you must perform operations on multiple layers of your application at once, as well as interact with Kubernetes itself. Kasten by Veeam developed Kanister to address these data mobility challenges and enable organizations to test safely with real data.
- Kanister, an open source project, provides a Kubernetes-native framework for application-level data management that supports complex data management workflows. Domain experts can capture application-specific data management tasks in blueprints, which can be easily shared and extended, eliminating many of the tedious details around execution on Kubernetes.
@@ -7824,24 +7824,24 @@
-- thenewstack.io: DevSecOps Teams Need Application-Consistent Backups for Kubernetes Workloads
-- percona.com: Using Volume Snapshot/Clone in Kubernetes (GKE & Percona Kubernetes Operator for XtraDB Cluster)
+- thenewstack.io: DevSecOps Teams Need Application-Consistent Backups for Kubernetes Workloads
+- percona.com: Using Volume Snapshot/Clone in Kubernetes (GKE & Percona Kubernetes Operator for XtraDB Cluster)
- longhorn issue: Move replica to a different server
-- aithority.com: Bacula Systems Announces World’s First Enterprise-Class Backup and Recovery Solution for Red Hat OpenShift
-- cloudify.co: Migrating Pods With Containerized Applications Between Nodes In The Same Kubernetes Cluster Using Cloudify 🌟
-- thenewstack.io: Red Hat Brings Backup, Snapshots to OpenShift Container Storage
+- aithority.com: Bacula Systems Announces World’s First Enterprise-Class Backup and Recovery Solution for Red Hat OpenShift
+- cloudify.co: Migrating Pods With Containerized Applications Between Nodes In The Same Kubernetes Cluster Using Cloudify 🌟
+- thenewstack.io: Red Hat Brings Backup, Snapshots to OpenShift Container Storage
- thenewstack.io: 5 Best Practices to Back up Kubernetes
-- Bacula Enterprise for OpenShift and Kubernetes 🌟
+- Bacula Enterprise for OpenShift and Kubernetes 🌟
- dani-izquierdo95.medium.com: Batch processing using Cron Jobs. MySQL automated backup on Openshift/K8s
- itnext.io: Backup and Restore of Kubernetes Stateful Application Data with CSI Volume Snapshots
- dev.to: Kubernetes Backup & Restore made easy! 🌟
- blog.kasten.io: 10 Key Takeaways from Kubernetes Backup & Recovery For Dummies
-- k8up.io Kubernetes Backup Operator distributed via a Helm chart, compatible with OpenShift and plain Kubernetes.
+- k8up.io Kubernetes Backup Operator distributed via a Helm chart, compatible with OpenShift and plain Kubernetes.
- medium.com/@amitabhprasad: Kubernetes volume backup for disaster recovery
-- thenewstack.io: K8s Backup and Disaster Recovery Is More Important Than Ever Here are some considerations of a successful Kubernetes data protection strategy.
+- thenewstack.io: K8s Backup and Disaster Recovery Is More Important Than Ever Here are some considerations of a successful Kubernetes data protection strategy.
- martinheinz.dev: Backup-and-Restore of Containers with Kubernetes Checkpointing API Kubernetes v1.25 introduced Container Checkpointing API as an alpha feature. This provides a way to backup-and-restore containers running in Pods, without ever stopping them. This feature is primarily aimed at forensic analysis, but general backup-and-restore is something any Kubernetes user can take advantage of. So, let’s take a look at this brand-new feature and see how we can enable it in our clusters and leverage it for backup-and-restore or forensic analysis.
- martinheinz.dev: Backup-and-Restore of Containers with Kubernetes Checkpointing API Kubernetes v1.25 introduced Container Checkpointing API — a way to backup-and-restore containers running in Pods, without stopping them. In this article, you’ll take a look at it and learn how to leverage it for backup-and-restore or forensic analysis.
-- blog.palark.com: Kubernetes snapshots: What are they and how to use them? 🌟 With snapshots, you can make more efficient use of your storage solution by creating consistent backups and cloning volumes. In this article, you will find an introduction to snapshots in Kubernetes and an overview of typical use cases.
+- blog.palark.com: Kubernetes snapshots: What are they and how to use them? 🌟 With snapshots, you can make more efficient use of your storage solution by creating consistent backups and cloning volumes. In this article, you will find an introduction to snapshots in Kubernetes and an overview of typical use cases.
ETCD Backup
@@ -7850,40 +7850,40 @@
Kubernetes Volume Snapshot
-- kubernetes.io: Kubernetes 1.20: Kubernetes Volume Snapshot Moves to GA
+- kubernetes.io: Kubernetes 1.20: Kubernetes Volume Snapshot Moves to GA
- itnext.io: Backup and Restore of Kubernetes Stateful Application Data with CSI Volume Snapshots
-- blocksandfiles.com: Red Hat OpenShift now does container storage backup 🌟 Red Hat has teamed up with three container backup suppliers to integrate their services with the company’s OpenShift Kubernetes distribution. The Red Hat-certified backup products for OpenShift container storage are parent company IBM’s Spectrum Protect Plus; TrilioVault for Kubernetes; and Veeam-owned Kasten’s K10.
+- blocksandfiles.com: Red Hat OpenShift now does container storage backup 🌟 Red Hat has teamed up with three container backup suppliers to integrate their services with the company’s OpenShift Kubernetes distribution. The Red Hat-certified backup products for OpenShift container storage are parent company IBM’s Spectrum Protect Plus; TrilioVault for Kubernetes; and Veeam-owned Kasten’s K10.
- medium: Leveraging operator pattern and VolumeSnapshots to backup databases in Kubernetes
Backup with Trillio Cloud-Native Data Protection for Kubernetes, OpenStack and Virtualization
- Trillio
-- TrillioVault for Kubernetes
+- TrillioVault for Kubernetes
- redhat.com: OpenShift Backup and Cluster failover with Triliovault 🌟
Backup with Kasten K10
-- Kasten
-- redhat.com: OpenShift Backup and Recovery with Kasten K10
+- Kasten
+- redhat.com: OpenShift Backup and Recovery with Kasten K10
- blog.kasten.io: Extending Kubernetes Application Backup and Mobility to the Edge with Kasten K10 V4.5
-- thenewstack.io: Kasten K10 V4.5: Grafana Observability, More Edge Support
+- thenewstack.io: Kasten K10 V4.5: Grafana Observability, More Edge Support
- faun.pub: Kasten K10 on KubeSphere to Ensure Kubernetes Backup and Restore
Backup with Velero
-- github.com/vmware-tanzu/velero Backup and migrate Kubernetes applications and their persistent volumes
+- github.com/vmware-tanzu/velero Backup and migrate Kubernetes applications and their persistent volumes
- akomljen.com: Kubernetes Backup and Restore with Velero 🌟
- wecloudpro.com: Kubernetes Disaster Recovery with Velero 🌟
- medium: Velero backup/restore for K8s Stateful Applications managed by Operators
-- cloud.redhat.com: Velero Backup and Restore of an Application Using gp2 StorageClass on ROSA
+- cloud.redhat.com: Velero Backup and Restore of an Application Using gp2 StorageClass on ROSA
- medium.com/@firat.yasar: Backup & Restore Kubernetes resources with VELERO
- skildops.medium.com: Backup an entire Kubernetes cluster using Velero to AWS S3 Maintaining backup is always rewarding. Learn how to backup and restore an entire K8s cluster in this detailed article
- blog.devgenius.io: Backup, Restore and Migrate Kubernetes Cluster resources using Velero In this tutorial, you’ll learn how to take a backup of resources running in a Kubernetes cluster and migrate them to another cluster using Velero
Backup with Portworx PX-Backup
-- PX-Backup
-- PX-Backup: docs
+- PX-Backup
+- PX-Backup: docs
- With PX-Backup, backups of OpenShift applications can also be provided in a secure, self-service environment.
Backup for GKE
@@ -7892,15 +7892,15 @@
Konveyor Open Source Migration Tool for Kubernetes
-- github.com/konveyor 🌟 - konveyor.io A community to build tools and document best practices to modernize workloads and bring them to Kubernetes.
-- containerjournal.com: Red Hat, IBM Launch Konveyor to Aggregate Kubernetes Tools
-- engineering.konveyor.io: Konveyor Engineering Knowledgebase Engineers working on Konveyor have started putting their own kbase articles here.
-- github.com/konveyor/crane: Crane 2.0 🌟 Crane 2, a tool for rehosting cloud workloads for Kubernetes.
+- github.com/konveyor 🌟 - konveyor.io A community to build tools and document best practices to modernize workloads and bring them to Kubernetes.
+- containerjournal.com: Red Hat, IBM Launch Konveyor to Aggregate Kubernetes Tools
+- engineering.konveyor.io: Konveyor Engineering Knowledgebase Engineers working on Konveyor have started putting their own kbase articles here.
+- github.com/konveyor/crane: Crane 2.0 🌟 Crane 2, a tool for rehosting cloud workloads for Kubernetes.
- youtube: Crane 2 Preview: Introduction and Demo Migrating workloads across clusters, from one k8s distro to another, will be the focus of open-source tool Crane 2.0. (A tool that’s part of the Konveyor community.)
-- kubebyexample.com: Migrating to Kubernetes with Open Source Tools (Konveyor, Tackle, KubeVirt, Forklift) 🌟 KubeByExample’s newest learning path applies open source tools to help you rehost, replatform, and refractor your applications to Kubernetes.
-- slideshare.net: Migrating Java JBoss EAP Applications to Kubernetes With S2I
+- kubebyexample.com: Migrating to Kubernetes with Open Source Tools (Konveyor, Tackle, KubeVirt, Forklift) 🌟 KubeByExample’s newest learning path applies open source tools to help you rehost, replatform, and refractor your applications to Kubernetes.
+- slideshare.net: Migrating Java JBoss EAP Applications to Kubernetes With S2I
- Despite the incredible pace of adoption of container orchestration platforms, the vast majority of EAP workloads are still running on VMs or bare metal. In a lot of cases enterprise operation teams are mandated to modernize and move these workloads to the cloud, and containerization and migration to Kubernetes is the natural destination. When talking about this migration path, we’re often asked questions like:
- What’s involved?
- How easy is it to move these workloads?
@@ -7916,9 +7916,9 @@
Other Tools
-- RKE2 Standalone Disaster Recovery Guide 🌟 - A comprehensive guide to recovering standalone RKE2 clusters not managed by Rancher, covering scenarios like etcd quorum loss, restoring from backup, and troubleshooting node join issues.
+- RKE2 Standalone Disaster Recovery Guide 🌟 - A comprehensive guide to recovering standalone RKE2 clusters not managed by Rancher, covering scenarios like etcd quorum loss, restoring from backup, and troubleshooting node join issues.
-
-
Automate SQL Server Backups with PowerShell - This article provides a PowerShell script to automate SQL Server backups. It outlines the script’s functionality, including generating backups for specified databases, prioritizing larger ones, and moving the backup files to a designated folder. Key configuration elements like SQL Server IP and instance name, user credentials, excluded databases, and log file path are detailed.
+Automate SQL Server Backups with PowerShell - This article provides a PowerShell script to automate SQL Server backups. It outlines the script’s functionality, including generating backups for specified databases, prioritizing larger ones, and moving the backup files to a designated folder. Key configuration elements like SQL Server IP and instance name, user credentials, excluded databases, and log file path are detailed.
-
k8up.io K8up is a Kubernetes Operator that helps you:
@@ -7932,7 +7932,7 @@
Books
-- kasten.io: Kubernetes Backup & Recovery For Dummies (Free e-book)
+- kasten.io: Kubernetes Backup & Recovery For Dummies (Free e-book)
Slides
diff --git a/kubernetes-based-devel.html b/kubernetes-based-devel.html
index d1644a6c..a29a266b 100644
--- a/kubernetes-based-devel.html
+++ b/kubernetes-based-devel.html
@@ -7911,10 +7911,10 @@
- murchie85.github.io: Installling minikube
- itnext.io: How to experiment locally on Kubernetes with minikube and your local Dockerfiles
- nfrankel.medium.com: Goodbye minikube I’ve been using minikube as my local cluster since I started to learn Kubernetes. But I’ve decided to let it go in favor of kind. Here’s the story.
-- linux.com: Getting Started With Kubernetes Is Easy With Minikube
+- linux.com: Getting Started With Kubernetes Is Easy With Minikube
- faun.pub: Accessing a remote minikube from a local computer Minikube is a lightweight Kubernetes implementation that creates a VM on your local machine. In this article, you will learn how to connect to a remote computer with minikube installed.
-- adamtheautomator.com: Jumpstart Kubernetes Locally with this MiniKube Tutorial You’ll usually find Kubernetes where it makes sense — i.e. in cloud environments. But how do you speed up development for Kubernetes? Could you test deployments locally?
-- devopscube.com: Kubernetes Minikube Tutorial for Beginners
+- adamtheautomator.com: Jumpstart Kubernetes Locally with this MiniKube Tutorial You’ll usually find Kubernetes where it makes sense — i.e. in cloud environments. But how do you speed up development for Kubernetes? Could you test deployments locally?
+- devopscube.com: Kubernetes Minikube Tutorial for Beginners
- kind Kubernetes IN Docker - local clusters for testing Kubernetes. Kind is a tool for running local Kubernetes clusters using Docker container “nodes”. kind was primarily designed for testing Kubernetes itself, but may be used for local development or CI.
@@ -7925,18 +7925,18 @@
- dev.to: How to run Minikube on Apple M1 chip without Docker Desktop using Colima
-- store.docker.com: Docker Community Edition EDGE with kubernetes. Installing Kubernetes using the Docker Client Currently only available in Edge edition.
+- store.docker.com: Docker Community Edition EDGE with kubernetes. Installing Kubernetes using the Docker Client Currently only available in Edge edition.
- medium.com: Local Kubernetes for Linux — MiniKube vs MicroK8s
- itnext.io: Run Kubernetes On Your Machine Several options to start playing with K8s in no time
-- padok.fr: MiniKube, Kubeadm, Kind, K3S, how to get started on Kubernetes?
-- loft.sh: Kubernetes Development Environments – A Comparison
+- padok.fr: MiniKube, Kubeadm, Kind, K3S, how to get started on Kubernetes?
+- loft.sh: Kubernetes Development Environments – A Comparison
- opensource.com: 4 ways to run Kubernetes locally Set up a local development environment or just try out the container orchestration platform with these tools.
- dex.dev: Local Development Clusters
- itnext.io: Kubernetes local playground alternatives
- dex.dev: Local Development Clusters
-- blog.radwell.codes: What’s the best Kubernetes distribution for local environments? 🌟
+- blog.radwell.codes: What’s the best Kubernetes distribution for local environments? 🌟
- Metal Kubes Create OnPrem Kubernetes Cluster. Install Kubernetes Cluster on Bare Metal Machines
-- blog.flant.com: Small Kubernetes for your local experiments: k0s, MicroK8s, kind, k3s, and Minikube
+- blog.flant.com: Small Kubernetes for your local experiments: k0s, MicroK8s, kind, k3s, and Minikube
- dj-wasabi/vagrant-kubernetes Playground for setting up small Kubernetes cluster on some vagrant boxes and practice with various examples to get familiar with K8s.
Kubernetes Based Development. Kubernetes Development Tools
@@ -7953,27 +7953,27 @@
-- garden.io
+- garden.io
- microcks.io K8s-based API mock/test tool.
-- loft.sh: Checklist for Kubernetes-Based Development 🌟
-- loft.sh: Kubernetes Development Environments – A Comparison
-- loft.sh: Skaffold vs Tilt vs DevSpace
+- loft.sh: Checklist for Kubernetes-Based Development 🌟
+- loft.sh: Kubernetes Development Environments – A Comparison
+- loft.sh: Skaffold vs Tilt vs DevSpace
- yitaek.medium.com: Useful Tools for Better Kubernetes Development 🌟 Lens, Polaris, kube-hunter, kube-bench, Trivy, Goldilocks, Kyverno, kube-ps1, kubectx + kubens , krew, kubectl-neat, kube-no-trouble, helm-mapkubeapis, kube-diff + helm-diff , kube forwarder, kubecost, kubespy.
- cncf.io: Tools to develop apps on Kubernetes 🌟
- blog.usejournal.com: Useful Tools for Better Kubernetes Development
-- rookout.com: Developer Tools for Kubernetes in 2021: Helm, Kustomize, and Skaffold (Part 1)
-- rookout.com: Developer Tools for Kubernetes in 2021 – Skaffold, Tilt, and Garden (Part 2) In that previous blog post, I also mentioned another tool – Skaffold. While Skaffold has limited ability to define Kubernetes applications and build and deploy them in CI/CD pipelines, it’s core functionality is creating a development environment for Kubernetes. In this blog post, I’ll discuss the alternative tools of doing just that – spinning up a development environment on Kubernetes. So let’s go into an in-depth comparison of Skaffold, Tilt, and Garden. I will not be covering Microsoft Draft, as the Github repository appears to be archived and has had no new versions in 2020.
-- rookout.com: Developer Tools for Kubernetes in 2021: Lens, VSCode, IntelliJ, & Gitpod (Part 3)
-- rookout.com: Developer Tools for Kubernetes in 2021: Docker, Kaniko, Buildpack & Jib (Part 4)
-- rookout.com: Developer Tools for Kubernetes in 2021: Development Machines (Part 5)
+- rookout.com: Developer Tools for Kubernetes in 2021: Helm, Kustomize, and Skaffold (Part 1)
+- rookout.com: Developer Tools for Kubernetes in 2021 – Skaffold, Tilt, and Garden (Part 2) In that previous blog post, I also mentioned another tool – Skaffold. While Skaffold has limited ability to define Kubernetes applications and build and deploy them in CI/CD pipelines, it’s core functionality is creating a development environment for Kubernetes. In this blog post, I’ll discuss the alternative tools of doing just that – spinning up a development environment on Kubernetes. So let’s go into an in-depth comparison of Skaffold, Tilt, and Garden. I will not be covering Microsoft Draft, as the Github repository appears to be archived and has had no new versions in 2020.
+- rookout.com: Developer Tools for Kubernetes in 2021: Lens, VSCode, IntelliJ, & Gitpod (Part 3)
+- rookout.com: Developer Tools for Kubernetes in 2021: Docker, Kaniko, Buildpack & Jib (Part 4)
+- rookout.com: Developer Tools for Kubernetes in 2021: Development Machines (Part 5)
- yitaek.medium.com: Useful Tools for Better Kubernetes Development
-- okteto.com: Kubernetes for Developers Blog Series by Okteto
-- docker.com: Kubernetes in Production Environments What is the best way to develop if my prod environment runs Kubernetes? Using Docker Compose does come with conditions:
+- okteto.com: Kubernetes for Developers Blog Series by Okteto
+- docker.com: Kubernetes in Production Environments What is the best way to develop if my prod environment runs Kubernetes? Using Docker Compose does come with conditions:
- It’s another tool in your arsenal. This means another set of manifests to maintain and update. If you need to define a new environment variable, you’ll need to add it to both your Compose file and Kubernetes manifests.
- You’ll have to vet changes against either prod or a staging environment since you’re not running Kubernetes locally.
@@ -7983,9 +7983,9 @@
Skaffold. Local Kubernetes Development
-- Skaffold 🌟
-- infracloud.io: Build and deploy Kubernetes apps with Skaffold
-- testingclouds.wordpress.com: Migrating from Docker Compose to Skaffold 🌟
+- Skaffold 🌟
+- infracloud.io: Build and deploy Kubernetes apps with Skaffold
+- testingclouds.wordpress.com: Migrating from Docker Compose to Skaffold 🌟
- dev.to: How to Simplify Your Local Kubernetes Development With Skaffold Skaffold is a tool that does everything with one single command:
- Builds Docker images
- Pushes them
@@ -7995,25 +7995,25 @@
DevSpace
-- devspace.sh
-- thenewstack.io: DevSpace Designed to Lower the Kubernetes Learning Curve
-- cloudsavvyit.com: How to Get Started With DevSpace and Rapidly Develop Kubernetes Apps
+- devspace.sh
+- thenewstack.io: DevSpace Designed to Lower the Kubernetes Learning Curve
+- cloudsavvyit.com: How to Get Started With DevSpace and Rapidly Develop Kubernetes Apps
Telepresence local development for k8s and openshift microservices
-- telepresence.io 🌟 Fast, local development for kubernetes and openshift microservices.
+- telepresence.io 🌟 Fast, local development for kubernetes and openshift microservices.
- betterprogramming.pub: Do Faster Development and Testing on Kubernetes Apps With Telepresence Use Telepresence to instantly deploy your code change to a Kubernetes cluster
-- thenewstack.io: Cloud Native Debugging Challenges: From Local to ‘Remocal’ Making remote clusters accessible, as though local, and giving developers tools to work locally in familiar ways are key ways to zap bugs and ship faster.
+- thenewstack.io: Cloud Native Debugging Challenges: From Local to ‘Remocal’ Making remote clusters accessible, as though local, and giving developers tools to work locally in familiar ways are key ways to zap bugs and ship faster.
- dev.to/dsudia: How to Integrate Docker & JetBrains into Telepresence Learn to debug Kubernetes containerized apps with Telepresence, set remote IDE breakpoints, manage Docker builds, and access cluster services. This guide covers environment setup, development practices, and IDE support for JVM and Go applications.
Bridge to Kubernetes
Garden
-- garden.io: cloud native devops platform
-- venturebeat.com: Garden.io, an end-to-end devops platform for Kubernetes and containers, raises $16M
+- garden.io: cloud native devops platform
+- venturebeat.com: Garden.io, an end-to-end devops platform for Kubernetes and containers, raises $16M
Kubernetes Clients and Dashboards
@@ -8022,36 +8022,36 @@
- PDF
-- loft.sh: Kubernetes Dashboards: Headlamp - Headlamp Dashboard
-- blog.tekspace.io: Deploying Kubernetes Dashboard in K3S Cluster
+- loft.sh: Kubernetes Dashboards: Headlamp - Headlamp Dashboard
+- blog.tekspace.io: Deploying Kubernetes Dashboard in K3S Cluster
- williamlam.com: Useful Interactive Terminal and Graphical UI Tools for Kubernetes
-- hackerxone.com: How To Install Kubernetes Dashboard with NodePort in Linux
-- loft.sh: Kubernetes Monitoring Dashboards - 5 Best Open-Source Tools
+- hackerxone.com: How To Install Kubernetes Dashboard with NodePort in Linux
+- loft.sh: Kubernetes Monitoring Dashboards - 5 Best Open-Source Tools
- medium: YAKD: Yet Another Kubernetes Dashboard A list of most popular opensource kubernetes dashboard both for local development & in production as well
-- adamtheautomator.com: How to Install and Set Up Kubernetes Dashboard [Step by Step]
-- thenewstack.io: Who Needs a Dashboard? Why the Kubernetes Command Line Is Not Enough
+- adamtheautomator.com: How to Install and Set Up Kubernetes Dashboard [Step by Step]
+- thenewstack.io: Who Needs a Dashboard? Why the Kubernetes Command Line Is Not Enough
- kui.tools 🌟 Kui: CLI-driven Graphics for Kubernetes. Tired of working with Kubernetes in cli mode only? Try kui - a hybrid tool that allows you to interact with any Kubernetes cluster easily with more advanced features available only in GUI.
-- blog.flant.com: Kui — a “hybrid” CLI/GUI application for working with Kubernetes Kui is a GUI-enhanced CLI interface for managing Kubernetes clusters
+
- blog.flant.com: Kui — a “hybrid” CLI/GUI application for working with Kubernetes Kui is a GUI-enhanced CLI interface for managing Kubernetes clusters
Kui enriches the good old terminal experience with GUI features, giving you a different perspective of your Kubernetes cluster
- blog.aquasec.com: RATs (remote access tools) in the Cloud: Kubernetes UI Tools Turn into a Weapon
- medium.com/@satyakommula: Deploy Kubernetes dashboard with NodePort
-- rigorousthemes.com: 10 Best Kubernetes Dashboard Alternatives 2022
-- blog.flant.com: kubenav as a tool for managing Kubernetes clusters from your smartphone
+- rigorousthemes.com: 10 Best Kubernetes Dashboard Alternatives 2022
+- blog.flant.com: kubenav as a tool for managing Kubernetes clusters from your smartphone
- kubeapps.dev 🌟 Kubeapps is an in-cluster web-based application that enables users with a one-time installation to deploy, manage, and upgrade applications on a Kubernetes cluster
- github.com/openshift/console 🌟
- levelup.gitconnected.com: Step by Step Slow Guide: Kubernetes Dashboard on Raspberry Pi Cluster (Part 2) How to setup self-signed certificate for Kubernetes Dashboard and expose it via load-balancer
-- getseabird.github.io 🌟 - github.com/getseabird/seabird Seabird is a native cross-platform Kubernetes desktop client that makes it super easy to explore your cluster’s resources. We aim to visualize all common resource types in a simple, bloat-free user interface.
+- getseabird.github.io 🌟 - github.com/getseabird/seabird Seabird is a native cross-platform Kubernetes desktop client that makes it super easy to explore your cluster’s resources. We aim to visualize all common resource types in a simple, bloat-free user interface.
- github.com/cyclops-ui/cyclops 🌟
- Cyclops is a powerful user interface for managing and interacting with Kubernetes clusters
- It’s designed to simplify the management of containerized apps, providing an intuitive experience for developers, system administrators, and DevOps
-- k8z.dev: A lightweight, modern mobile and desktop application for manage kubernetes. Easily for use fast, secure - github.com/k8zdev/k8z
+- k8z.dev: A lightweight, modern mobile and desktop application for manage kubernetes. Easily for use fast, secure - github.com/k8zdev/k8z
- github.com/unxsist/jet-pilot JET Pilot is an open-source Kubernetes IDE that focuses on less clutter, speed and good looks. Features:
- Real-time Logs
- Kubernetes Object Management
@@ -8067,9 +8067,9 @@ Kui enriches the good old terminal experience with GUI features, giving you a di
Okteto local kubernetes development
-- codefresh.io: Tutorial - Local Kubernetes Development with Okteto 🌟
+- codefresh.io: Tutorial - Local Kubernetes Development with Okteto 🌟
- github.com/marketplace: Automating your Kubernetes dev environments with the open source oktetohq Cloud got easier with GitHub Actions
-- blog.palark.com: Okteto Cloud as another way for local development in Kubernetes This article explores an approach featuring application development performed right inside the Kubernetes without needing separate build and deploy steps using Okteto
+- blog.palark.com: Okteto Cloud as another way for local development in Kubernetes This article explores an approach featuring application development performed right inside the Kubernetes without needing separate build and deploy steps using Okteto
Monokle
@@ -8078,16 +8078,16 @@ Kui enriches the good old terminal experience with GUI features, giving you a di
K8Studio
-- kubeshop.github.io/monokle Welcome to Monokle - your friendly desktop UI for managing k8s manifests!
-- k8studio.io/blogs: K8studio vs. Lens vs. K9s 🌟 K8studio vs Lens and K9s, probably the best tool to manage kubernetes
+- kubeshop.github.io/monokle Welcome to Monokle - your friendly desktop UI for managing k8s manifests!
+- k8studio.io/blogs: K8studio vs. Lens vs. K9s 🌟 K8studio vs Lens and K9s, probably the best tool to manage kubernetes
Lens and OpenLens Kubernetes IDE
-- Lens Kubernetes IDE 🌟 Lens is the only IDE you’ll ever need to take control of your Kubernetes clusters. It’s open source and free. Download it today!
+- Lens Kubernetes IDE 🌟 Lens is the only IDE you’ll ever need to take control of your Kubernetes clusters. It’s open source and free. Download it today!
- medium: Lens 5 Released
- medium: How To Give Developers Secure Access to Kubernetes Clusters
- Lens Resource Map extension Lens - The Kubernetes IDE extension that displays Kubernetes resources and their relations as a force graph.
-- thedevopslife.com: Kubernetes IDE and UI – Lens IDE
+- thedevopslife.com: Kubernetes IDE and UI – Lens IDE
- medium.com/k8slens: Lens 6 Released, Vision for the Future, New Subscription Model and Features Available Over 650,000 people and tens-of-thousands of businesses develop and operate their Kubernetes on k8slens. Lens for Web Browsers — Enable new use cases for people preferring the Lens experience via web browsers. Even tablets and mobile phones!
- blog.devgenius.io: Is it time to migrate from Lens to OpenLens to manage your Kubernetes clusters?
- medium.com/k8slens: Eliminating Kubernetes Complexity for Developers Using Lens
@@ -8103,18 +8103,18 @@ Kui enriches the good old terminal experience with GUI features, giving you a di
Cloud Manager
-- thenewstack.io: Cloud Manager: A New Multicloud PaaS Platform Built on Kubernetes
+- thenewstack.io: Cloud Manager: A New Multicloud PaaS Platform Built on Kubernetes
- medium: Do It All Kubernetes Dashboard
Yaki
-- nirops/yakiapp Yaki stands for “Yet Another Kubernetes IDE”. Open Source, Cross platform, Native Kubernetes IDE. Yaki is a desktop application that allows DevOps, Developers, SREs and anyone who wish the manage the applications deployed in their Kubernetes Cluster
+- nirops/yakiapp Yaki stands for “Yet Another Kubernetes IDE”. Open Source, Cross platform, Native Kubernetes IDE. Yaki is a desktop application that allows DevOps, Developers, SREs and anyone who wish the manage the applications deployed in their Kubernetes Cluster
Images
Click to expand!
-
+
Tweets
diff --git a/kubernetes-bigdata.html b/kubernetes-bigdata.html
index c036ac1f..349c8113 100644
--- a/kubernetes-bigdata.html
+++ b/kubernetes-bigdata.html
@@ -7699,24 +7699,24 @@
- itnext.io: Migrating Apache Spark workloads from AWS EMR to Kubernetes
- tomlous.medium.com: CI/CD for Data Engineers. Reliably Deploying Scala Spark containers for Kubernetes with Github Actions
-- datamechanics.co: Apache Spark 3.1 Release: Spark on Kubernetes is now Generally Available
+- datamechanics.co: Apache Spark 3.1 Release: Spark on Kubernetes is now Generally Available
- dzone: Run and Scale an Apache Spark Application on Kubernetes Learn how to set up Apache Spark on IBM Cloud Kubernetes Service by pushing the Spark container images to IBM Cloud Container Registry.
- dzone: Running Apache Spark on Kubernetes This article covers using Spark on K8s to overcome dependency on cloud providers and running Apache Spark on Kubernetes.
-- cloud.redhat.com: Getting Started running Spark workloads on OpenShift
+- cloud.redhat.com: Getting Started running Spark workloads on OpenShift
- medium: Running Apache Spark on Kubernetes Using Spark on K8s to overcome dependency on cloud providers
-- hevodata.com: Building Apache Spark Data Pipeline? Made Easy 101 🌟
-- coderstan.com: Apache Spark on Kubernetes—Lessons Learned from Launching Millions of Spark Executors (Databricks Data+AI Summit 2022) In this case study, you will learn how Apple uses Spark and Kubernetes to process 380K+ jobs per day
-- spot.io: Setting up, Managing & Monitoring Spark on Kubernetes
+- hevodata.com: Building Apache Spark Data Pipeline? Made Easy 101 🌟
+- coderstan.com: Apache Spark on Kubernetes—Lessons Learned from Launching Millions of Spark Executors (Databricks Data+AI Summit 2022) In this case study, you will learn how Apple uses Spark and Kubernetes to process 380K+ jobs per day
+- spot.io: Setting up, Managing & Monitoring Spark on Kubernetes
- levelup.gitconnected.com: Master SparkML: Practical Guide for Machine Learning Unleash the power of SparkML with our hands-on tutorial. Discover machine learning made easy and efficient.
Databricks
-- aprenderbigdata.com: Databricks: Introducción a Spark en la nube
+- aprenderbigdata.com: Databricks: Introducción a Spark en la nube
- Databricks es el nombre de la plataforma analítica de datos basada en Apache Spark desarrollada por la compañía con el mismo nombre. La empresa se fundó en 2013 con los creadores y los desarrolladores principales de Spark. Permite hacer analítica Big Data e inteligencia artificial con Spark de una forma sencilla y colaborativa.
- Esta plataforma está disponible como servicio cloud en Microsoft Azure y Amazon Web Services (AWS).
-- docs.databricks.com: Use scheduler pools for multiple streaming workloads
+- docs.databricks.com: Use scheduler pools for multiple streaming workloads
- github.com/databrickslabs/ucx: Databricks Labs UCX Automated migrations to Unity Catalog
diff --git a/kubernetes-client-libraries.html b/kubernetes-client-libraries.html
index c1c88436..e3caa06f 100644
--- a/kubernetes-client-libraries.html
+++ b/kubernetes-client-libraries.html
@@ -7784,12 +7784,12 @@
- pkg.go.dev/k8s.io/client-go
-- Rate Limiting in Controller-Runtime and Client-go
+- Rate Limiting in Controller-Runtime and Client-go
- kubernetes-client/go: OpenAPI based Generated Go client for Kubernetes
- kyaml2go (Pronounced as camel2go 🐫) 🌟 K8s Go client code generator from Kubernetes resource yamls.
- itnext.io: Writing a Kubernetes CLI in Go
- blog.devgenius.io: Learn Kubernetes Programming — Part 1 Learn to programmatically talk to the Kubernetes cluster using the Official Client Go Library. In this tutorial, you’ll learn how to build a simple CLI that connects to the Kubernetes cluster and displays the server version. In the process, you will learn Go and the client-go package.
-- iximiuz.com: How To Develop Kubernetes CLIs Like a Pro Build You Own kubectl The Simple Way. Learn how to use the http://k8s.io/cli-runtime library to develop Kubernetes CLI tools that behave like and are as potent as the mighty kubectl.
+- iximiuz.com: How To Develop Kubernetes CLIs Like a Pro Build You Own kubectl The Simple Way. Learn how to use the http://k8s.io/cli-runtime library to develop Kubernetes CLI tools that behave like and are as potent as the mighty kubectl.
Python Client for Kubernetes
@@ -7816,11 +7816,11 @@
Fabric8 Java Client for Kubernetes
-- Fabric8 has been available as a Java client for Kubernetes since 2015, and today is one of the most popular client libraries for Kubernetes (the most popular is client-go, which is the client library for the Go programming language on Kubernetes). In recent years, fabric8 has evolved from a Java client for the Kubernetes REST API to a full-fledged alternative to the kubectl command-line tool for Java-based development.
-- developers.redhat.com: Getting started with the fabric8 Kubernetes Java client
-- developers.redhat.com: How the fabric8 Maven plug-in deploys Java applications to OpenShift
-- Fabric8.io Microservices Development Platform It is an open source microservices platform based on Docker, Kubernetes and Jenkins. It is built by the Red Hat guys.The purpose of the project is to make it easy to create microservices, build, test and deploy them via Continuous Delivery pipelines then run and manage them with Continuous Improvement and ChatOps. Fabric8 installs and configures the following things for you automatically: Jenkins, Gogs, Fabric8 registry, Nexus, SonarQube.
-- developers.redhat.com: What’s new in Fabric8 Kubernetes Java client 4.12.0
+- Fabric8 has been available as a Java client for Kubernetes since 2015, and today is one of the most popular client libraries for Kubernetes (the most popular is client-go, which is the client library for the Go programming language on Kubernetes). In recent years, fabric8 has evolved from a Java client for the Kubernetes REST API to a full-fledged alternative to the kubectl command-line tool for Java-based development.
+- developers.redhat.com: Getting started with the fabric8 Kubernetes Java client
+- developers.redhat.com: How the fabric8 Maven plug-in deploys Java applications to OpenShift
+- Fabric8.io Microservices Development Platform It is an open source microservices platform based on Docker, Kubernetes and Jenkins. It is built by the Red Hat guys.The purpose of the project is to make it easy to create microservices, build, test and deploy them via Continuous Delivery pipelines then run and manage them with Continuous Improvement and ChatOps. Fabric8 installs and configures the following things for you automatically: Jenkins, Gogs, Fabric8 registry, Nexus, SonarQube.
+- developers.redhat.com: What’s new in Fabric8 Kubernetes Java client 4.12.0
- blog.marcnuri.com: Fabric8 Kubernetes Client for Java introduction
- blog.marcnuri.com: Build Kubernetes controllers with Fabric8 Kubernetes Client, Quarkus, and JKube
- developers.redhat.com: How to generate code using Fabric8 Kubernetes Client
@@ -7831,18 +7831,18 @@
- cdk8s Define Kubernetes native apps and abstractions using object-oriented programming
- blog.twstewart.me: cdk8s-python - A Love and Hate Experience CDK8S is an alpha level library that allows you to write high level abstractions of Kubernetes objects like deployments, services, and more all in your favorite language ( TypeScript, Python, and others).
-- qdnqn.com: Kubernetes objects from Go to YAML using Cdk8s Cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar programming languages and rich object-oriented APIs. cdk8s apps synthesize into standard Kubernetes manifests which can be applied to any Kubernetes cluster.
+- qdnqn.com: Kubernetes objects from Go to YAML using Cdk8s Cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar programming languages and rich object-oriented APIs. cdk8s apps synthesize into standard Kubernetes manifests which can be applied to any Kubernetes cluster.
Eclipse Jkube Java Client for Kubernetes (formerly known as Fabric8). Kubernetes & OpenShift Maven Plugins
-- Eclipse JKube 🌟 Cloud-Native Java Applications without a hassle. Eclipse JKube is a collection of plugins and libraries that are used for building container images using Docker, JIB or S2I build strategies. Eclipse JKube generates and deploys Kubernetes/OpenShift manifests at compile time too. It brings your Java applications on to Kubernetes and OpenShift by leveraging the tasks required to make your application cloud-native. Eclipse JKube also provides a set of tools such as watch, debug, log, etc. to improve your developer experience.
-- Github: Eclipse Jkube
-- developers.redhat.com: Migrating from Fabric8 Maven Plugin to Eclipse JKube 1.0.0
-- developers.redhat.com: Cloud-native Java applications made easy: Eclipse JKube 1.0.0 now available
-- developers.redhat.com: Java development on top of Kubernetes using Eclipse JKube
-- eclipse.org: Migration Guide for projects using Fabric8 Maven Plugin to Eclipse JKube 🌟
+- Eclipse JKube 🌟 Cloud-Native Java Applications without a hassle. Eclipse JKube is a collection of plugins and libraries that are used for building container images using Docker, JIB or S2I build strategies. Eclipse JKube generates and deploys Kubernetes/OpenShift manifests at compile time too. It brings your Java applications on to Kubernetes and OpenShift by leveraging the tasks required to make your application cloud-native. Eclipse JKube also provides a set of tools such as watch, debug, log, etc. to improve your developer experience.
+- Github: Eclipse Jkube
+- developers.redhat.com: Migrating from Fabric8 Maven Plugin to Eclipse JKube 1.0.0
+- developers.redhat.com: Cloud-native Java applications made easy: Eclipse JKube 1.0.0 now available
+- developers.redhat.com: Java development on top of Kubernetes using Eclipse JKube
+- eclipse.org: Migration Guide for projects using Fabric8 Maven Plugin to Eclipse JKube 🌟
- youtube: Deploying a Quarkus application into Kubernetes using JKube | Cloud Tool Time | Marc Nuri 🌟
-- blog.marcnuri.com
+- blog.marcnuri.com
@@ -7850,7 +7850,7 @@
Java Operator SDK
-- javaoperatorsdk.io: Build Kubernetes Operators in Java without hassle Whether you want to build applications that operate themselves or provision infrastructure from Java code, Kubernetes Operators are the way to go. This SDK will make it easy for Java developers to embrace this new way of automation. The java-operator-sdk is based on the fabric8 Kubernetes client.
+- javaoperatorsdk.io: Build Kubernetes Operators in Java without hassle Whether you want to build applications that operate themselves or provision infrastructure from Java code, Kubernetes Operators are the way to go. This SDK will make it easy for Java developers to embrace this new way of automation. The java-operator-sdk is based on the fabric8 Kubernetes client.
diff --git a/kubernetes-monitoring.html b/kubernetes-monitoring.html
index 9e00975f..426ccb33 100644
--- a/kubernetes-monitoring.html
+++ b/kubernetes-monitoring.html
@@ -7784,8 +7784,8 @@
Introduction
-- Monitoring Distributed Systems - Google SRE Book - (Related to monitoring topic)
-- Prometheus and OpenTelemetry Compatibility Issues - (Related to monitoring topic)
+- Monitoring Distributed Systems - Google SRE Book - (Related to monitoring topic)
+- Prometheus and OpenTelemetry Compatibility Issues - (Related to monitoring topic)
-
CPU Limits in Kubernetes: Deep Dive into Pod Throttling and Kernel Interactions - (Related to kubernetes-troubleshooting topic)
@@ -7801,71 +7801,71 @@
- medium: Kubernetes Monitoring: Kube-State-Metrics
- Kubernetes Monitoring 101 — Core pipeline & Services Pipeline
- medium: Utilizing and monitoring kubernetes cluster resources more effectively
-- sysdig.com: Seven Kubernetes monitoring best practices every monitoring solution should enable
+- sysdig.com: Seven Kubernetes monitoring best practices every monitoring solution should enable
- magalix.com: Best Practices And Tools For Monitoring Your Kubernetes Cluster
-- sysdig.com: Monitoring Kubernetes in Production
-- sysdig.com: How to monitor Kubernetes control plane
-- thenewstack.io: 12 Critical Kubernetes Health Conditions You Need to Monitor
-- circonus.com: 12 Critical Kubernetes Health Conditions You Need to Monitor and Why
-- circonus.com: Guide to Kubernetes Monitoring: Part 1
-- circonus.com: Guide to Monitoring Kubernetes, Part 2: Which Metrics and Health Conditions You Should be Monitoring
+- sysdig.com: Monitoring Kubernetes in Production
+- sysdig.com: How to monitor Kubernetes control plane
+- thenewstack.io: 12 Critical Kubernetes Health Conditions You Need to Monitor
+- circonus.com: 12 Critical Kubernetes Health Conditions You Need to Monitor and Why
+- circonus.com: Guide to Kubernetes Monitoring: Part 1
-- infracloud.io: Monitoring Kubernetes cert-manager Certificates with BotKube - botkube.io
+- infracloud.io: Monitoring Kubernetes cert-manager Certificates with BotKube - botkube.io
- kube-state-metrics 🌟 Add-on agent to generate and expose cluster-level metrics. kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects. (See examples in the Metrics section below.) It is not focused on the health of the individual Kubernetes components, but rather on the health of the various objects inside, such as deployments, nodes and pods.
- itnext.io: Monitoring Kubernetes Jobs
-- cncf.io: Avoiding Kubernetes cluster outages with synthetic monitoring
+- cncf.io: Avoiding Kubernetes cluster outages with synthetic monitoring
- medium: Replication Controller & Replica sets in Kubernetes
-- kubermatic.com: The Complete Guide to Kubernetes Metrics
-- arabitnetwork.com: K8S – Enabling Auditing Logs | Step-by-Step
+- kubermatic.com: The Complete Guide to Kubernetes Metrics
+- arabitnetwork.com: K8S – Enabling Auditing Logs | Step-by-Step
- youtube.com: Cloud Quick POCs - Kubernetes monitoring metrics using Grafana Cloud on AWS EKS | Observability | Grafana
-- loft.sh: Kubernetes Cost Monitoring with Prometheus & Grafana
-- anaisurl.com: Full Tutorial: Monitoring and Troubleshooting stack with Prometheus, Grafana, Loki and Komodor 🌟
+- loft.sh: Kubernetes Cost Monitoring with Prometheus & Grafana
+- anaisurl.com: Full Tutorial: Monitoring and Troubleshooting stack with Prometheus, Grafana, Loki and Komodor 🌟
- medium.com/is-it-observable: How to collect metrics in a Kubernetes cluster
- itnext.io: How to tackle Kubernetes observability challenges with Pixie
- medium.com/@lucapompei91: Kubernetes observability
- dev.to: Monitoring Kubernetes cluster logs and metrics using Grafana, Prometheus and Loki
- hitesh-pattanayak.medium.com: Observability in Kubernetes
- middlewareinventory.com: Get CPU and Memory Usage of NODES and PODS – Kubectl 🌟
-- betterstack.com: 10 Best Kubernetes Monitoring Tools in 2022 🌟
+- betterstack.com: 10 Best Kubernetes Monitoring Tools in 2022 🌟
- medium.com/@kylekhunter: Kubernetes Monitoring with Prometheus
-- adamtheautomator.com: Utilizing Grafana & Prometheus Kubernetes Cluster Monitoring 🌟 In this guide, you’ll learn how to monitor your Kubernetes cluster, viewing internal state metrics with a Prometheus and Grafana dashboard.
-- grafana.com: Introducing Kubernetes Monitoring in Grafana Cloud Kubernetes Monitoring is available to all Grafana Cloud users, including on free tier. Container orchestration to deploy at scale, iterate quickly, and manage a large number of apps and services.
+- adamtheautomator.com: Utilizing Grafana & Prometheus Kubernetes Cluster Monitoring 🌟 In this guide, you’ll learn how to monitor your Kubernetes cluster, viewing internal state metrics with a Prometheus and Grafana dashboard.
+- grafana.com: Introducing Kubernetes Monitoring in Grafana Cloud Kubernetes Monitoring is available to all Grafana Cloud users, including on free tier. Container orchestration to deploy at scale, iterate quickly, and manage a large number of apps and services.
- medium.com/@clymeneallen: Best Practices, Monitoring System for Multi-K8s Cluster Environments Using Open Source
- medium.com/@magstherdev: OpenTelemetry on Kubernetes 🌟
- betterprogramming.pub: 6 Metrics To Watch for on Your K8s Cluster 🌟 The most critical Kubernetes metrics to monitor. In this article, you will cover the 6 most critical metrics based on Kubernetes’s metadata that form a good baseline for monitoring your workloads and ensuring they’re in a healthy state.
- figments.medium.com: Observable Kubernetes Cluster Using Grafana-Loki-Prometheus
- medium.com/@isalapiyarisi: Getting Started on Kubernetes observability with eBPF
-- 8 Best Kubernetes monitoring tools; Paid & open-source
+- 8 Best Kubernetes monitoring tools; Paid & open-source
- dev.to/mikeyglitz: Proactive Kubernetes Monitoring with Alerting In this tutorial, you’ll learn how to combine Prometheus, Alertmanager, Grafana and Linkerd to deliver timely alerts when a problem occurs in a Kubernetes cluster.
-- isovalent.com: What are the 4 Golden Signals for Monitoring Kubernetes?
-- grafana.com: How to manage high cardinality metrics in Prometheus and Kubernetes
+- isovalent.com: What are the 4 Golden Signals for Monitoring Kubernetes?
+- grafana.com: How to manage high cardinality metrics in Prometheus and Kubernetes
- medium.com/@HirenDhaduk1: Top Kubernetes Observability Tools and their Usage
- milindasenaka96.medium.com: Setup Prometheus and Grafana to Monitor the K8s Cluster
- blog.fourninecloud.com: Kubernetes monitoring — How to monitor using prometheus?
-- rcarrata.com: Network Observability Deep Dive in Kubernetes with NetObserv Operator How can we analyze our Network Flows in our Kubernetes clusters? How can we enable Network Observability for Kubernetes in a simple, searchable and visual way? How can we leverage cool technologies such as eBPF or IPFIX to enable Network Observability for our K8s Network Traffic?
+- rcarrata.com: Network Observability Deep Dive in Kubernetes with NetObserv Operator How can we analyze our Network Flows in our Kubernetes clusters? How can we enable Network Observability for Kubernetes in a simple, searchable and visual way? How can we leverage cool technologies such as eBPF or IPFIX to enable Network Observability for our K8s Network Traffic?
- kemilad.medium.com: Monitoring-Stack Deployment To A Kubernetes Cluster — Prometheus | Grafana | AlertManager | Loki + Exporters | Dashboards and etc 🌟
- newrelic.com: Pixie
- awstip.com: Monitoring Your EKS Cluster with the Power of Prometheus and Grafana through Helm
- grafana.com: A beginner’s guide to Kubernetes application monitoring
- medium.com/@poseidon.os: Poseidon: A Kubernetes Cluster Visualization & Cost Analysis Tool
-- aws.amazon.com: Using Prometheus to Avoid Disasters with Kubernetes CPU Limits 🌟 In this article, you’ll discuss how CPU throttling can affect Kubernetes’ node performance, and how to avoid this by setting the right values for limits. The author also suggests using Prometheus as a tool to help set reasonable limits
+- aws.amazon.com: Using Prometheus to Avoid Disasters with Kubernetes CPU Limits 🌟 In this article, you’ll discuss how CPU throttling can affect Kubernetes’ node performance, and how to avoid this by setting the right values for limits. The author also suggests using Prometheus as a tool to help set reasonable limits
- umeey.medium.com: Four Golden Signals Of Monitoring: Site Reliability Engineering (SRE) Metrics Golden Signal Monitoring using FastAPI on k8s
-- grafana.com: How to optimize resource utilization with Kubernetes Monitoring for Grafana Cloud 🌟 Overprovisioning or underprovisioning your Kubernetes resources can have significant consequences on both your budget and your app performance.
+- grafana.com: How to optimize resource utilization with Kubernetes Monitoring for Grafana Cloud 🌟 Overprovisioning or underprovisioning your Kubernetes resources can have significant consequences on both your budget and your app performance.
- medium.com/@lambdaEranga: Monitor Kubernets Services/Endpoints with Prometheus Blackbox Exporter 🌟 In this article, you will discuss monitoring different endpoints/services in a Kubernetes cluster using Prometheus Blackbox Exporter
- samiislam0306.medium.com: Insightful Monitoring of Kubernetes Clusters with Traces Gain valuable insights into the performance of your Kubernetes cluster with trace monitoring. A guide that helps you optimize your operations for maximum efficiency and productivity.
- medium.com/@walissonscd: Monitoring Kubernetes Cluster Resources: Using Top Metrics Commands
- blog.devops.dev: Prometheus metrics within Kubernetes — an aerial view | Joseph Esrig
-- grafana.com: How to monitor Kubernetes clusters with the Prometheus Operator In this guide, you’ll learn how to deploy and use the Prometheus Operator to configure and manage Prometheus instances in your Kubernetes cluster. You’ll also discover how to deploy Grafana to help analyze and visualize the health of your clusters.
-- blog.palark.com: Service communication monitoring in Kubernetes with NetFlow
+- grafana.com: How to monitor Kubernetes clusters with the Prometheus Operator In this guide, you’ll learn how to deploy and use the Prometheus Operator to configure and manage Prometheus instances in your Kubernetes cluster. You’ll also discover how to deploy Grafana to help analyze and visualize the health of your clusters.
+- blog.palark.com: Service communication monitoring in Kubernetes with NetFlow
- betterprogramming.pub: Improve Cluster Monitoring With Network Mapping in Grafana A deep dive into obtaining network maps and correlating IP with cluster workloads to speed up debugging
- betterprogramming.pub: Kubernetes Observability Part 1: Events, Logs, and Integration With Slack, OpenAI, and Grafana Build a Kubernetes custom controller to watch Kubernetes Events and forward them to Grafana Loki using Promtail
- itnext.io: Kubernetes: monitoring with Prometheus — exporters, a Service Discovery, and its roles
-- opentelemetry.io: Creating a Kubernetes Cluster with Runtime Observability
+- opentelemetry.io: Creating a Kubernetes Cluster with Runtime Observability
- medium.com/@onai.rotich: Understand container metrics and why they matter In this 2-part article, you will explore the key metrics to scrape in your cluster
- kkamalesh117.medium.com: Setting up Prometheus and Grafana Integration on Kubernetes with Helm
- medium.com/@MetricFire: Monitoring Kubernetes tutorial: Using Grafana and Prometheus
@@ -7875,21 +7875,21 @@
- medium.com/@abhisman.sarkar: Kubernetes Monitoring: Effective Cluster Tracking with Prometheus
- aws.plainenglish.io: Mastering Monitoring: The Complete Guide to Using Prometheus and Grafana with Kubernetes
- medium.com/@muppedaanvesh: A Hands-On Guide to Kubernetes Monitoring Using Prometheus & Grafana Understanding Prometheus & Grafana Setup in Kubernetes: A Comprehensive Guide
-- signoz.io: Kubernetes Cluster Monitoring with OpenTelemetry | Complete Tutorial 🌟
+- signoz.io: Kubernetes Cluster Monitoring with OpenTelemetry | Complete Tutorial 🌟
Kubernetes Logging
-- Setup Prometheus Using Helm Chart on Kubernetes - (Related to prometheus topic)
+- Setup Prometheus Using Helm Chart on Kubernetes - (Related to prometheus topic)
-
bul: Interactive TUI for Exploring Kubernetes Container Logs - (Related to kubernetes-tools topic)
-
-
+
- medium: How to Deploy an EFK stack to Kubernetes
- digitalocean.com: How To Set Up an Elasticsearch, Fluentd and Kibana (EFK) Logging Stack on Kubernetes
-- portworx.com: How to backup and restore Elasticsearch on Kubernetes
-- papertrail.com: Quick and Easy Way to Implement Kubernetes Logging The SolarWinds® Papertrail™ team is excited to announce SolarWinds rKubeLog, an open-source project designed to streamline Kubernetes logging. rKubeLog allows you to forward logs to Papertrail from within a Kubernetes cluster without using a daemon or setting up application-level logging or a logging sidecar.
+- portworx.com: How to backup and restore Elasticsearch on Kubernetes
+- papertrail.com: Quick and Easy Way to Implement Kubernetes Logging The SolarWinds® Papertrail™ team is excited to announce SolarWinds rKubeLog, an open-source project designed to streamline Kubernetes logging. rKubeLog allows you to forward logs to Papertrail from within a Kubernetes cluster without using a daemon or setting up application-level logging or a logging sidecar.
- qlinh.com: Leveraging Kubernetes audit logs for threat detection Kubernetes audit logs can provide great visibility into the operation and inner workings of your cluster. Learn how to leverage Kubernetes audit logs for threat detection
- itnext.io: Kubernetes Logging in Production
- opensource.com: What you need to know about cluster logging in Kubernetes 🌟 Explore how different container logging patterns in Kubernetes work.
@@ -7915,8 +7915,8 @@
SLOs in Kubernetes
-- thenewstack.io: Service Level Objectives in Kubernetes an SLO is simply a metric, a goal for that metric, and a time period. For instance: “the success rate for service A must be at least 99.7% percent over the past 30 days.” The metric is known as the “service level indicator” (SLI) and the goal is the “objective.”
-- thenewstack.io: SLOs in Kubernetes, 1 Year Later
+- thenewstack.io: Service Level Objectives in Kubernetes an SLO is simply a metric, a goal for that metric, and a time period. For instance: “the success rate for service A must be at least 99.7% percent over the past 30 days.” The metric is known as the “service level indicator” (SLI) and the goal is the “objective.”
+- thenewstack.io: SLOs in Kubernetes, 1 Year Later
ECK Elastic Cloud on Kubernetes
@@ -7933,10 +7933,10 @@
kubeshark
-
-
Sharing a NVIDIA GPU Between Pods in Kubernetes - (Related to kubernetes-tools topic)
+Sharing a NVIDIA GPU Between Pods in Kubernetes - (Related to kubernetes-tools topic)
-
-
kubeshark.co The API Traffic Viewer for kubernetes. Deep visibility and monitoring of all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster.
+kubeshark.co The API Traffic Viewer for kubernetes. Deep visibility and monitoring of all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster.
- kubeshark/kubeshark The API traffic viewer for Kubernetes providing deep visibility into all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster. Think TCPDump and Wireshark re-invented for Kubernetes
- medium.com/kernel-space: KubeShark: Wireshark for Kubernetes
diff --git a/kubernetes-networking.html b/kubernetes-networking.html
index 7fa5a774..ef12c4ab 100644
--- a/kubernetes-networking.html
+++ b/kubernetes-networking.html
@@ -8004,73 +8004,73 @@
Introduction
-- kubernetes.io: The Kubernetes network model. How to implement the Kubernetes networking model
-- ovh.com - getting external traffic into kubernetes: clusterip, nodeport, loadbalancer and ingress
-- learnk8s.io: Load balancing and scaling long-lived connections in Kubernetes 🌟🌟🌟 Kubernetes doesn’t load balance long-lived connections, and some Pods might receive more requests than others. If you’re using HTTP/2, gRPC, etc. or any other long-lived connection, you might want to consider client-side load balancing
-- stackrox.com: Kubernetes Networking Demystified: A Brief Guide
+- kubernetes.io: The Kubernetes network model. How to implement the Kubernetes networking model
+- ovh.com - getting external traffic into kubernetes: clusterip, nodeport, loadbalancer and ingress
+- learnk8s.io: Load balancing and scaling long-lived connections in Kubernetes 🌟🌟🌟 Kubernetes doesn’t load balance long-lived connections, and some Pods might receive more requests than others. If you’re using HTTP/2, gRPC, etc. or any other long-lived connection, you might want to consider client-side load balancing
+- stackrox.com: Kubernetes Networking Demystified: A Brief Guide
- medium.com: Fighting Service Latency in Microservices With Kubernetes
- medium.com: Kubernetes NodePort vs LoadBalancer vs Ingress? When should I use what? 🌟
-- blog.alexellis.io: Get a LoadBalancer for your private Kubernetes cluster
-- dustinspecker.com: How Do Kubernetes and Docker Create IP Addresses?!
+- blog.alexellis.io: Get a LoadBalancer for your private Kubernetes cluster
+- dustinspecker.com: How Do Kubernetes and Docker Create IP Addresses?!
- youtube: Kubernetes Ingress Explained Completely For Beginners
-- AWS and Kubernetes Networking Options and Trade-Offs (part 1)
-- AWS and Kubernetes Networking Options and Trade-Offs (part 2)
+- AWS and Kubernetes Networking Options and Trade-Offs (part 1)
+- AWS and Kubernetes Networking Options and Trade-Offs (part 2)
- medium: Service Types in Kubernetes? 🌟 A Service enables network access to a set of Pods in Kubernetes.
-- containo.us: Kubernetes Ingress & Service API Demystified
+- containo.us: Kubernetes Ingress & Service API Demystified
- speakerdeck.com: Kubernetes and networks. Why is this so dan hard? 🌟
-- eevans.co: Deconstructing Kubernetes Networking
+- eevans.co: Deconstructing Kubernetes Networking
- externalTrafficPolicy=local on kubernetes. How to preserve the source IP in kubernetes externalTrafficPolicy=local is an annotation on the Kubernetes service resource that can be set to preserve the client source IP. When it is set, the actual IP address of a client is propagated to the K8s service instead of the IP address of the node.
-- ronaknathani.com: How a Kubernetes Pod Gets an IP Address 🌟
+- ronaknathani.com: How a Kubernetes Pod Gets an IP Address 🌟
- opensource.com: Why I use Ingress Controllers to expose Kubernetes services Kubernetes ingress controllers will make or break your cloud architecture.
-- blog.nody.cc: Verify your Kubernetes Cluster Network Policies: From Faith to Proof
+- blog.nody.cc: Verify your Kubernetes Cluster Network Policies: From Faith to Proof
- medium: How to setup Hetzner load balancer on a Kubernetes cluster
- zhimin-wen.medium.com: Sticky Sessions in Kubernetes 🌟
-- infoq.com: Kubernetes Ingress Is Now Generally Available
+- infoq.com: Kubernetes Ingress Is Now Generally Available
- Learnk8s: Comparison of Kubernetes Ingress Controllers 🌟🌟 How do you choose the right Kubernetes Ingress controller when: Not all Ingress controllers support UDP, Only Kong has a free LDAP integration, Nginx Ingress and HAProxy are the only two ingress without CRDs.
-- blog.alexellis.io: Get kubectl access to your private cluster from anywhere
+- blog.alexellis.io: Get kubectl access to your private cluster from anywhere
- jmrobles.medium.com: How to setup Hetzner load balancer on a Kubernetes cluster
-- kubernetes.io: Scaling Kubernetes Networking With EndpointSlices EndpointSlices are a new Kubernetes API that provides a scalable and extensible alternative to the Endpoints API.
+- kubernetes.io: Scaling Kubernetes Networking With EndpointSlices EndpointSlices are a new Kubernetes API that provides a scalable and extensible alternative to the Endpoints API.
- medium: Create a Custom Annotation for the Kubernetes ingress-nginx Controller
-- haproxy.com: Announcing HAProxy Kubernetes Ingress Controller 1.5 🌟
-- devclass.com: HAProxy Ingress Controller 1.5 introduces mTLS support, gives load balancing experts more power
-- thenewstack.io: HAProxy Kubernetes Ingress Controller Moves Outside the Cluster
+- haproxy.com: Announcing HAProxy Kubernetes Ingress Controller 1.5 🌟
+- devclass.com: HAProxy Ingress Controller 1.5 introduces mTLS support, gives load balancing experts more power
+- thenewstack.io: HAProxy Kubernetes Ingress Controller Moves Outside the Cluster
- suse.com: NGINX Guest Blog: NGINX Kubernetes Ingress Controller 🌟
-- blog.cloudflare.com: Moving k8s communication to gRPC
-- K8GB - Kubernetes Global Balancer - openshift.com: K8GB - Kubernetes Global Balancer
-- altoros.com: Kubernetes Networking: How to Write Your Own CNI Plug-in with Bash
+- blog.cloudflare.com: Moving k8s communication to gRPC
+- K8GB - Kubernetes Global Balancer - openshift.com: K8GB - Kubernetes Global Balancer
+- altoros.com: Kubernetes Networking: How to Write Your Own CNI Plug-in with Bash
- Network Node Manager network-node-manager is a kubernetes controller that controls the network configuration of a node to resolve network issues of kubernetes. By simply deploying and configuring network-node-manager, you can solve kubernetes network issues that cannot be resolved by kubernetes or resolved by the higher kubernetes Version. Below is a list of kubernetes’s issues to be resolved by network-node-manager. network-node-manager is based on kubebuilder v2.3.1.
-- getenroute.io: Drive API Security At Kubernetes Ingress Using Helm And Envoy 🌟
+- getenroute.io: Drive API Security At Kubernetes Ingress Using Helm And Envoy 🌟
- ithands-on.com: Kubernetes 101 : External services - ExternalName, DNS and Endpoints
-- ibm.com: Multizone Kubernetes and VPC Load Balancer Setup Securely expose your Kubernetes app by setting up a Load Balancer for VPC in a different zone.
+- ibm.com: Multizone Kubernetes and VPC Load Balancer Setup Securely expose your Kubernetes app by setting up a Load Balancer for VPC in a different zone.
- opensource.googleblog.com: Kubernetes: Efficient Multi-Zone Networking with Topology Aware Routing
-- nbailey.ca: Domesticated Kubernetes Networking
-- sookocheff.com: A Guide to the Kubernetes Networking Model 🌟
+- nbailey.ca: Domesticated Kubernetes Networking
+- sookocheff.com: A Guide to the Kubernetes Networking Model 🌟
- build.thebeat.co: A curious case of AWS NLB timeouts in Kubernetes A debugging adventure that allowed us to solve the tail latencies our Kubernetes applications were experiencing when talking with our AWS NLB.
- ingressbuilder.jetstack.io 🌟🌟 Ingress Builder allows users to select any annotation from the list of available controllers, to add to the ingress manifest.
- itnext.io: Generating Kubernetes Network Policies Automatically By Sniffing Network Traffic 🌟 This blog post is about an experiment to automate creation of Kubernetes Network Policies based on actual network traffic captured from applications running on a Kubernetes cluster - code
- medium: Using nginx-ingress controller to restrict access by IP (ip whitelisting) for a service deployed to a Kubernetes (AKS) cluster
-- openshift.com: gRPC or HTTP/2 Ingress Connectivity in OpenShift 🌟
+- openshift.com: gRPC or HTTP/2 Ingress Connectivity in OpenShift 🌟
- inlets.dev: Fixing Ingress for short-lived local Kubernetes clusters
-- nginx.com: How to Simplify Kubernetes Ingress and Egress Traffic Management
+- nginx.com: How to Simplify Kubernetes Ingress and Egress Traffic Management
- blog.teamhephy.info: Running Workflow Without Any LoadBalancer
-- blog.alexellis.io: Get a public LoadBalancer for your private Kubernetes cluster 🌟
-- searchitoperations.techtarget.com: Differences between Kubernetes Ingress vs. load balancer To manage Kubernetes cluster traffic, admins have a few choices. Compare Kubernetes Ingress vs. load balancers, as well as the NodePort and ClusterIP service types.
+- blog.alexellis.io: Get a public LoadBalancer for your private Kubernetes cluster 🌟
+- searchitoperations.techtarget.com: Differences between Kubernetes Ingress vs. load balancer To manage Kubernetes cluster traffic, admins have a few choices. Compare Kubernetes Ingress vs. load balancers, as well as the NodePort and ClusterIP service types.
- monzo.com: Controlling outbound traffic from Kubernetes
- medium: Access Application Externally In Kubernetes Cluster using Load Balancer Service Learn how to create a Pod and how to create a Load Balancer service using Kubernetes cluster. And access the application from outside.
- itnext.io: Why and How of Kubernetes Ingress (and Networking) 🌟
-- techdozo.dev: gRPC load balancing on Kubernetes (using Headless Service)
-- thenewstack.io: ZeroLB, a New Decentralized Pattern for Load Balancing
-- ungleich.ch: Making kubernetes kube-dns publicly reachable
-- ungleich.ch: Building Ingress-less Kubernetes Clusters Building Ingress-less Kubernetes Clusters with IPv6
-- thenewstack.io: Ingress Controllers: The More the Merrier
+- techdozo.dev: gRPC load balancing on Kubernetes (using Headless Service)
+- thenewstack.io: ZeroLB, a New Decentralized Pattern for Load Balancing
+- ungleich.ch: Making kubernetes kube-dns publicly reachable
+- ungleich.ch: Building Ingress-less Kubernetes Clusters Building Ingress-less Kubernetes Clusters with IPv6
+- thenewstack.io: Ingress Controllers: The More the Merrier
- levelup.gitconnected.com: Setting up Application Load Balancer (Ingress) for the Pods running in AWS EKS Fargate
-- devopscube.com: Kubernetes Ingress Tutorial For Beginners 🌟 In this Kubernetes ingress tutorial, you will learn the basic concepts of ingress, the native ingress resource object, and the concepts involved in ingress controllers
+- devopscube.com: Kubernetes Ingress Tutorial For Beginners 🌟 In this Kubernetes ingress tutorial, you will learn the basic concepts of ingress, the native ingress resource object, and the concepts involved in ingress controllers
- ystatit.medium.com: How to Change Kubernetes Kube-apiserver IP Address
- monzo.com: Controlling outbound traffic from Kubernetes
-- nginx.com: Reducing Kubernetes Costs by 70% in the Cloud with NGINX, Opsani, and Prometheus
+- nginx.com: Reducing Kubernetes Costs by 70% in the Cloud with NGINX, Opsani, and Prometheus
- ithands-on.com: Kubernetes 101 : Changing a service type If we realize that our service, a ClusterIP doesn’t suit our needs anymore, we could change its type to a nodePort service for example.
-- cloud.redhat.com: Global Load Balancer Approaches 🌟
-- loft.sh: Kubernetes NGINX Ingress: 10 Useful Configuration Options 🌟 Kubernetes Ingress is the object that provides routing rules into your cluster. To best serve traffic to your app, you need to correctly configure it. This is an incredible article from loft.sh with 10 useful options for configuring NginX Ingress
+- cloud.redhat.com: Global Load Balancer Approaches 🌟
+- loft.sh: Kubernetes NGINX Ingress: 10 Useful Configuration Options 🌟 Kubernetes Ingress is the object that provides routing rules into your cluster. To best serve traffic to your app, you need to correctly configure it. This is an incredible article from loft.sh with 10 useful options for configuring NginX Ingress
- technos.medium.com: Kubernetes Services for Absolute Beginners — NodePort 🌟
- fransemalila.medium.com: Kubernetes Networking To access the application over the network, K8s services must be used to expose the pods to external traffic and load balancing the traffic across multiple pods.
- Cluster IP
@@ -8080,34 +8080,34 @@
- Load Balancer
-- thenewstack.io: Ingress Controllers: The Swiss Army Knife of Kubernetes
-- nginx.com: Kubernetes Networking 101
+- thenewstack.io: Ingress Controllers: The Swiss Army Knife of Kubernetes
+- nginx.com: Kubernetes Networking 101
- medium.com/the-programmer: Working With ClusterIP Service Type In Kubernetes Working with services in Kubernetes Using ClusterIP
- olamiko.medium.com: Technical Series: Kubernetes Networking
-- learnk8s.io: Tracing the path of network traffic in Kubernetes 🌟
+- learnk8s.io: Tracing the path of network traffic in Kubernetes 🌟
- devopslearners.com: Kubernetes Ingress Tutorial For Beginners - https://devopscube.com/kubernetes-ingress-tutorial
-- devopscube.com: How To Configure Ingress TLS/SSL Certificates in Kubernetes
-- armosec.io: Getting Started with Kubernetes Ingress | Ben Hirschberg
+- devopscube.com: How To Configure Ingress TLS/SSL Certificates in Kubernetes
+- armosec.io: Getting Started with Kubernetes Ingress | Ben Hirschberg
- itnext.io: Kubernetes Service Type LB for On Prem Deployments
- medium.com/techbeatly: Kubernetes Networking Fundamentals
- rajivsharma-2205.medium.com: Demystify how traffic reaches directly to pod on using alb.ingress.kubernetes.io/target-type: ip
- medium.com/linux-shots: Kubernetes ingress as reverse proxy to Application running outside cluster This article demonstrates how to serve an application running outside Kubernetes as if it were part of the cluster by configuring the Ingress controller and using the ExternalName Service.
- medium.com/@zhaoyi0113: Kubernetes — How does service network work in the cluster
- medium.com/@pavanbelagatti: Kubernetes Service Types Explained 🌟
-- tkng.io: The Kubernetes Networking Guide 🌟🌟 The purpose of The Kubernetes networking guide is to provide an overview of various Kubernetes networking components with a specific focus on exactly how they implement the required functionality
-- tkng.io/arch: THE KUBERNETES NETWORK MODEL 🌟🌟
+- tkng.io: The Kubernetes Networking Guide 🌟🌟 The purpose of The Kubernetes networking guide is to provide an overview of various Kubernetes networking components with a specific focus on exactly how they implement the required functionality
- medium.com/stakater: Efficiently Expose Services on Kubernetes (part 1) 🌟
-- platform9.com: Ultimate Guide to Kubernetes Ingress Controllers 🌟
+- platform9.com: Ultimate Guide to Kubernetes Ingress Controllers 🌟
- faun.pub: Kubernetes Service Types Tutorial | Pavan Belagatti 🌟 Configure ClusterIP, NodePort, LoadBalancer and Ingress
- medium.com/slalom-build: Managing Ingress Traffic on Kubernetes Platforms 🌟 Why you need an Ingress and how to pick the right one
- craig-godden-payne.medium.com: How does ingress work in Kubernetes? And how to set up ingress in minikube
-- dustinspecker.com: Kubernetes Networking from Scratch: Using BGP and BIRD to Advertise Pod Routes In this article, you will learn how Calico sets up pod routes between Kubernetes nodes. In this post, you won’t use containers or pods. You’ll learn by creating network namespaces and virtual ethernet devices manually.
-- home.robusta.dev: The ultimate guide to Kubernetes Services, LoadBalancers, and Ingress 🌟🌟🌟
+- dustinspecker.com: Kubernetes Networking from Scratch: Using BGP and BIRD to Advertise Pod Routes In this article, you will learn how Calico sets up pod routes between Kubernetes nodes. In this post, you won’t use containers or pods. You’ll learn by creating network namespaces and virtual ethernet devices manually.
+- home.robusta.dev: The ultimate guide to Kubernetes Services, LoadBalancers, and Ingress 🌟🌟🌟
- sanjimoh.medium.com: Demystifying Kubernetes Networking — Episode 1 In this series of articles you will learn about Kubernetes networking:
- Linux namespaces and Networking namespace
- Intra pod networking & pause container
@@ -8126,7 +8126,7 @@
- itnext.io: Kubernetes networking deep dive: Did you make the right choice? Kubernetes networking design can be intimidating, especially when you are the one to make decisions for cluster-level network choices. In this session, we will discuss how these choices will affect cluster routing and load balancing, focusing on KubeProxy modes(iptables vs IPVS) and network solutions.
- medium.com/@muhidabid.cs: Why does Kubernetes need Ingress? - muhidabid.hashnode.dev: Why does Kubernetes need Ingress?
- blog.devgenius.io: K8s — ipvs Mode Introduction
-- edureka.co: Kubernetes Networking – A Comprehensive Guide To The Networking Concepts In Kubernetes
+- edureka.co: Kubernetes Networking – A Comprehensive Guide To The Networking Concepts In Kubernetes
- whyk8s.substack.com: Why not DNS? Why is KubeProxy necessary? Couldn’t simple DNS records do the job? You do a DNS lookup on my-service in Kubernetes. You do NOT get back IPs for pods that provide that Service. Have you ever wondered why?
- medium.com/geekculture: Kubernetes Gateway API: The Intro You Need To Read In this article, you’ll learn how to deploy k3s to a Raspberry Pi cluster with ClusterHat and ClusterCTRL
- ksingh7.medium.com: Kubernetes Endpoint Object: Your Bridge to External Services 🌟🌟 Chances are that you might want to access services external to the cluster, such as a database. In this article, you will learn how to create an endpoint manually to make an external database available to the Pods in the cluster.
@@ -8146,11 +8146,11 @@
- shahneil.medium.com: What Are Kubernetes Endpoints?
- fr4nk.xyz: Understanding Ingress in Kubernetes: A Comprehensive Guide Kubernetes Ingress plays a crucial role in managing external access to services within a cluster.
-- thenewstack.io: Otterize: Intent-Based Access Control for Kubernetes and Cloud Otterize offers intent-based access control and secure connectivity management within clusters and across the cloud.
-- blog.palark.com: Comparing Ingress controllers for Kubernetes
+- thenewstack.io: Otterize: Intent-Based Access Control for Kubernetes and Cloud Otterize offers intent-based access control and secure connectivity management within clusters and across the cloud.
+- blog.palark.com: Comparing Ingress controllers for Kubernetes
- community.ops.io: Kubernetes Ingress Controller. How does it work?= Learning how an ingress controller works by building one in bash.
- medium.com/@rasikzilte711: Kubernetes Networking — A Guide to Services, Ingress, Network Policies, DNS, and CNI Plugins
-- sysdig.com: Kubernetes Services: ClusterIP, Nodeport and LoadBalancer Your Kubernetes Pods have internal IPs, but can since Pods are created and destroyed, can you rely on those? Discover services and their types: ClusterIP, NodePort and LoadBalancer
+- sysdig.com: Kubernetes Services: ClusterIP, Nodeport and LoadBalancer Your Kubernetes Pods have internal IPs, but can since Pods are created and destroyed, can you rely on those? Discover services and their types: ClusterIP, NodePort and LoadBalancer
- medium.com/codex: Capture tcpdump with ksniff and wireshark from Kubernetes In Kubernetes, there are many ways to deploy and run apps, such as pods, services, and more. Tcpdump can be used to capture network traffic between these components, helping to identify network issues and diagnose problems.
- cloudtechtwitter.com: Reverse Proxy vs. Forward Proxy: The Differences
- matthewpalmer.net: Kubernetes Networking Guide for Beginners
@@ -8161,18 +8161,18 @@
- This ensures requests between apps remain in the same zone
-- otterize.com: Mastering Kubernetes networking: A journey in cloud-native packet management Master Kubernetes networking with a comprehensive packet walk, and learn how Otterize helps build adaptive Network Policies.
+- otterize.com: Mastering Kubernetes networking: A journey in cloud-native packet management Master Kubernetes networking with a comprehensive packet walk, and learn how Otterize helps build adaptive Network Policies.
Kubernetes DNS
Kubernetes Services and Load Balancing
-- Application Gateway for Containers with AKS Overlay Networking and VNet Flow Logs 🌟 - This post delves into the integration of Azure Application Gateway for Containers (AGC) with Azure Kubernetes Service (AKS) when using the overlay network option. It explores how AGC interacts with pods using non-routable IP addresses and examines the feasibility of using VNet Flow Logs to monitor traffic between AGC and AKS.
-- Introduction to Azure Application Gateway for Containers (AGC) - (Related to azure topic)
+- Application Gateway for Containers with AKS Overlay Networking and VNet Flow Logs 🌟 - This post delves into the integration of Azure Application Gateway for Containers (AGC) with Azure Kubernetes Service (AKS) when using the overlay network option. It explores how AGC interacts with pods using non-routable IP addresses and examines the feasibility of using VNet Flow Logs to monitor traffic between AGC and AKS.
+- Introduction to Azure Application Gateway for Containers (AGC) - (Related to azure topic)
-
Kubernetes Services and Load Balancing Explained 🌟 - An in-depth exploration of Kubernetes networking, focusing on Services, kube-proxy, and load balancing mechanisms. The article details how pods communicate within a cluster, the role of Services in directing traffic, and managing external access. It covers ClusterIP, NodePort, and LoadBalancer service types, their implementation via iptables, and advanced topics like preserving source IPs, handling terminating endpoints, and integrating with cloud load balancers. The content is illustrated with a practical example of deploying a two-tier application.
-
-
blog.cloudsigma.com: Kubernetes DNS Service: A Beginner’s Guide Kubernetes DNS service allows you to contact services with consistent DNS names instead of IP addresses.
+blog.cloudsigma.com: Kubernetes DNS Service: A Beginner’s Guide Kubernetes DNS service allows you to contact services with consistent DNS names instead of IP addresses.
TCP Keep Alive Requests
@@ -8194,7 +8194,7 @@
- opensource.com: What you need to know about Kubernetes NetworkPolicy Understanding Kubernetes NetworkPolicy is one of the fundamental requirements to learn before deploying an application to Kubernetes.
- itnext.io: CKAD Scenarios about Ingress and NetworkPolicy In-Browser CKAD Scenarios about Ingress and NetworkPolicies.
-- editor.cilium.io 🌟🌟🌟 For learning, you can use the amazing NetworkPolicy Editor at cilium.
+- editor.cilium.io 🌟🌟🌟 For learning, you can use the amazing NetworkPolicy Editor at cilium.
- whyk8s.substack.com: Why NetworkPolicies? Is Kubernetes networking insecure by default? Why was it built that way?
@@ -8210,22 +8210,22 @@
-
-- nginx.com: A Guide to Choosing an Ingress Controller, Part 4: NGINX Ingress Controller Options
+- nginx.com: A Guide to Choosing an Ingress Controller, Part 4: NGINX Ingress Controller Options
- NGINX Ingress Controller - v1.0.0 NGINX Ingress Controller v1.0.0 released today! The biggest change is the support to stable/v1 ingress object, and dropping support to v1beta1.
- amy-ma.medium.com: Nginx Ingress Configuration Configure NGINX basic routing with TLS on HPCC. This tutorial provides steps on how to set up basic routing for ECLWatch with the NGINX Ingress controller and configure certificates using Cert-Manager.
-- devopscube.com: How to Setup Nginx Ingress Controller On Kubernetes – Detailed Guide 🌟
+- devopscube.com: How to Setup Nginx Ingress Controller On Kubernetes – Detailed Guide 🌟
- medium.com/@jonathan_37674: How to secure Kubernetes ingress? | By ARMO
-- nginx.com: Automating Multi-Cluster DNS with NGINX Ingress Controller
+- nginx.com: Automating Multi-Cluster DNS with NGINX Ingress Controller
- engineering.backmarket.com: How we improved third-party availability and latency with Nginx in Kubernetes 🌟 Introducing a gateway to cache your third-party API can significantly improve its performance and stability. In this case study, you will discover how the team at Back Market configured NGINX in Kubernetes to improve third-party API availability and latency.
- towardsdev.com: Kubernetes: Deploying Nginx Servers with ConfigMaps & Shared Services with Minikube
- faun.pub: How to Monitor and Alert on Ingress-NGINX in Kubernetes
- sumanprasad.hashnode.dev: A Beginner’s Guide to Ingress and Ingress Controllers in Kubernetes
- akyriako.medium.com: Configure path-based routing with Nginx Ingress Controller
-- mattias.engineer: Kubernetes-101: Ingress 🌟 The article provides an in-depth guide on the Ingress resource. It explains that Ingress offers more functionalities than a Service, enabling multiple routing rules for different Services. It also touches upon HTTPS traffic with TLS certificates.
+- mattias.engineer: Kubernetes-101: Ingress 🌟 The article provides an in-depth guide on the Ingress resource. It explains that Ingress offers more functionalities than a Service, enabling multiple routing rules for different Services. It also touches upon HTTPS traffic with TLS certificates.
Contour Ingress Controller
Kubernetes Gateway API
@@ -8233,33 +8233,33 @@
Kubernetes Gateway API 🌟 - The Kubernetes Gateway API is a collection of APIs that model service networking in Kubernetes. It aims to provide a more expressive, role-oriented, and extensible successor to the Kubernetes Ingress API, enabling advanced traffic management, routing, and load balancing capabilities.
-
-
gateway-api.sigs.k8s.io 🌟 Gateway API is an open source project managed by the SIG-NETWORK community. It’s is a collection of resources that model service networking in Kubernetes. These resources - GatewayClass,Gateway, HTTPRoute, TCPRoute, Service, etc - aim to evolve Kubernetes service networking through expressive, extensible, and role-oriented interfaces that are implemented by many vendors and have broad industry support.
+gateway-api.sigs.k8s.io 🌟 Gateway API is an open source project managed by the SIG-NETWORK community. It’s is a collection of resources that model service networking in Kubernetes. These resources - GatewayClass,Gateway, HTTPRoute, TCPRoute, Service, etc - aim to evolve Kubernetes service networking through expressive, extensible, and role-oriented interfaces that are implemented by many vendors and have broad industry support.
-- kubernetes.io: Evolving Kubernetes networking with the Gateway API
-- thenewstack.io: Unifying Kubernetes Service Networking (Again) with the Gateway API 🌟 The Gateway API, formerly known as the Services API and before that Ingress V2, was first discussed in detail — and in-person — at Kubecon 2019 in San Diego. There were already many well-known and well-documented limitations of Ingress and Kubernetes networking APIs. The Gateway API was intended as a redo of these APIs, built on the lessons from Services, Ingress and the service mesh community.
+- kubernetes.io: Evolving Kubernetes networking with the Gateway API
+- thenewstack.io: Unifying Kubernetes Service Networking (Again) with the Gateway API 🌟 The Gateway API, formerly known as the Services API and before that Ingress V2, was first discussed in detail — and in-person — at Kubecon 2019 in San Diego. There were already many well-known and well-documented limitations of Ingress and Kubernetes networking APIs. The Gateway API was intended as a redo of these APIs, built on the lessons from Services, Ingress and the service mesh community.
- blog.flomesh.io: Kubernetes Gateway API — Evolution of Service Networking
-- armosec.io: The New Kubernetes Gateway API and Its Use Cases
+- armosec.io: The New Kubernetes Gateway API and Its Use Cases
- medium.com/google-cloud: Security with Kubernetes Gateway API 🌟
-- navendu.me: Comparing Kubernetes Gateway and Ingress APIs In this article, you will explore the new Kubernetes Gateway API and compare it with the existing Kubernetes Ingress API for handling external traffic
+- navendu.me: Comparing Kubernetes Gateway and Ingress APIs In this article, you will explore the new Kubernetes Gateway API and compare it with the existing Kubernetes Ingress API for handling external traffic
Kube-proxy
-
-
NFTables mode for kube-proxy in Kubernetes 🌟 - This article introduces the new nftables mode for kube-proxy, an alpha feature in Kubernetes 1.29 that is currently in beta and expected to reach General Availability (GA) in version 1.33. The new mode addresses long-standing performance issues associated with the iptables mode, particularly for large Kubernetes clusters with numerous Services. It leverages the capabilities of nftables to improve data plane latency by providing a more scalable and efficient way to handle Service proxying compared to the traditional iptables approach. The article encourages users with recent kernels to try out this new mode.
+NFTables mode for kube-proxy in Kubernetes 🌟 - This article introduces the new nftables mode for kube-proxy, an alpha feature in Kubernetes 1.29 that is currently in beta and expected to reach General Availability (GA) in version 1.33. The new mode addresses long-standing performance issues associated with the iptables mode, particularly for large Kubernetes clusters with numerous Services. It leverages the capabilities of nftables to improve data plane latency by providing a more scalable and efficient way to handle Service proxying compared to the traditional iptables approach. The article encourages users with recent kernels to try out this new mode.
-
dustinspecker.com: iptables: How Kubernetes Services Direct Traffic to Pods In this article you will learn how Kubernetes’s kube-proxy uses iptables to direct traffic to pods randomly. You’ll focus on the ClusterIP type of Kubernetes services.
-- arthurchiao.art: Cracking kubernetes node proxy (aka kube-proxy) This post analyzes the Kubernetes node proxy model, and provides 5 demo implementations (within couples of lines of code) of the model, each based on different tech-stacks (userspace/iptables/ipvs/tc-ebpf/sock-ebpf).
+- arthurchiao.art: Cracking kubernetes node proxy (aka kube-proxy) This post analyzes the Kubernetes node proxy model, and provides 5 demo implementations (within couples of lines of code) of the model, each based on different tech-stacks (userspace/iptables/ipvs/tc-ebpf/sock-ebpf).
Multicloud communication for Kubernetes
- Introducing Subnet Peering in Azure - (Related to azure topic)
-
-
Private Link Reality Bites: Service Endpoints vs Private Link - This blog post explores the differences and commonalities between Azure VNet Service Endpoints and Azure Private Link, addressing common confusion among organizations, especially those who adopted service endpoints before Private Link’s release. It provides context by tracing the evolution from public IP access to the introduction of service endpoints and then Private Link for Azure services.
+Private Link Reality Bites: Service Endpoints vs Private Link - This blog post explores the differences and commonalities between Azure VNet Service Endpoints and Azure Private Link, addressing common confusion among organizations, especially those who adopted service endpoints before Private Link’s release. It provides context by tracing the evolution from public IP access to the introduction of service endpoints and then Private Link for Azure services.
-
-
developers.redhat.com: Use Skupper to connect multiple Kubernetes clusters 🌟 - skupper.io Multicloud communication for Kubernetes. Skupper is a layer 7 service interconnect. It enables secure communication across Kubernetes clusters with no VPNs or special firewall rules. With Skupper, your application can span multiple cloud providers, data centers, and regions.
+developers.redhat.com: Use Skupper to connect multiple Kubernetes clusters 🌟 - skupper.io Multicloud communication for Kubernetes. Skupper is a layer 7 service interconnect. It enables secure communication across Kubernetes clusters with no VPNs or special firewall rules. With Skupper, your application can span multiple cloud providers, data centers, and regions.
Multi-Cluster Kubernetes Networking
@@ -8271,34 +8271,34 @@
Kubernetes Network Policy
-- howtoforge.com: Network Policy in Kubernetes 🌟 By default, pods accept traffic from any source. A network policy helps to specify how a group of pods can communicate with each other and other network endpoints.
+- howtoforge.com: Network Policy in Kubernetes 🌟 By default, pods accept traffic from any source. A network policy helps to specify how a group of pods can communicate with each other and other network endpoints.
- medium: How to Provision Network Policies in Kubernetes | AWS 🌟
- learncloudnative.com: Kubernetes Network Policy
- bionconsulting.com: Kubernetes Network Policies
-- thenewstack.io: The Kubernetes Network Security Effect 🌟 Kubernetes has a built-in object for managing network security: NetworkPolicy. While it allows the user to define the relationship between pods with ingress and egress policies, it is basic and requires very precise IP mapping of a solution — which changes constantly, so most users I’ve talked to are not using it.
+- thenewstack.io: The Kubernetes Network Security Effect 🌟 Kubernetes has a built-in object for managing network security: NetworkPolicy. While it allows the user to define the relationship between pods with ingress and egress policies, it is basic and requires very precise IP mapping of a solution — which changes constantly, so most users I’ve talked to are not using it.
- faun.pub: Control traffic flow to and from Kubernetes pods with Network Policies
-- openshift.com: Network Policies: Controlling Cross-Project Communication on OpenShift
+- openshift.com: Network Policies: Controlling Cross-Project Communication on OpenShift
- loft-sh.medium.com: Kubernetes Network Policies: A Practitioner’s Guide 🌟
-- loft.sh: Kubernetes Network Policies: A Practitioner’s Guide 🌟
+- loft.sh: Kubernetes Network Policies: A Practitioner’s Guide 🌟
- medium: Kubernetes Network Policies: Are They Really Useful? 🌟
-- loft.sh: Kubernetes Network Policies for Isolating Namespaces 🌟
-- arthurchiao.art: Cracking Kubernetes Network Policy This post digs into the Kubernetes NetworkPolicy model, then designs a policy enforcer based on the technical requirements and further implements it with less than 100 lines of eBPF code. Hope that after reading through this post, readers will get a deeper understanding on how network policies are enforced in the underlying.
-- engineering.mercari.com: Managing Network Policies for namespaces isolation on a multi-tenant Kubernetes cluster This post outlines how to implement an abstraction over network policies in a multi-tenant Kubernetes cluster instead of directly exposing raw YAML-based manifests for better usability and verifiability
+- loft.sh: Kubernetes Network Policies for Isolating Namespaces 🌟
+- arthurchiao.art: Cracking Kubernetes Network Policy This post digs into the Kubernetes NetworkPolicy model, then designs a policy enforcer based on the technical requirements and further implements it with less than 100 lines of eBPF code. Hope that after reading through this post, readers will get a deeper understanding on how network policies are enforced in the underlying.
+- engineering.mercari.com: Managing Network Policies for namespaces isolation on a multi-tenant Kubernetes cluster This post outlines how to implement an abstraction over network policies in a multi-tenant Kubernetes cluster instead of directly exposing raw YAML-based manifests for better usability and verifiability
- blog.devgenius.io: Simplify Kubernetes Network Policy Generation
- blog.slycreator.com: Network Policies: Understanding Kubernetes Network Policies This article explores the fundamental concepts, syntax, semantics, and implementation considerations associated with Network Policies. It also delves into best practices and real-world examples to illustrate their practical application and benefits.
Cilium
-- cilium.io 🌟 eBPF-based Networking, Observability, and Security
+- cilium.io 🌟 eBPF-based Networking, Observability, and Security
- cilium.io: NetworkPolicy Editor: Create, Visualize, and Share Kubernetes NetworkPolicies 🌟
-- editor.cilium.io 🌟 Learn how to create Network Policies for Kubernetes using an interactive playground
-- buoyant.io: Kubernetes network policies with Cilium and Linkerd
+- editor.cilium.io 🌟 Learn how to create Network Policies for Kubernetes using an interactive playground
+- buoyant.io: Kubernetes network policies with Cilium and Linkerd
- itnext.io: Installing Cilium on Kubernetes in a fast and efficient way
- cilium.io: CNI Benchmark: Understanding Cilium Network Performance
-- cockroachlabs.com: How to use Cluster Mesh for Multi-Region Kubernetes Pod Communication
+- cockroachlabs.com: How to use Cluster Mesh for Multi-Region Kubernetes Pod Communication
- Thanks to services provided by AWS, GCP, and Azure it’s become relatively easy to develop applications that span multiple regions. This is great because slow apps kill businesses. There is one common problem with these applications: they are not supported by multi-region database architecture.
- CockroachDB is built to solve that problem and we’re doing it in production for many applications today. But that’s not what this blog is about. In this blog, I will provide a solution for the problem of getting Kubernetes pods to talk to each other in multi-region deployments.
@@ -8306,7 +8306,7 @@
- cilium.io: Cilium 1.10: WireGuard, BGP Support, Egress IP Gateway, New Cilium CLI, XDP Load Balancer, Alibaba Cloud Integration and more Traditional workloads have a fixed and unique IP that can be recognized by a firewall. Traffic coming from a containerized application will come from many different IPs. How can you fix that?
Cilium allows users to specify an egress NAT policy
- medium.com/@charled.breteche: Kubernetes Security — Control pod to pod communications with Cilium network policies In this article, you’ll explore Cilium network policies and how you can use them to control pod to pod communications on a 3 nodes and 3 masters cluster. You will also use Hubble to visualise the effect of the network policies in your cluster.
-- solo.io: Exploring Cilium Layer 7 Capabilities Compared to Istio
+- solo.io: Exploring Cilium Layer 7 Capabilities Compared to Istio
- betterprogramming.pub: K8s: Network Policy Made Simple With Cilium Editor 🌟 An intuitive graphical tool to define complex network policies
@@ -8318,7 +8318,7 @@ Cilium allows users to specify an egress NAT policy
Kubernetes Ingress Specification
@@ -8333,7 +8333,7 @@ Cilium allows users to specify an egress NAT policy
Software-Defined IP Address Management (IPAM)
- IP Address Management (IPAM)
-- fusionlayer.com: Software-Defined IP Address Management (IPAM)
+- fusionlayer.com: Software-Defined IP Address Management (IPAM)
- Cloud computing and service automation are changing the way in which applications and data are being delivered and consumed. The existing 30-year-old networking model is failing to keep up with the automated service architectures and the Internet of Things (IoT) based on end-to-end automation.
- To facilitate the migration to cloud-era computing, service providers and data centers must add networking into the automated service workflows. This requires agility and elasticity that traditional networking products are not designed to provide. As IT environments of tomorrow involve a plethora of orchestrators and controllers spinning up services and applications inside shared networks, they all must be managed and provisioned by a unified solution authoritative for all network-related information.
@@ -8341,8 +8341,8 @@ Cilium allows users to specify an egress NAT policy
CNI Container Networking Interface
-- Kubernetes.io: Network Plugins
-- rancher.com: Container Network Interface (CNI) Providers
+- Kubernetes.io: Network Plugins
+- rancher.com: Container Network Interface (CNI) Providers
- github.com/containernetworking 🌟
@@ -8353,17 +8353,17 @@ Cilium allows users to specify an egress NAT policy
List of existing CNI Plugins (IPAM)
-- Kubernetes Networking
+- Kubernetes Networking
- Overlay Network plugins:
- Routed Network Plugins:
- IPAM modules:
@@ -8379,15 +8379,15 @@ Cilium allows users to specify an egress NAT policy
-
+
Project Calico
-- tigera.io
-- Project Calico 🌟 Secure networking for the cloud native era
+- tigera.io
+- Project Calico 🌟 Secure networking for the cloud native era
- medium: Calico for Kubernetes networking: the basics & examples
-- thenewstack.io: Tigera’s Calico Aims to Ease Connectivity Pain with Kubernetes
-- projectcalico.org: Advertising Kubernetes Service IPs with Calico and BGP
+- thenewstack.io: Tigera’s Calico Aims to Ease Connectivity Pain with Kubernetes
+- projectcalico.org: Advertising Kubernetes Service IPs with Calico and BGP
- mhmxs.blogspot.com: Autoscaling Calico Route Reflector topology in Kubernetes
- tigera.io: Enforcing Network Security Policies with GitOps – Part 1 (Calico + ArgoCD) Network policy is a key element of Kubernetes security. Network policy is expressed as a YAML configuration and works very well with GitOps. By adopting GitOps, security teams benefit in the following ways:
- Take your policies with you. Kubernetes cluster creation from code is fairly common. It is much easier and less error-prone to push your Git-based policies to a new cluster.
@@ -8403,17 +8403,17 @@ Cilium allows users to specify an egress NAT policy
DNS Service with CoreDNS
- medium: How to Autoscale the DNS Service in a Kubernetes Cluster
-- thenewstack.io: Supercharge CoreDNS with Cluster Addons 🌟
-- sysdig.com: How to monitor coreDNS 🌟 The most common problems and outages in a Kubernetes cluster come from coreDNS, so learning how to monitor coreDNS is crucial.
-- ungleich.ch: Making kubernetes kube-dns/CoreDNS publicly reachable
+- thenewstack.io: Supercharge CoreDNS with Cluster Addons 🌟
+- sysdig.com: How to monitor coreDNS 🌟 The most common problems and outages in a Kubernetes cluster come from coreDNS, so learning how to monitor coreDNS is crucial.
+- ungleich.ch: Making kubernetes kube-dns/CoreDNS publicly reachable
- iamitcohen.medium.com: DNS in Kubernetes, how does it work?
-- nslookup.io: The life of a DNS query in Kubernetes In Kubernetes, DNS queries follow a specific path to resolve the IP address of a hostname. In this blog post, you will learn the life of a DNS query in Kubernetes step-by-step.
+- nslookup.io: The life of a DNS query in Kubernetes In Kubernetes, DNS queries follow a specific path to resolve the IP address of a hostname. In this blog post, you will learn the life of a DNS query in Kubernetes step-by-step.
- levelup.gitconnected.com: Kubernetes with CoreDNS
Kubernetes Node Local DNS Cache
k8gb
diff --git a/kubernetes-newsletters.html b/kubernetes-newsletters.html
index c94e84ed..f69171c0 100644
--- a/kubernetes-newsletters.html
+++ b/kubernetes-newsletters.html
@@ -7612,11 +7612,11 @@
Kubernetes Newsletters
-- KubeWeekly
-- Last Week in Kubernetes Development
-- Learn Kubernetes weekly
+- KubeWeekly
+- Last Week in Kubernetes Development
+- Learn Kubernetes weekly
- Upcoming Kubernetes Events
-- Kubelist
+- Kubelist
- Learn Cloud Native
diff --git a/kubernetes-on-premise.html b/kubernetes-on-premise.html
index 05f9ef0e..b309c9a9 100644
--- a/kubernetes-on-premise.html
+++ b/kubernetes-on-premise.html
@@ -8040,13 +8040,13 @@
Introduction
-- containerjournal.com: Deploying Kubernetes on Bare Metal
-- thenewstack.io: Kubernetes on Bare Metal vs. VMs: It’s Not Just Performance
-- containerjournal.com: When Kubernetes-as-a-Service Doesn’t Cut It
+- containerjournal.com: Deploying Kubernetes on Bare Metal
+- thenewstack.io: Kubernetes on Bare Metal vs. VMs: It’s Not Just Performance
+- containerjournal.com: When Kubernetes-as-a-Service Doesn’t Cut It
Comparative Analysis of Kubernetes Deployment Tools
-- A Comparative Analysis of Kubernetes Deployment Tools: Kubespray, kops, and conjure-up
+- A Comparative Analysis of Kubernetes Deployment Tools: Kubespray, kops, and conjure-up
- wecloudpro.com: Deploy HA kubernetes cluster in AWS in less than 5 minutes
Deploying Kubernetes Cluster with Kops
@@ -8056,8 +8056,8 @@
- On AWS, the best tool is kops. Since AWS EKS (hosted kubernetes) is currently available, this is the preferred option (you don’t need to maintain the masters).
- For other installs, or if you can’t get kops to work, you can use kubeadm.
- Setup kops in your windows with virtualbox.org and vagrantup.com . Once downloaded, to type a new linux VM, just spin up ubuntu via vagrant in cmd/powershell and run kops installer:
-- blog.ivnilv.com: Rotating Kops Etcd Certificates
-- blog.kubecost.com: Kubernetes kOps: Step-By-Step Example & Alternatives
+- blog.ivnilv.com: Rotating Kops Etcd Certificates
+- blog.kubecost.com: Kubernetes kOps: Step-By-Step Example & Alternatives
C:\ubuntu> vagrant init ubuntu/xenial64
C:\ubuntu> vagrant up
@@ -8075,15 +8075,15 @@ $ sudo mv k
- Kubernetes Cluster with Kubeadm It works on any deb / rpm compatible Linux OS, for example Ubuntu, Debian, RedHat or CentOS. This is the main advantage of kubeadm. The tool itself is still in beta (Q1 2018), but is expected to become stable somewhere this year. It’s very easy to use and lets you spin kubernetes cluster in just a couple of minutes.
- medium.com: Demystifying High Availability in Kubernetes Using Kubeadm
-- Setting Up a Kubernetes Cluster on Ubuntu 18.04
+- Setting Up a Kubernetes Cluster on Ubuntu 18.04
- itnext.io: Up and running out of the cloud — How to setup the Masters using kubeadm bootstrap In this article, you’ll see how to make use of kubeadm bootstrap to set up and join 3 master instances as members of our cluster.
- Set up a Bare Metal Kubernetes cluster with
-- blog.tobias-huebner.org: Low-budget self-hosted Kubernetes 🌟
+- blog.tobias-huebner.org: Low-budget self-hosted Kubernetes 🌟
- mirantis.com: How to install Kubernetes with Kubeadm: A quick and dirty guide
-- kosyfrances.com: Using kubeadm to create a Kubernetes 1.20 cluster on VirtualBox with Ubuntu
-- blog.radwell.codes: Provisioning Single-node Kubernetes Cluster using kubeadm on Ubuntu 20.04
+- kosyfrances.com: Using kubeadm to create a Kubernetes 1.20 cluster on VirtualBox with Ubuntu
+- blog.radwell.codes: Provisioning Single-node Kubernetes Cluster using kubeadm on Ubuntu 20.04
- medium.com/@ZiXianZeroX: Setting Up an On-premise Kubernetes Cluster from Scratch
-- thenewstack.io: How to Deploy Kubernetes with Kubeadm and containerd
+- thenewstack.io: How to Deploy Kubernetes with Kubeadm and containerd
- faun.pub: Configuring HA Kubernetes cluster on bare metal servers with kubeadm. ⅓ In this article, you’ll create a HA Kubernetes cluster with multi masters topology, with an external Etcd cluster as a base layer and a MetalLB load balancer. On all worker nodes, you’ll deploy a GlusterFS for storage.
- blog.learncodeonline.in: Kubernetes Cluster Deployment on CentOS Linux
- github.com/kubernetes/kubeadm: High Availability Considerations
@@ -8098,14 +8098,14 @@ $ sudo mv k
- youtube: OpenShift Commons En Vivo - KubeInit con Maria Bracho, Scott McCarty, and Carlos Camacho (Red Hat, Spanish) 🌟
-- itwonderlab.com: Kubernetes Cluster using Vagrant and Ansible with Containerd (in 3 minutes) 🌟
+- itwonderlab.com: Kubernetes Cluster using Vagrant and Ansible with Containerd (in 3 minutes) 🌟
kube-aws Kubernetes on AWS
Kubespray
- Kubespray
-- redhat.com: An introduction to Kubespray By combining Ansible and Kubernetes, Kubespray can deploy Kubernetes clusters on multiple machines.
-- adamtheautomator.com/kubespray: Conquer Kubernetes Clusters with Ansible Kubespray
+- redhat.com: An introduction to Kubespray By combining Ansible and Kubernetes, Kubespray can deploy Kubernetes clusters on multiple machines.
+- adamtheautomator.com/kubespray: Conquer Kubernetes Clusters with Ansible Kubespray
- Manually deploying Kubernetes can be challenging for administrators, especially on bare-metal infrastructure deployment. Luckily, there is an automation tool for deploying production-ready Kubernetes called Kubespray.
- Kubespray is an Ansible Playbook for deploying Kubernetes Cluster and provides a High Availability cluster, composable attributes, components, and supports multiple Linux distributions. Kubespray also supports cloud services like AWS, GCE, and Azure.
@@ -8114,19 +8114,19 @@ $ sudo mv k
Conjure up
WKSctl
- Weave Kubernetes System Control - wksctl Open Source Weaveworks Kubernetes System
-- WKSctl - A New OSS Kubernetes Manager using GitOps
-- WKSctl: a Tool for Kubernetes Cluster Management Using GitOps
+- WKSctl - A New OSS Kubernetes Manager using GitOps
+- WKSctl: a Tool for Kubernetes Cluster Management Using GitOps
Terraform (kubernetes the hard way)
- Kelsey Hightower: kubernetes the hard way
-- napo.io: Kubernetes The (real) Hard Way on AWS
-- napo.io: Terraform Kubernetes Multi-Cloud (ACK, AKS, DOK, EKS, GKE, OKE)
+- napo.io: Kubernetes The (real) Hard Way on AWS
+- napo.io: Terraform Kubernetes Multi-Cloud (ACK, AKS, DOK, EKS, GKE, OKE)
- medium: Upgrading Kubernetes The Hard Way
- medium: Kubernetes the hard way on Docker
- Autoscalable Kubernetes cluster at Exoscale, using Packer and Terraform
@@ -8137,31 +8137,31 @@ $ sudo mv k
Caravan
-- linecorp.com: Building Large Kubernetes Clusters with Caravan
+- linecorp.com: Building Large Kubernetes Clusters with Caravan
ClusterAPI
-- ClusterAPI Cluster API is a Kubernetes sub-project focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters.
+- ClusterAPI Cluster API is a Kubernetes sub-project focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters.
- itnext.io: Multi-Cloud and Multi-Cluster Declarative Kubernetes Cluster Creation and Management with Cluster API (CAPI — v1alpha3)
- medium: ClusterOps: 1-Line Commit to Upgrade Your Kubernetes Clusters 🌟
-- cncf.io webinar: Deploying Kubernetes to bare metal using cluster API
+- cncf.io webinar: Deploying Kubernetes to bare metal using cluster API
- itnext.io: Multi-Cloud and Multi-Cluster Declarative Kubernetes Cluster Creation and Management with Cluster API (CAPI — v1alpha3)
- github.com: Cluster API Helm Chart - youtube: Cluster API & FluxCD - the power of GitOps A Helm chart to install Cluster API manifests
-- weave.works: Manage Thousands of Clusters with GitOps and the Cluster API
-- thenewstack.io: Cluster API Offers a Way to Manage Multiple Kubernetes Deployments
-- thenewstack.io: Provision Bare-Metal Kubernetes with the Cluster API
-- cncf.io: Kubernetes Cluster API reaches production readiness with version 1.0
+- weave.works: Manage Thousands of Clusters with GitOps and the Cluster API
+- thenewstack.io: Cluster API Offers a Way to Manage Multiple Kubernetes Deployments
+- thenewstack.io: Provision Bare-Metal Kubernetes with the Cluster API
+- cncf.io: Kubernetes Cluster API reaches production readiness with version 1.0
- weaveworks/cluster-api-provider-existinginfra Manage existing infrastructure with Cluster API using this provider. A Cluster API v1alpha3 Infrastructure Provider for already-provisioned hosts running Linux. This controller is split out from and used by weaveworks/wksctl.
-- piotrminkowski.com: Create and Manage Kubernetes Clusters with Cluster API and ArgoCD
+- piotrminkowski.com: Create and Manage Kubernetes Clusters with Cluster API and ArgoCD
Microk8s
-- Microk8s
+- Microk8s
- Kata Containers on MicroK8s This repository encompasses a fully scripted Github workflow to test the transparent use of the runtime for Kata Containers (Katas) on MicroK8s
- MicroK8s & Kubernetes security benchmark from CIS
- cloudsavvyit.com: How to run your own kubernetes cluster with Microk8s
-- thenewstack.io: Deploy Microk8s and the Kubernetes Dashboard for K8s Development
-- thenewstack.io: Deploy a Kubernetes Cluster on Ubuntu Server with Microk8s
+- thenewstack.io: Deploy Microk8s and the Kubernetes Dashboard for K8s Development
+- thenewstack.io: Deploy a Kubernetes Cluster on Ubuntu Server with Microk8s
k8s-tew
@@ -8170,16 +8170,16 @@ $ sudo mv k
Project Neco
Zarf. DevSecOps for Air Gap Systems
-- defenseunicorns/zarf DevSecOps for Air Gap & Limited-Connection Systems. Zarf massively simplifies the setup & administration of kubernetes clusters, cyber systems & workloads that support DevSecOps “across the air gap”.
+- defenseunicorns/zarf DevSecOps for Air Gap & Limited-Connection Systems. Zarf massively simplifies the setup & administration of kubernetes clusters, cyber systems & workloads that support DevSecOps “across the air gap”.
Kubernetes Operating Systems
Kubernetes Distributions
-- acloudguru.com: Which Kubernetes distribution is right for you?
-- infoworld.com: 6 Kubernetes distributions leading the container revolution
+- acloudguru.com: Which Kubernetes distribution is right for you?
+- infoworld.com: 6 Kubernetes distributions leading the container revolution
- OpenShift
- VMware Tanzu Grid
- Rancher Kubernetes Engine
@@ -8200,8 +8200,8 @@ $ sudo mv k
Red Hat OpenShift
- Openshift Container Platform
-- OKD The Community Distribution of Kubernetes that powers Red Hat OpenShift
-- itprotoday.com: Who’s Winning in the Container Software Market 🌟 Thanks to its container customer training, the $1 billion container software market is Red Hat’s to lose. Where do the other players stand?
+- OKD The Community Distribution of Kubernetes that powers Red Hat OpenShift
+- itprotoday.com: Who’s Winning in the Container Software Market 🌟 Thanks to its container customer training, the $1 billion container software market is Red Hat’s to lose. Where do the other players stand?
Rancher
@@ -8209,42 +8209,42 @@ $ sudo mv k
Weave Kubernetes Platform
-- weave.works: Weave Kubernetes Platform Automate Enterprise Kubernetes the GitOps way
+- weave.works: Weave Kubernetes Platform Automate Enterprise Kubernetes the GitOps way
- github: Weave Net - Weaving Containers into Applications
Ubuntu Charmed Kubernetes
-- Charmed Kubernetes
-- Kubernetes GitOps with Azure Arc and Charmed Kubernetes
+- Charmed Kubernetes
+- Kubernetes GitOps with Azure Arc and Charmed Kubernetes
VMware Kubernetes Tanzu and Project Pacific
- blogs.vmware.com: Introducing Project Pacific (vSphere with Kubernetes)
-- VMware vSphere 7 with Kubernetes - Project Pacific
+- VMware vSphere 7 with Kubernetes - Project Pacific
- VMware Kubernetes Tanzu
-- cormachogan.com: A first look at vSphere with Kubernetes in action
-- cormachogan.com: Building a TKG Cluster in vSphere with Kubernetes
-- blogs.vmware.com: VMware Tanzu Service Mesh, built on VMware NSX is Now Available!
+- cormachogan.com: A first look at vSphere with Kubernetes in action
+- cormachogan.com: Building a TKG Cluster in vSphere with Kubernetes
+- blogs.vmware.com: VMware Tanzu Service Mesh, built on VMware NSX is Now Available!
- tanzu.vmware.com: VMware Tanzu SQL: MySQL at Scale Made Easy for Kubernetes
-- VMware hands-on Labs 🌟
+- VMware hands-on Labs 🌟
- wecloudpro.com: VMware Tanzu Community Edition 🌟
-- vmware-tanzu/octant Highly extensible platform for developers to better understand the complexity of Kubernetes clusters. Octant is a tool for developers to understand how applications run on a Kubernetes cluster. It aims to be part of the developer’s toolkit for gaining insight and approaching complexity found in Kubernetes. Octant offers a combination of introspective tooling, cluster navigation, and object management along with a plugin system to further extend its capabilities.
-- zdnet.com: VMware brings Tanzu Application Platform into GA to ease Kubernetes adoption The platform, introduced in 2019, is designed to help customers quickly build and deploy software on any public cloud or on-premises Kubernetes cluster.
+- vmware-tanzu/octant Highly extensible platform for developers to better understand the complexity of Kubernetes clusters. Octant is a tool for developers to understand how applications run on a Kubernetes cluster. It aims to be part of the developer’s toolkit for gaining insight and approaching complexity found in Kubernetes. Octant offers a combination of introspective tooling, cluster navigation, and object management along with a plugin system to further extend its capabilities.
+- zdnet.com: VMware brings Tanzu Application Platform into GA to ease Kubernetes adoption The platform, introduced in 2019, is designed to help customers quickly build and deploy software on any public cloud or on-premises Kubernetes cluster.
- dev.to/saintdle: Deploying Nvidia GPU enabled Tanzu Kubernetes Clusters
KubeAcademy Pro (free training)
-- tanzu.vmware.com: Introducing KubeAcademy Pro: In-Depth Kubernetes Training, Totally Free
+- tanzu.vmware.com: Introducing KubeAcademy Pro: In-Depth Kubernetes Training, Totally Free
- kube.academy/pro 🌟
Kontena Pharos
-- Pharos 🌟 Kubernetes Distribution
-- Stateful Kubernetes-In-a-Box with Kontena Pharos
+- Pharos 🌟 Kubernetes Distribution
+- Stateful Kubernetes-In-a-Box with Kontena Pharos
Mirantis Docker Enterprise with Kubernetes and Docker Swarm
-- Mirantis Docker Enterprise 3.1+ with Kubernetes
+- Mirantis Docker Enterprise 3.1+ with Kubernetes
- Docker Enterprise 3.1 announced. Features:
- Istio is now built into Docker Enterprise 3.1!
- Comes with Kubernetes 1.17. Kubernetes on Windows capability.
@@ -8258,8 +8258,8 @@ $ sudo mv k
Mirantis k0s
-- k0s
-- infoq.com: Mirantis Announces k0s, a New Kubernetes Distribution
+- k0s
+- infoq.com: Mirantis Announces k0s, a New Kubernetes Distribution
- medium: K0s Supports Kubernetes 1.22
K0s
@@ -8274,11 +8274,11 @@ $ sudo mv k
Typhoon
-- poseidon/typhoon **Typhoon is a minimal and free Kubernetes distribution with Terraform.*- typhoon.psdn.io
+- poseidon/typhoon **Typhoon is a minimal and free Kubernetes distribution with Terraform.*- typhoon.psdn.io
kurl
-- kurl.sh kURL is a Kubernetes installer for air-gapped and online clusters. kURL relies on kubeadm but automates tasks such as installing the container runtime, configuring pod networking, etc., so any user can deploy a Kubernetes cluster with a single script.
+- kurl.sh kURL is a Kubernetes installer for air-gapped and online clusters. kURL relies on kubeadm but automates tasks such as installing the container runtime, configuring pod networking, etc., so any user can deploy a Kubernetes cluster with a single script.
diff --git a/kubernetes-operators-controllers.html b/kubernetes-operators-controllers.html
index 8bbb3cb3..dfad8343 100644
--- a/kubernetes-operators-controllers.html
+++ b/kubernetes-operators-controllers.html
@@ -7798,45 +7798,45 @@
- Red Hat Build of Kueue 🌟 - This documentation introduces Red Hat Build of Kueue, a Kubernetes-native batch job orchestrator. It explains how Kueue manages and schedules batch workloads by providing features like fair-sharing, preemption, and resource aggregation, making it suitable for AI and high-performance computing (HPC) workloads.
-
-
How Kubernetes Operators Fit into Platform Building and When Traditional IaC Isn’t Enough 🌟 - This article explores the role of Kubernetes Operators in modern platform engineering, highlighting their advantages over traditional Infrastructure as Code (IaC) for managing complex applications and infrastructure within the Kubernetes control plane. It discusses how operators encapsulate expertise for tasks like backups, upgrades, and scaling, integrating seamlessly with tools like Argo and Flux for enhanced drift detection and reconciliation.
+How Kubernetes Operators Fit into Platform Building and When Traditional IaC Isn’t Enough 🌟 - This article explores the role of Kubernetes Operators in modern platform engineering, highlighting their advantages over traditional Infrastructure as Code (IaC) for managing complex applications and infrastructure within the Kubernetes control plane. It discusses how operators encapsulate expertise for tasks like backups, upgrades, and scaling, integrating seamlessly with tools like Argo and Flux for enhanced drift detection and reconciliation.
-
-
kruschecompany.com: What is a Kubernetes Operator and Where it Can be Used?
+kruschecompany.com: What is a Kubernetes Operator and Where it Can be Used?
-- kruschecompany.com: Prometheus Operator – Installing Prometheus Monitoring Within The Kubernetes Environment
-- hashicorp.com: Creating Workspaces with the HashiCorp Terraform Operator for Kubernetes
-- banzaicloud.com: Kafka rolling upgrade made easy with Supertubes
-- devops.com: Day 2 for the Operator Ecosystem 🌟
-- KUDO: The Kubernetes Universal Declarative Operator 🌟 KUDO is a toolkit that makes it easy to build Kubernetes Operators, in most cases just using YAML.
+- kruschecompany.com: Prometheus Operator – Installing Prometheus Monitoring Within The Kubernetes Environment
+- hashicorp.com: Creating Workspaces with the HashiCorp Terraform Operator for Kubernetes
+- banzaicloud.com: Kafka rolling upgrade made easy with Supertubes
+- devops.com: Day 2 for the Operator Ecosystem 🌟
+- KUDO: The Kubernetes Universal Declarative Operator 🌟 KUDO is a toolkit that makes it easy to build Kubernetes Operators, in most cases just using YAML.
- itnext.io: Operator Lifecycle Manager (OLM) 🌟
-- kube-fluentd-operator 🌟 is a sane, no-brainer Kubernetes+Helm distribution of Fluentd with batteries included, config validation, no needs to restart, with sensible defaults and best practices built-in. You can use Kubernetes labels to filter/route logs!
+- kube-fluentd-operator 🌟 is a sane, no-brainer Kubernetes+Helm distribution of Fluentd with batteries included, config validation, no needs to restart, with sensible defaults and best practices built-in. You can use Kubernetes labels to filter/route logs!
- Domain-harvester is an operator that collects domains from all Ingress resources in a Kubernetes cluster and provides its expiry information
- Cass Operator The DataStax Kubernetes Operator for Apache Cassandra®
- Kotal operator is cloud agnostic blockchain deployer that make it easy to deploy highly available, self-managing, self-healing blockchain infrastructure (networks, nodes, storage clusters …) on any cloud.
- Speculator: Redis Operator A Golang based redis operator that will make/oversee Redis standalone/cluster mode setup on top of the Kubernetes. It can create a redis cluster setup with best practices on Cloud as well as the Bare metal environment. Also, it provides an in-built monitoring capability using redis-exporter.
- github.com/carlosedp/lbconfig-operator: External Load Balancer Operator 🌟 a Kubernetes/openshift Operator to dynamically configure external load-balancers distributing the traffic to the cluster nodes. It’s not 100% (will it ever be?) but already configures the F5 BigIP. The idea is to have multiple LB backends soon.
- Sentry Operator A Kubernetes operator for automating the provisioning and management of Sentry resources via Kubernetes CRDs.
-- thenewstack.io: When to Use, and When to Avoid, the Operator Pattern 🌟
-- infoq.com: Kubernetes Operators in Depth
+- thenewstack.io: When to Use, and When to Avoid, the Operator Pattern 🌟
+- infoq.com: Kubernetes Operators in Depth
- DB Operator 🌟 is a Kubernetes Operator for the management of cloud databases, primarily Google Cloud SQL(GCSQL). It is designed to support the on demand creation of test environments in CI/CD pipelines.
-- cncf.io: Kubernetes Operators 101
+- cncf.io: Kubernetes Operators 101
- container-solutions.com: Kubernetes Operators Explained
- kubeload - load testing is a Kubernetes operator that lets you configure your load-test initial load, max load, interval and hatch-rate. You can use CRD to define all the parameters and repeat your load testing experiments.
-- contentful.com: Open-sourcing kube-secret-syncer: A Kubernetes operator to sync secrets from AWS Secrets Manager
+- contentful.com: Open-sourcing kube-secret-syncer: A Kubernetes operator to sync secrets from AWS Secrets Manager
- registry-creds is a Kubernetes operator that can be used to propagate a single ImagePullSecret to all namespaces within your cluster. The primary reason for creating this operator is to make it easier to consume images from Docker Hub.
- gemini is a Kubernetes CRD and operator for managing VolumeSnapshots. This allows you to back up your PersistentVolumes on a regular schedule, retire old backups, and restore backups with minimal downtime.
-- Kdo: deployless development on Kubernetes 🌟 Kdo is a command line tool that enables developers to run, develop and test code changes in a realistic deployed setting without having to deal with the complexity of Kubernetes deployment and configuration.
+- Kdo: deployless development on Kubernetes 🌟 Kdo is a command line tool that enables developers to run, develop and test code changes in a realistic deployed setting without having to deal with the complexity of Kubernetes deployment and configuration.
- HostPort Operator is a Kubernetes Operator to allocate host ports
-- iximiuz.com: Exploring Kubernetes Operator Pattern 🌟
-- isaaguilar/terraform-operator: Terraform Operator A Kubernetes CRD and Controller to handle Terraform operations by generating k8s jobs catered to perform Terraform workflows
+- iximiuz.com: Exploring Kubernetes Operator Pattern 🌟
+- isaaguilar/terraform-operator: Terraform Operator A Kubernetes CRD and Controller to handle Terraform operations by generating k8s jobs catered to perform Terraform workflows
- didil/autobucket-operator The autobucket operator is a Kubernetes operator that automatically creates and manages Cloud Buckets (Object Storage) for k8s Deployments.
-- openshift.com: Is your Operator Air-Gap Friendly?
-- kuberhealthy 🌟 An operator for synthetic monitoring on Kubernetes. Write your own tests in your own container and Kuberhealthy will manage everything else. Automatically creates and sends metrics to Prometheus and InfluxDB. Included simple JSON status page. Supplements other solutions like Prometheus very nicely!
+- openshift.com: Is your Operator Air-Gap Friendly?
+- kuberhealthy 🌟 An operator for synthetic monitoring on Kubernetes. Write your own tests in your own container and Kuberhealthy will manage everything else. Automatically creates and sends metrics to Prometheus and InfluxDB. Included simple JSON status page. Supplements other solutions like Prometheus very nicely!
- Bare Metal Operator The Bare Metal Operator implements a Kubernetes API for managing bare metal hosts. It maintains an inventory of available hosts as Custom Resource Definitions.
- Meerkat Meerkat is a Kubernetes Operator that facilitates the deployment of OpenVPN in a Kubernetes cluster. By leveraging Hashicorp Vault, Meerkat securely manages the underlying PKI.
- Logging Operator A golang based CRD operator to setup and manage logging stack (Elasticsearch, Fluentd, and Kibana) in the Kubernetes cluster. It helps to setup each component of the EFK stack separately.
@@ -7850,9 +7850,9 @@
- IngressMonitorController (Deprecated) A Kubernetes controller to watch ingresses and create liveness alerts for your apps/microservices in UptimeRobot, StatusCake, Pingdom, etc.
- FairwindsOps/rbac-manager: RBAC Manager 🌟 A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts. RBAC Manager is designed to simplify authorization in Kubernetes. This is an operator that supports declarative configuration for RBAC with new custom resources. Instead of managing role bindings or service accounts directly, you can specify a desired state and RBAC Manager will make the necessary changes to achieve that state.
- KubePlus - Kubernetes Operator to deliver Helm charts as-a-service 🌟
-- kubernetes.io: Writing a Controller for Pod Labels
-- kubermatic.com: Why Implementing Kubernetes Operators Is a Good Idea! 🌟
-- thenewstack.io: We Pushed Helm to the Limit, then Built a Kubernetes Operator 🌟
+- kubernetes.io: Writing a Controller for Pod Labels
+- kubermatic.com: Why Implementing Kubernetes Operators Is a Good Idea! 🌟
+- thenewstack.io: We Pushed Helm to the Limit, then Built a Kubernetes Operator 🌟
- cncf.io: CNCF Operator White Paper (PDF) 🌟 This white paper defines Operators in a wider context than Kubernetes. It describes their characteristics and components, gives an overview of common patterns currently in use and explains how they differ from Kubernetes controllers.
- itnext.io: Kubexpose: A Kubernetes Operator, for fun and profit! Access your Kubernetes Deployment over the Internet - abhirockzz/kubexpose-operator Access your Kubernetes Deployment over the Internet
- itnext.io: Kubernetes Operators: Cruise Control for Managing Cloud-Native Apps
@@ -7867,7 +7867,7 @@
- blog.px.dev/k8s-operator: 3 Reasons to Use Kubernetes Operators (and 2 Reasons Not To)
- practicalkubernetes.blogspot.com: Making the case for Kubernetes Operators
- reactive-tech/kubegres Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql instances and manage databases replication, failover and backup.
-- Capsule Operator is a Kubernetes multi-tenant Operator. It aggregates multiple namespaces in a Tenant. Within each tenant, users are free to create their namespaces and share all the assigned resources between the namespaces of the tenant.
+- Capsule Operator is a Kubernetes multi-tenant Operator. It aggregates multiple namespaces in a Tenant. Within each tenant, users are free to create their namespaces and share all the assigned resources between the namespaces of the tenant.
- redhat-cop/keepalived-operator: Keepalived operator An operator to manage VIPs backed by keepalived. The objective of the keepalived operator is to allow for a way to create self-hosted load balancers in an automated way. From a user experience point of view the behavior is the same as of when creating LoadBalancer services with a cloud provider able to manage them.
- medium.com/@samng1991216: Building Kubernetes Operator Application from Scratch (Part 1)
- redhat-cop/dynamic-rbac-operator: Dynamic RBAC Operator Flexible definitions of Kubernetes RBAC rules. Writing Kubernetes RBAC definitions by hand can be a pain. This operator allows you to define “Dynamic” RBAC rules that change based on the state of your cluster, so you can spend your time writing the RBAC patterns that you’d like to deploy, rather than traditional, fully enumerated RBAC rules.
@@ -7891,12 +7891,12 @@
- alenkacz.medium.com: Kubernetes operator best practices: Implementing observedGeneration There’s a lot of hidden knowledge in core controllers and api conventions doc that is not followed by many controllers in the wild. One of these patterns is observedGeneration. In this article, you will learn what problems it can help solve.
- ckotzbauer/vulnerability-operator Scans SBOMs for vulnerabilities. This operator scans all SBOMs from a git-repository for vulnerabilities using Grype. The result-list can be emitted as JSON-file served via an endpoint and/or as Prometheus metrics. There may be more targets in the future. The scans are done periodically.
- Michaelpalacce/SimpleSecrets K8S Secrets Manager Operator. SimpleSecrets is a secure operator that allows you to create secrets on demand. You can commit the SimpleSecrets, which are references to a database secret, and the operator will create Kubernetes Secrets automatically for you.
-- learnsteps.com: Advance Kubernetes: What exactly are Kubernetes Operators? Kubernetes has gained a lot of traction recently and is one of the standards followed across organizations when it comes to running and managing their containerized workloads. In this article, we are going to talk about Kubernetes operators.
+- learnsteps.com: Advance Kubernetes: What exactly are Kubernetes Operators? Kubernetes has gained a lot of traction recently and is one of the standards followed across organizations when it comes to running and managing their containerized workloads. In this article, we are going to talk about Kubernetes operators.
- betterprogramming.pub: Build a Kubernetes Operator in 10 Minutes 🌟
- alain-airom.medium.com: Kubernetes Operators Patterns and Best Practices 🌟 Using operators to manage the lifecycle of multi-cloud, Kubernetes-based applications.
- OT-CONTAINER-KIT/mongodb-operator: MongoDB Operator MongoDB Operator is an operator created in Golang to create, update, and manage MongoDB standalone, replicated, and arbiter replicated setup on Kubernetes and Openshift clusters.
- prosimcorp/reforma Reforma is a Kubernetes operator to patch resources with information from other resources. It is intended to use with GitOps and lets you do things such as creating annotation on a Service Account from metadata stored in a ConfigMap.
-- weaveworks/tf-controller: Weave GitOps Terraform Controller A GitOps Terraform controller for Kubernetes. Weave TF-controller is a controller for Flux to reconcile Terraform resources in the GitOps way.
+- weaveworks/tf-controller: Weave GitOps Terraform Controller A GitOps Terraform controller for Kubernetes. Weave TF-controller is a controller for Flux to reconcile Terraform resources in the GitOps way.
- awstip.com: Manage AWS services directly from Kubernetes - AWS Controllers for Kubernetes (ACK) The AWS team released the ACK project, which allows users to create AWS services from within a Kubernetes cluster. In this tutorial, you will learn how to create an S3 bucket with a “Bucket” CRD.
- vitobotta/velero-notifications Velero-notifications is a simple Kubernetes controller written in Ruby that sends email/Slack/webhook notifications when backups or restores are performed by Velero in a Kubernetes cluster.
- NVIDIA/gpu-operator NVIDIA GPU Operator creates/configures/manages GPUs atop Kubernetes. The NVIDIA GPU is a Kubernetes operator that automates the management of all NVIDIA software components needed to provision GPUs. These components include drivers, the Kubernetes device plugin, the NVIDIA Container Runtime, etc.
@@ -7937,7 +7937,7 @@
- coderanger/migrations-operator: Migrations-Operator A Kubernetes operator to manage database migrations or similar application setup tasks.
-- omerxx.com: 10 Things I wish I’d known before building a Kubernetes CRD controller Controllers, operators, informers and other K8s mysteries. This article discusses a few of the gotchas of developing Kubernetes controllers:
+- omerxx.com: 10 Things I wish I’d known before building a Kubernetes CRD controller Controllers, operators, informers and other K8s mysteries. This article discusses a few of the gotchas of developing Kubernetes controllers:
- CRDs don’t create metadata by default
- Interacting with CRDs outside the controller’s context is not straightforward
- “The DefaultUnstructuredConverter”
@@ -7951,12 +7951,12 @@
- medium.com/sda-se: Kubernetes Operator to the rescue. How our own MongoDB Operator improved our deployments In this article you will learn about the challenges that the team at SDA SE faced when using a GitOps deployment and why they implemented their own Kubernetes Operator for MongoDB to speed up our deployments and reduce mistakes.
-- blog.frankel.ch: Introduction to Kubernetes extensibility 🌟 In this article, you’ll learn several extension points in Kubernetes: the data model, admission controllers, and client-side.
+- blog.frankel.ch: Introduction to Kubernetes extensibility 🌟 In this article, you’ll learn several extension points in Kubernetes: the data model, admission controllers, and client-side.
- At its most basic level, Kubernetes is just a platform able to run container images. It stores its configuration in a distributed storage engine, etcd. The most significant part of this configuration is dedicated to the desired state for objects. For example, you only update this state when you schedule a pod using the kubectl command line.
- Other components, called controllers, watch configuration changes and read the desired state. Then, they try to reconcile the desired state with the actual state. It’s nothing revolutionary: Puppet is based on the same control-loop approach, and AFAIK, Chef. Generally, a controller manages a single type of object, e.g., the DeploymentController manages deployments.
-- superorbital.io: Testing Production Kubernetes Controllers In this article, you will learn how to test Kubernetes controllers using a mix of unit tests, local integration tests, and more fully featured runtime integration tests.
+- superorbital.io: Testing Production Kubernetes Controllers In this article, you will learn how to test Kubernetes controllers using a mix of unit tests, local integration tests, and more fully featured runtime integration tests.
- github.com/lukaszraczylo/jobs-manager-operator 🌟
- itnext.io: Simplify Advanced Workflows in Kubernetes with Jobs Manager Operator A problem and idea led to the latest invention, which saved me hours of confusion and frustration and finally untangled the web of dependencies.
@@ -7968,9 +7968,9 @@
- github.com/sieve-project/sieve Automated Reliability Testing for Kubernetes Controllers/Operators. Sieve is a tool to help developers test their Kubernetes controllers by deterministically injecting faults and detecting dormant bugs at development time.
- betterprogramming.pub: Goldilocks vs. KRR The resources recommendation showdown!. Goldilocks is a Kubernetes operator written in Go, and it watches over a few custom resources to give out its Updates or Recommendations.
- medium.com/lonto-digital-services-integrator: Why We Developed Own Kubernetes Controller to Copy Secrets In this article, you will learn the thought process, design decision and code that led to writing a custom controller to copy secrets from Hashicorp Vault to Kubernetes
-- thenewstack.io: HashiCorp Vault Operator Manages Kubernetes Secrets HashiCorp’s new open source project, released alongside Vault 1.13 and now available in beta, makes it easier to use Vault with Kubernetes Secrets, automating tasks that were previously manual.
+- thenewstack.io: HashiCorp Vault Operator Manages Kubernetes Secrets HashiCorp’s new open source project, released alongside Vault 1.13 and now available in beta, makes it easier to use Vault with Kubernetes Secrets, automating tasks that were previously manual.
- medium.com/@senjutide2000: Designing a Controller for Custom Resources from scratch for absolute beginners In this tutorial (and related repository and follow-up article), you will learn how to create your first Custom Resource Definition, Custom Resource and get a basic idea of the workflow of a controller
-- github.com/2-alchemists/krossboard-kubernetes-operator Kubernetes Operator to handle cross-site, cross-distribution & multi-Kubernetes usage tracking, analytics and accounting (vanilla Kubernetes, OpenShift, EKS, AKS, GKE and other distros).
+- github.com/2-alchemists/krossboard-kubernetes-operator Kubernetes Operator to handle cross-site, cross-distribution & multi-Kubernetes usage tracking, analytics and accounting (vanilla Kubernetes, OpenShift, EKS, AKS, GKE and other distros).
- Krossboard is a multi-cluster and cross-distribution Kubernetes usage accounting and analytics software
- Each instance of Krossboard enables tracking the usage of a set of Kubernetes clusters listed in a kubeconfig secret
@@ -8000,7 +8000,7 @@
- medium.com/@adnn.selimovic: Creating Kubernetes operator using Kubebuilder
- medium.com/geekculture: A New Pattern that Simplifies Operator Building Build Kubernetes Operator with Kubebuilder and declarative pattern. kubebuilder-declarative-pattern provides a set of tools for building cluster operators with kubebuilder. Declarative operators provide a fast path to orchestrating deployments instead of reinventing the wheel i.e. “how do I get/update this YAML?”
-
-
qdnqn.com: Creating Kubernetes operator using Kubebuilder
+qdnqn.com: Creating Kubernetes operator using Kubebuilder
-
Kubernetes is the current de facto standard for the deployment and running of applications that are suitable for modern cloud platforms. A declarative way of defining infrastructure state using YAML allows a super easy definition of the scheme for the deployment of the application. Deploying stateless applications is not a big deal. On the other hand — deploying distributed stateful applications, configuring, and operating them is a challenging task.
@@ -8020,23 +8020,23 @@
operatorhub.io
-- operatorhub.io OperatorHub.io is a new home for the Kubernetes community to share Operators. Find an existing Operator or list your own today.
+- operatorhub.io OperatorHub.io is a new home for the Kubernetes community to share Operators. Find an existing Operator or list your own today.
Red Hat Container Community of Practice Operators
-- cloud.redhat.com: Red Hat Container Community of Practice Operators In this post, you will find a summary of the operators maintained by Red Hat and how they can be used to facilitate the adoption of OpenShift.
+- cloud.redhat.com: Red Hat Container Community of Practice Operators In this post, you will find a summary of the operators maintained by Red Hat and how they can be used to facilitate the adoption of OpenShift.
Operator Capability Levels
-- Operator Capability Levels Operators come in different maturity levels in regards to their lifecycle management capabilities for the application or workload they deliver. The capability models aims to provide guidance in terminology to express what features users can expect from an Operator.
+- Operator Capability Levels Operators come in different maturity levels in regards to their lifecycle management capabilities for the application or workload they deliver. The capability models aims to provide guidance in terminology to express what features users can expect from an Operator.
Cluster Addons
- Kubernetes Gateway API - (Related to kubernetes-networking topic)
- InGate: Ingress & Gateway API Controller (Archived) - (Related to kubernetes-networking topic)
-- Introduction to Azure Application Gateway for Containers (AGC) - (Related to azure topic)
+- Introduction to Azure Application Gateway for Containers (AGC) - (Related to azure topic)
-
-
Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) - (Related to kubernetes-security topic)
+Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) - (Related to kubernetes-security topic)
-
Cluster Addons 🌟 With cluster addon operators, we are exploring a kubernetes-native way of managing addons using CRDs(Custom Resource Definitions) and controllers where the controllers encode how best to manage the addon. Installing and managing an addon could be as simple as creating a custom resource.
@@ -8044,37 +8044,37 @@
K8Spin Operator. Kubernetes multi-tenant operator
-- K8Spin Operator 🌟 Kubernetes multi-tenant operator. Enables multi-tenant capabilities in your Kubernetes Cluster. We defined some small features to implement. If you know python & Kubernetes and want to contribute to this project, ping us!
-- thenewstack.io: K8Spin Provides Multitenant Isolation for Kubernetes
-- Discover K8Spin open source software
+- K8Spin Operator 🌟 Kubernetes multi-tenant operator. Enables multi-tenant capabilities in your Kubernetes Cluster. We defined some small features to implement. If you know python & Kubernetes and want to contribute to this project, ping us!
+- thenewstack.io: K8Spin Provides Multitenant Isolation for Kubernetes
+- Discover K8Spin open source software
K8s KPIs with Kuberhealthy Operator
-- K8s KPIs with Kuberhealthy 🌟 transforming Kuberhealthy into a Kubernetes operator for synthetic monitoring. This new ability granted developers the means to create their own Kuberhealthy check containers to synthetically monitor their applications and clusters. Additionally, we created a guide on how to easily install and use Kuberhealthy in order to capture some helpful synthetic KPIs.
+- K8s KPIs with Kuberhealthy 🌟 transforming Kuberhealthy into a Kubernetes operator for synthetic monitoring. This new ability granted developers the means to create their own Kuberhealthy check containers to synthetically monitor their applications and clusters. Additionally, we created a guide on how to easily install and use Kuberhealthy in order to capture some helpful synthetic KPIs.
Writing Kubernetes Operators and Controllers
- Kueue Release v0.14.0 - This is a release note for Kueue, an open-source Kubernetes project designed for workload management and scheduling. Version v0.14.0 includes changes such as the removal of deprecated annotations related to ProvisioningRequest, which is important for users upgrading from previous versions. It also highlights the necessity for ProvisioningRequest reconcilers to be updated to avoid issues.
-- AI Meets Terraform: Prompt Strategies for Test Generation - (Related to ai topic)
-- 10 Real-World Kubernetes Troubleshooting Scenarios and Solutions - (Related to kubernetes-troubleshooting topic)
+- AI Meets Terraform: Prompt Strategies for Test Generation - (Related to ai topic)
+- 10 Real-World Kubernetes Troubleshooting Scenarios and Solutions - (Related to kubernetes-troubleshooting topic)
-
-
The Beginner’s Guide to the Ansible Inventory - (Related to ansible topic)
+The Beginner’s Guide to the Ansible Inventory - (Related to ansible topic)
-
-
+
- opensource.com: Build a Kubernetes Operator in 10 minutes with Operator SDK
- itnext.io: Testing the Operator SDK and making a prefetch mechanism for Kubernetes
- magalix.com: Creating Custom Kubernetes Operators
- medium.com: Writing Your First Kubernetes Operator
-- bmc.com: What Is a Kubernetes Operator?
-- Writing a Kubernetes Operator in Java Cheat Sheet
-- linuxera.org: Writing Operators using the Operator Framework SDK
-- openshift.com: 7 Best Practices for Writing Kubernetes Operators: An SRE Perspective
+- bmc.com: What Is a Kubernetes Operator?
+- Writing a Kubernetes Operator in Java Cheat Sheet
+- linuxera.org: Writing Operators using the Operator Framework SDK
+- openshift.com: 7 Best Practices for Writing Kubernetes Operators: An SRE Perspective
- medium: From Zero to Kubernetes Operator In this post you will learn how to build a simple Kubernetes Operator. The article starts with the main concepts and then continues with hands-on labs where you will create a Kubernetes Operator from the ground up.
-- openshift.com: Build Your Kubernetes Operator With the Right Tool 🌟 Go-based operators are by far the most popular. That is why Go is probably the first option to consider. The other good choice is Helm, especially if you already have a Helm chart for your software or you want to build your operator quickly and you don’t need any complex capability levels. I’d leave Operator Frameworks or Bare Programming Language implementations only for the cases when keeping a single programming language in your organization is a priority.
-- rookout.com: Lessons Learned When Building A Kubernetes Operator
-- brennerm.github.io: Kubernetes operators with Python #1: Creating CRDs
+- openshift.com: Build Your Kubernetes Operator With the Right Tool 🌟 Go-based operators are by far the most popular. That is why Go is probably the first option to consider. The other good choice is Helm, especially if you already have a Helm chart for your software or you want to build your operator quickly and you don’t need any complex capability levels. I’d leave Operator Frameworks or Bare Programming Language implementations only for the cases when keeping a single programming language in your organization is a priority.
+- rookout.com: Lessons Learned When Building A Kubernetes Operator
+- brennerm.github.io: Kubernetes operators with Python #1: Creating CRDs
- vivilearns2code.github.io: Writing Controllers For Kubernetes Resources
- cloudark.medium.com: Writing Kubernetes Custom Controllers
- developers.redhat.com: Managing stateful applications with Kubernetes Operators in Golang 🌟 Explore this pattern by creating a Kubernetes Operator in Golang to keep a WordPress site up to date.
@@ -8083,7 +8083,7 @@
- kubernetes/sample-controller Repository for sample controller. Complements sample-apiserver
- betterprogramming.pub: Writing Custom Kubernetes Controller and Webhooks Create a Kubernetes API, controller, validate webhooks, and test.
- betterprogramming.pub: How To Write Tests for Your Kubernetes Operator
-- metalbear.co: Writing a Kubernetes Operator
+- metalbear.co: Writing a Kubernetes Operator
- dev.to/hkhelil: Building a Kubernetes Operator with an NGINX CRD
Tweets
@@ -8105,7 +8105,7 @@
-- Sharing a NVIDIA GPU Between Pods in Kubernetes - (Related to kubernetes-tools topic)
+- Sharing a NVIDIA GPU Between Pods in Kubernetes - (Related to kubernetes-tools topic)
diff --git a/kubernetes-releases.html b/kubernetes-releases.html
index 28243183..f77ccdbf 100644
--- a/kubernetes-releases.html
+++ b/kubernetes-releases.html
@@ -7667,24 +7667,24 @@
-
relnotes.k8s.io: Kubernetes Release Notes Tip: Click on “deprecation” and select “releaseVersions: 1.x
-- sysdig.com: What’s new in Kubernetes 1.20?
+- sysdig.com: What’s new in Kubernetes 1.20?
- magalix: What You Should Know about Kubernetes 1.20
-- zdnet.com: Kubernetes dropping Docker is not that big of a deal Chill, people. Your Docker skills haven’t suddenly become useless. Here’s what’s really going on.
-- thenewstack.io: Kubernetes 1.20 Lands with 44 Enhancements
-- thenewstack.io: Kubernetes 1.20 Enhances the Operator Experience and Brings New Features to the Container Runtime
-- openshift.com: Kubernetes is Removing Docker Support, Kubernetes is Not Removing Docker Support
-- devopscube.com: Kubernetes v1.21 Released: Here is What you should know
-- thenewstack.io: Kubernetes 1.21 Brings a New Memory Manager, More Flexible Scheduling
-- kubernetes.io: kubernetes 1.21: CronJob Reaches GA
-- kubernetes.io: Kubernetes 1.21: Power to the Community
-- devclass.com: Kubernetes 1.21 unloads pod security, adds dual IPv4/IPv6 networking, and shuts down gracefully
-- kubernetes.io: Introducing Suspended Jobs in Kubernetes 1.21
-- analyticsindiamag.com: Kubernetes v1.21 Released: Major Updates & Latest Features
-- openshift.com: Kubernetes 1.21 Grows Innovative New Features
+- zdnet.com: Kubernetes dropping Docker is not that big of a deal Chill, people. Your Docker skills haven’t suddenly become useless. Here’s what’s really going on.
+- thenewstack.io: Kubernetes 1.20 Lands with 44 Enhancements
+- thenewstack.io: Kubernetes 1.20 Enhances the Operator Experience and Brings New Features to the Container Runtime
+- openshift.com: Kubernetes is Removing Docker Support, Kubernetes is Not Removing Docker Support
+- devopscube.com: Kubernetes v1.21 Released: Here is What you should know
+- thenewstack.io: Kubernetes 1.21 Brings a New Memory Manager, More Flexible Scheduling
+- kubernetes.io: kubernetes 1.21: CronJob Reaches GA
+- kubernetes.io: Kubernetes 1.21: Power to the Community
+- devclass.com: Kubernetes 1.21 unloads pod security, adds dual IPv4/IPv6 networking, and shuts down gracefully
+- kubernetes.io: Introducing Suspended Jobs in Kubernetes 1.21
+- analyticsindiamag.com: Kubernetes v1.21 Released: Major Updates & Latest Features
+- openshift.com: Kubernetes 1.21 Grows Innovative New Features
- Kubernetes v1.16 API deprecation testing Examples of how to test the impact of the v1.16 API deprecations and ways to debug early!
-- kubernetes.io: Kubernetes 1.21: Metrics Stability hits GA
-- sysdig.com: Kubernetes 1.22 – What’s new?
-- kubernetes.io: Kubernetes API and Feature Removals In 1.22: Here’s What You Need To Know In this version, multiple beta APIs will be removed. Not deprecated, removed. Specifically, the following:
+- kubernetes.io: Kubernetes 1.21: Metrics Stability hits GA
+- sysdig.com: Kubernetes 1.22 – What’s new?
+- kubernetes.io: Kubernetes API and Feature Removals In 1.22: Here’s What You Need To Know In this version, multiple beta APIs will be removed. Not deprecated, removed. Specifically, the following:
- Ingress
- CustomResourceDefinition
- ValidatingWebhookConfiguration
@@ -7693,56 +7693,56 @@
- etc
-- kubernetes.io: Kubernetes 1.22: Reaching New Peaks Kubernetes’ default backend storage, etcd, has a new release: 3.5.0. The new release comes with improvements to the security, performance, monitoring, and developer experience.
-- thenewstack.io: Less Is More with Kubernetes 1.22
-- acloudguru.com: What’s new with Kubernetes 1.22?
-- kubernetes.io: Graceful Node Shutdown Goes Beta
-- kubernetes.io: Kubernetes Memory Manager moves to beta
+- kubernetes.io: Kubernetes 1.22: Reaching New Peaks Kubernetes’ default backend storage, etcd, has a new release: 3.5.0. The new release comes with improvements to the security, performance, monitoring, and developer experience.
+- thenewstack.io: Less Is More with Kubernetes 1.22
+- acloudguru.com: What’s new with Kubernetes 1.22?
+- kubernetes.io: Graceful Node Shutdown Goes Beta
+- kubernetes.io: Kubernetes Memory Manager moves to beta
- kubernetes.io: Dockershim removal is coming. Are you ready?
- medium: Kubernetes v1.22 ends Cloud Provider LoadBalancer lock-in Users of Cloud Provider provisioned Kubernetes have been locked into using the Cloud providers LoadBalancers for external access to their applications. This changed in v1.22, a new feature called LoadBalancer class allows 3rd party solutions to selected as an alternative to the default Cloud LoadBalancer.
-- sysdig.com: Kubernetes 1.23 – What’s new?
+- sysdig.com: Kubernetes 1.23 – What’s new?
- armosec.io: Kubernetes version 1.23 is out – everything you should know
-- thenewstack.io: Kubernetes 1.23: Dual Stack IPv4/IPv6, CronJobs, Ephemeral Volumes
+- thenewstack.io: Kubernetes 1.23: Dual Stack IPv4/IPv6, CronJobs, Ephemeral Volumes
- blog.aquasec.com: Kubernetes Version 1.23: What’s New for Security?
-- kubernetes.io: Kubernetes 1.23: The Next Frontier
-- infoq.com: Kubernetes Proceeding with Deprecation of Dockershim in Upcoming 1.24 Release
+- kubernetes.io: Kubernetes 1.23: The Next Frontier
+- infoq.com: Kubernetes Proceeding with Deprecation of Dockershim in Upcoming 1.24 Release
- blog.runx.dev: Will That Kubernetes v1.22 Upgrade Break My Application?
- Concerned about the Dockershim removal in the upcoming Kubernetes 1.24 release? We’ve updated the faq with additional info, migration guide links and more: http://k8s.io/dockershim
-- kubernetes.io: Updated: Dockershim Removal FAQ
-- kubernetes.io: Kubernetes Release Cadence Change: Here’s What You Need To Know
-- aws.amazon.com: Amazon EKS now supports Kubernetes 1.22
+- kubernetes.io: Updated: Dockershim Removal FAQ
+- kubernetes.io: Kubernetes Release Cadence Change: Here’s What You Need To Know
+- aws.amazon.com: Amazon EKS now supports Kubernetes 1.22
- blog.aquasec.com: Kubernetes Version 1.23: What’s New for Security?
-- sysdig.com: Kubernetes 1.24 – What’s new?
+- sysdig.com: Kubernetes 1.24 – What’s new?
- inder-devops.medium.com: It’s Time to Migrate your Container Runtime, Kubernetes 1.24 is coming In this post, you’ll learn the terminology and tooling around container runtimes. By the end, you’ll have a better idea of what a container runtime is, how the container landscape has evolved over time, and how we got to where we are today.
-- kubernetes.io: Kubernetes Removals and Major Changes In 1.25
-- sysdig.com: Kubernetes 1.25 – What’s new?
-- kubernetes.io: Kubernetes v1.25: Combiner Announcing the release of Kubernetes v1.25! 🚀 This release includes a total of 40 enhancements. 15 of those are entering Alpha, 10 are graduating to Beta, and 13 are graduating to Stable. We also have two features being deprecated or removed.
-- kubernetes.io: PodSecurityPolicy: The Historical Context 🌟 PodSecurityPolicy (PSP) admission controller has been removed as of Kubernetes v1.25. This blog shares some historical context and why it has been replaced by Pod Security admission control.
-- macchaffee.com: The Fumbled Deprecation of PodSecurityPolicies In this article, you will learn why PodSecurityPolicies never made it as a GA feature, why they had to be replaced and what you should consider going forward.
-- datree.io: EKS 1.22 Upgrade Tutorial
-- kubernetes.io: registry.k8s.io: faster, cheaper and Generally Available (GA) Starting with Kubernetes 1.25, our container image registry has changed from k8s.gcr.io to registry.k8s.io. This new registry spreads the load across multiple Cloud Providers & Regions, functioning as a sort of content delivery network (CDN) for Kubernetes container images. This change reduces the project’s reliance on a single entity and provides a faster download experience for a large number of users.
-- sysdig.com: Kubernetes 1.26 – What’s new?
-- armosec.io: Kubernetes Version 1.26: Everything You Should Know
-- kubernetes.io: Kubernetes 1.26: Non-Graceful Node Shutdown Moves to Beta
-- kubernetes.io: Kubernetes 1.26: Support for Passing Pod fsGroup to CSI Drivers At Mount Time
-- kubernetes.io: Kubernetes 1.26: Pod Scheduling Readiness Very interesting use case dealing with ResourceQuota; if a new Pod exceeds the CPU quota, it gets rejected. Now you can avoid this and build your queue or scale on demand using scheduling gates.
-- kubernetes.io: Kubernetes v1.26: CPUManager goes GA
+- kubernetes.io: Kubernetes Removals and Major Changes In 1.25
+- sysdig.com: Kubernetes 1.25 – What’s new?
+- kubernetes.io: Kubernetes v1.25: Combiner Announcing the release of Kubernetes v1.25! 🚀 This release includes a total of 40 enhancements. 15 of those are entering Alpha, 10 are graduating to Beta, and 13 are graduating to Stable. We also have two features being deprecated or removed.
+- kubernetes.io: PodSecurityPolicy: The Historical Context 🌟 PodSecurityPolicy (PSP) admission controller has been removed as of Kubernetes v1.25. This blog shares some historical context and why it has been replaced by Pod Security admission control.
+- macchaffee.com: The Fumbled Deprecation of PodSecurityPolicies In this article, you will learn why PodSecurityPolicies never made it as a GA feature, why they had to be replaced and what you should consider going forward.
+- datree.io: EKS 1.22 Upgrade Tutorial
+- kubernetes.io: registry.k8s.io: faster, cheaper and Generally Available (GA) Starting with Kubernetes 1.25, our container image registry has changed from k8s.gcr.io to registry.k8s.io. This new registry spreads the load across multiple Cloud Providers & Regions, functioning as a sort of content delivery network (CDN) for Kubernetes container images. This change reduces the project’s reliance on a single entity and provides a faster download experience for a large number of users.
+- sysdig.com: Kubernetes 1.26 – What’s new?
+- armosec.io: Kubernetes Version 1.26: Everything You Should Know
+- kubernetes.io: Kubernetes 1.26: Non-Graceful Node Shutdown Moves to Beta
+- kubernetes.io: Kubernetes 1.26: Support for Passing Pod fsGroup to CSI Drivers At Mount Time
+- kubernetes.io: Kubernetes 1.26: Pod Scheduling Readiness Very interesting use case dealing with ResourceQuota; if a new Pod exceeds the CPU quota, it gets rejected. Now you can avoid this and build your queue or scale on demand using scheduling gates.
+- kubernetes.io: Kubernetes v1.26: CPUManager goes GA
- itnext.io: Unleashing the Power of Kubernetes 1.26: Exploring the New ValidatingAdmissionPolicy Feature with CEL
-- kubernetes.io: Kubernetes 1.26: Job Tracking, to Support Massively Parallel Batch Workloads, Is Generally Available After multiple iterations and scale verifications, Kubernetes switched to a new Job Controller. Paired with the Indexed completion mode, the Job controller can handle massively parallel batch jobs, supporting up to 100k concurrent Pods.
+- kubernetes.io: Kubernetes 1.26: Job Tracking, to Support Massively Parallel Batch Workloads, Is Generally Available After multiple iterations and scale verifications, Kubernetes switched to a new Job Controller. Paired with the Indexed completion mode, the Job controller can handle massively parallel batch jobs, supporting up to 100k concurrent Pods.
- alexandrev.medium.com: Kubernetes Autoscaling 1.26: A Game-Changer for KEDA Users?
-- kubernetes.io: Kubernetes v1.26: Advancements in Kubernetes Traffic Engineering In this article, you will learn about the significant advancements in network traffic engineering in Kubernetes v1.26 (Service internal traffic policy support, EndpointSlice terminating conditions and Proxy terminating endpoints.
-- sysdig.com: Kubernetes 1.27 – What’s new?
-- kubernetes.io: Kubernetes v1.27: Chill Vibes v1.27 is the first release that anyone can remember where we didn’t receive a single exception request after the enhancements freeze. Even as the release progressed, things remained much calmer than any of us are used to. This release consist of 60 enhancements. 18 of those enhancements are entering Alpha, 29 are graduating to Beta, and 13 are graduating to Stable.
+- kubernetes.io: Kubernetes v1.26: Advancements in Kubernetes Traffic Engineering In this article, you will learn about the significant advancements in network traffic engineering in Kubernetes v1.26 (Service internal traffic policy support, EndpointSlice terminating conditions and Proxy terminating endpoints.
+- sysdig.com: Kubernetes 1.27 – What’s new?
+- kubernetes.io: Kubernetes v1.27: Chill Vibes v1.27 is the first release that anyone can remember where we didn’t receive a single exception request after the enhancements freeze. Even as the release progressed, things remained much calmer than any of us are used to. This release consist of 60 enhancements. 18 of those enhancements are entering Alpha, 29 are graduating to Beta, and 13 are graduating to Stable.
- medium.com/@jonathan_37674: Kubernetes 1.27: Everything You Should Know | ARMO
-- thenewstack.io: Kubernetes 1.27 Arrives The big change, the new image registry replacing the old one, marks a clear break between this version and the ones that have come before
-- armosec.io: Kubernetes 1.27 Release: Enhancements and Security Updates
-- Private Access to the AWS Management Console is generally available
-- kubernetes.io: Kubernetes 1.27: In-place Resource Resize for Kubernetes Pods (alpha)
+- thenewstack.io: Kubernetes 1.27 Arrives The big change, the new image registry replacing the old one, marks a clear break between this version and the ones that have come before
+- armosec.io: Kubernetes 1.27 Release: Enhancements and Security Updates
+- Private Access to the AWS Management Console is generally available
+- kubernetes.io: Kubernetes 1.27: In-place Resource Resize for Kubernetes Pods (alpha)
- If you have deployed Kubernetes pods with CPU and/or memory resources specified, you may have noticed that changing the resource values involves restarting the pod. This has been a disruptive operation for running workloads… until now.
- In Kubernetes v1.27, we have added a new alpha feature that allows users to resize CPU/memory resources allocated to pods without restarting the containers.
-- thenewstack.io: Kubernetes 1.28 Accommodates the Service Mesh, Sudden Outages This “Planternetes” release can keep service mesh containers running when the pod goes offline. Also in the box: Better support for DNS and more allowable time between necessary upgrades.
+- thenewstack.io: Kubernetes 1.28 Accommodates the Service Mesh, Sudden Outages This “Planternetes” release can keep service mesh containers running when the pod goes offline. Also in the box: Better support for DNS and more allowable time between necessary upgrades.
- levelup.gitconnected.com: Kubernetes Planternetes v1.28: Non-Graceful Node Shutdown Feature If a node shuts down unexpectedly or ends up in a non-recoverable state (perhaps due to hardware failure or unresponsive OS), Kubernetes allows you to clean up afterward and allow stateful workloads to restart on a different node.
diff --git a/kubernetes-security.html b/kubernetes-security.html
index b68cbc2b..d53fab87 100644
--- a/kubernetes-security.html
+++ b/kubernetes-security.html
@@ -8115,82 +8115,82 @@
Introduction
-- cilium.io
-- github Kyverno - Kubernetes Native Policy Management
+- cilium.io
- Dzone - OAuth 2.0
- Kubernetes Security Best Practices 🌟
- jeffgeerling.com: Everyone might be a cluster-admin in your Kubernetes cluster
-- Microsoft.com: Attack matrix for Kubernetes 🌟
+- Microsoft.com: Attack matrix for Kubernetes 🌟
- codeburst.io: 7 Kubernetes Security Best Practices You Must Follow
-- thenewstack.io: Laying the Groundwork for Kubernetes Security, Across Workloads, Pods and Users
-- horovits.wordpress.com: Kubernetes Security Best Practices
-- containerjournal.com: How to Secure Your Kubernetes Cluster 🌟
+- thenewstack.io: Laying the Groundwork for Kubernetes Security, Across Workloads, Pods and Users
+- horovits.wordpress.com: Kubernetes Security Best Practices
+- containerjournal.com: How to Secure Your Kubernetes Cluster 🌟
- medium: How to Harden Your Kubernetes Cluster for Production 🌟
-- kubernetes.io: Cloud native security for your clusters
-- tldrsec.com: Risk8s Business: Risk Analysis of Kubernetes Clusters 🌟 A zero-to-hero guide for assessing the security risk of your Kubernetes cluster and hardening it.
-- labs.bishopfox.com: Bad Pods: Kubernetes Pod Privilege Escalation 🌟 What are the risks associated with overly permissive pod creation in Kubernetes? The answer varies based on which of the host’s namespaces and security contexts are allowed. In this post, I will describe eight insecure pod configurations and the corresponding methods to perform privilege escalation. This article and the accompanying repository were created to help penetration testers and administrators better understand common misconfiguration scenarios.
-- sysdig.com: Kubernetes Security Guide 🌟 Best practices, guidance and steps for implementing Kubernetes security.
+- kubernetes.io: Cloud native security for your clusters
+- tldrsec.com: Risk8s Business: Risk Analysis of Kubernetes Clusters 🌟 A zero-to-hero guide for assessing the security risk of your Kubernetes cluster and hardening it.
+- labs.bishopfox.com: Bad Pods: Kubernetes Pod Privilege Escalation 🌟 What are the risks associated with overly permissive pod creation in Kubernetes? The answer varies based on which of the host’s namespaces and security contexts are allowed. In this post, I will describe eight insecure pod configurations and the corresponding methods to perform privilege escalation. This article and the accompanying repository were created to help penetration testers and administrators better understand common misconfiguration scenarios.
+- sysdig.com: Kubernetes Security Guide 🌟 Best practices, guidance and steps for implementing Kubernetes security.
- resources.whitesourcesoftware.com: Kubernetes Security Best Practices 🌟
-- sysdig.com: Getting started with Kubernetes audit logs and Falco 🌟
-- thenewstack.io: Best Practices for Securely Setting up a Kubernetes Cluster
-- thenewstack.io: A Security Comparison of Docker, CRI-O and Containerd 🌟
+- sysdig.com: Getting started with Kubernetes audit logs and Falco 🌟
+- thenewstack.io: Best Practices for Securely Setting up a Kubernetes Cluster
+- thenewstack.io: A Security Comparison of Docker, CRI-O and Containerd 🌟
- github.com/stackrox: Certified Kubernetes Security Specialist Study Guide 🌟
- youtube: Kubernetes Security: Attacking and Defending K8s Clusters - by Magno Logan
-- cncf.io: Kubernetes Security 🌟
-- microsoft.com: Secure containerized environments with updated threat matrix for Kubernetes
-- kyverno.io 🌟 Kubernetes Native Policy Management. Kyverno 1.18 (released May 2026) introduced advanced supply chain security, simplified YAML-based policy management, and enhanced support for Gateway API.
+- cncf.io: Kubernetes Security 🌟
+- microsoft.com: Secure containerized environments with updated threat matrix for Kubernetes
+- kyverno.io 🌟 Kubernetes Native Policy Management. Kyverno 1.18 (released May 2026) introduced advanced supply chain security, simplified YAML-based policy management, and enhanced support for Gateway API.
- Tetragon (Cilium) - eBPF-based Security Observability and Runtime Enforcement. Tetragon provides deep visibility into process execution, network activity, and file access, with the ability to enforce policies at the kernel level.
-- kyverno.io/policies 🌟 K8s policies available in the community repository
+- kyverno.io/policies 🌟 K8s policies available in the community repository
- cyberark.com: Attacking Kubernetes Clusters Through Your Network Plumbing: Part 1
-- redkubes.com: 10 Kubernetes Security Risks & Best Practices
-- thenewstack.io: Defend the Core: Kubernetes Security at Every Layer
+- redkubes.com: 10 Kubernetes Security Risks & Best Practices
+- thenewstack.io: Defend the Core: Kubernetes Security at Every Layer
- Analyze Kubernetes Audit logs using Falco 🌟 Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco
- blog.kasten.io: Kubernetes Ransomware Protection with Kasten K10 v4.0
-- helpnetsecurity.com: Kubestriker: A security auditing tool for Kubernetes clusters 🌟 Kubestriker is an open-source, platform-agnostic tool for identifying security misconfigurations in Kubernetes clusters.
+- helpnetsecurity.com: Kubestriker: A security auditing tool for Kubernetes clusters 🌟 Kubestriker is an open-source, platform-agnostic tool for identifying security misconfigurations in Kubernetes clusters.
- Kubernetes Goat 🌟 is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.
- itnext.io: How-To: Kubernetes Cluster Network Security 🌟
- gist.github.com: How to protect your ~/.kube/ configuration
- levelup.gitconnected.com: Enforce Audit Policy in Kubernetes (k8s)
-- snyk.io: 10 Kubernetes Security Context settings you should understand
+- snyk.io: 10 Kubernetes Security Context settings you should understand
- magalix.com: Top 8 Kubernetes Security Best Practices 🌟
- redhat.com: The State of Kubernetes Security
- fairwinds.com: Discover the Top 5 Kubernetes Security Mistakes You’re (Probably) Making
-- tigera.io: Kubernetes security policy design: 10 critical best practices 🌟
-- empresas.blogthinkbig.com: Descubierta una vulnerabilidad en Kubernetes que permite acceso a redes restringidas (CVE-2020-8562)
-- thenewstack.io: Kubernetes: An Examination of Major Attacks 🌟 Constant vigilance is required to ensure that cloud infrastructure is locked down and that DevSecOps teams have the right tools for the job.
-- cloud.redhat.com: Top Open Source Kubernetes Security Tools of 2021 🌟🌟
-- cncf.io: How to secure your Kubernetes control plane and node components
+- tigera.io: Kubernetes security policy design: 10 critical best practices 🌟
+- empresas.blogthinkbig.com: Descubierta una vulnerabilidad en Kubernetes que permite acceso a redes restringidas (CVE-2020-8562)
+- thenewstack.io: Kubernetes: An Examination of Major Attacks 🌟 Constant vigilance is required to ensure that cloud infrastructure is locked down and that DevSecOps teams have the right tools for the job.
+- cloud.redhat.com: Top Open Source Kubernetes Security Tools of 2021 🌟🌟
+- cncf.io: How to secure your Kubernetes control plane and node components
- redhat.com: State of Kubernetes Security Report - Spring 2021 (PDF) 🌟
-- kubernetes.io: Overview of Cloud Native Security 🌟🌟 This overview defines a model for thinking about Kubernetes security in the context of Cloud Native security.
-- learn.hashicorp.com: Integrate a Kubernetes Cluster with an External Vault 🌟
+- kubernetes.io: Overview of Cloud Native Security 🌟🌟 This overview defines a model for thinking about Kubernetes security in the context of Cloud Native security.
+- learn.hashicorp.com: Integrate a Kubernetes Cluster with an External Vault 🌟
- talkingquickly.co.uk: Kubernetes Single Sign On - A detailed guide 🌟
- armosec.io: A Practical Guide to the Different Compliance Kubernetes Security Frameworks and How They Fit Together 🌟🌟
-- thenewstack.io: How to Secure Kubernetes, the OS of the Cloud
-- akhilsharma.work: The 4C’s of Kubernetes Security
+- thenewstack.io: How to Secure Kubernetes, the OS of the Cloud
+- akhilsharma.work: The 4C’s of Kubernetes Security
- Kubernetes security thing: Always be careful of what you are letting your users choose for usernames. If someone has a username of system:kube-controller-manager on an external Identity system, Kubernetes will quite happily give them the rights of the controller manager. The –oidc-username-prefix and –oidc-groups-prefix flags are userful for preventing this in OIDC integrations.
- medium: Securing the Kubernetes cluster | Lessandro Z. Ugulino
-- infoworld.com: The race to secure Kubernetes at run time A new wave of startups is looking to help developers secure their containerized applications after they go into production. Is this the future of application security?
+- infoworld.com: The race to secure Kubernetes at run time A new wave of startups is looking to help developers secure their containerized applications after they go into production. Is this the future of application security?
- goteleport.com: Kubernetes API Access Security Hardening
-- infoworld.com: Securing the Kubernetes software supply chain with Microsoft’s Ratify Microsoft’s Ratify proposal adds a verification workflow to Kubernetes container deployment. The Ratify team has some demo code in their GitHub repository that shows how to use Ratify with Gatekeeper in Kubernetes. Ratify installs using a Helm chart, bringing along some sample configuration templates.
-- amazicworld.com: Top 5 security threats unique to a Kubernetes and Cloud Native stack
-- peoplactive.com: Kubernetes and Container Security Checklist to Build Secure Apps [ARCHIVED]
-- venturebeat.com: Kubernetes security will have a breakout year in 2022
+- infoworld.com: Securing the Kubernetes software supply chain with Microsoft’s Ratify Microsoft’s Ratify proposal adds a verification workflow to Kubernetes container deployment. The Ratify team has some demo code in their GitHub repository that shows how to use Ratify with Gatekeeper in Kubernetes. Ratify installs using a Helm chart, bringing along some sample configuration templates.
+- amazicworld.com: Top 5 security threats unique to a Kubernetes and Cloud Native stack
+- peoplactive.com: Kubernetes and Container Security Checklist to Build Secure Apps [ARCHIVED]
+- venturebeat.com: Kubernetes security will have a breakout year in 2022
- medium: Comparing Kubernetes Security Frameworks and Guidance 🌟 Comparing popular Kubernetes security and compliance frameworks, how they differ, when to use, common goals, and suggested tools.
-- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Guidelines (Pt. 2) 🌟 In this second episode, we will go through the NSA/CISA security recommendations and explain every piece of the guidelines.
+- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Guidelines (Pt. 2) 🌟 In this second episode, we will go through the NSA/CISA security recommendations and explain every piece of the guidelines.
- blog.devgenius.io: How is security managed in Kubernetes clusters? Best practices for managing security in Kubernetes at various layers
-- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 1: Pods Get a deeper understanding of Kubernetes Pods security with this first tutorial. After reading this article, you will learn:
+- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 1: Pods Get a deeper understanding of Kubernetes Pods security with this first tutorial. After reading this article, you will learn:
- How not to run pods as root
- How to use immutable root fs (lock the root filesystem)
- How to do Docker image scan locally and with your CI pipelines
- How to use PSP
-- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 2: Network How to achieve Control Plane security, true resource separation with network policies, and use Kubernetes Secrets more securely.
+- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 2: Network How to achieve Control Plane security, true resource separation with network policies, and use Kubernetes Secrets more securely.
- medium.com/@jonathan_37674: Kubernetes Security Best Practices: Definitive Guide
@@ -8200,8 +8200,8 @@
- persist the attack with invisible pods and fileless executions
-- mattermost.com: The Top 7 Open Source Tools for Securing Your Kubernetes Cluster
-- infoworld.com: 10 steps to automating security in Kubernetes pipelines DevOps teams don’t need to sacrifice the speed of containerized development if they know what can be automated, why it’s important, and how to do it.
+- mattermost.com: The Top 7 Open Source Tools for Securing Your Kubernetes Cluster
+- infoworld.com: 10 steps to automating security in Kubernetes pipelines DevOps teams don’t need to sacrifice the speed of containerized development if they know what can be automated, why it’s important, and how to do it.
- developers.redhat.com: Secure your Kubernetes deployments with eBPF Learn how to use eBPF and the Security Profiles Operator to automatically generate seccomp profiles, a Linux kernel security feature for Kubernetes
- Etcd localhost port access due to SSRF vulnerability
- Etcd Credential Stealing
@@ -8209,39 +8209,39 @@
- faun.pub: From dev to admin: an easy Kubernetes privilege escalation you should be aware of — the attack In this post, you will learn how easily a limited user (such as a developer) can escalate their privileges and become an admin of a cluster which has been set up using kubeadm.
-- xenitab.github.io: Kubernetes Ephemeral Container Security 🌟 Ephemeral containers are temp containers that can be attached after a Pod is created. But what happens when you use them on a hardened cluster? The answer is not so obvious as OPA, Kyverno, PSPs, etc. will do their best to (rightly) prevent execution.
-- armosec.io: How to Secure Deployments in Kubernetes? 🌟 In Kubernetes, there are two aspects to security: cluster security and application security. In this post, you’ll explore how to secure Kubernetes deployments and applications in general.
+- xenitab.github.io: Kubernetes Ephemeral Container Security 🌟 Ephemeral containers are temp containers that can be attached after a Pod is created. But what happens when you use them on a hardened cluster? The answer is not so obvious as OPA, Kyverno, PSPs, etc. will do their best to (rightly) prevent execution.
+- armosec.io: How to Secure Deployments in Kubernetes? 🌟 In Kubernetes, there are two aspects to security: cluster security and application security. In this post, you’ll explore how to secure Kubernetes deployments and applications in general.
- medium.com/@dotdc: Is your Kubernetes API Server exposed? Learn how to check and fix! 🌟
- levelup.gitconnected.com: The Core of Kubernetes Security: Clusters
-- sysdig.com: How attackers use exposed Prometheus server to exploit Kubernetes clusters | Miguel Hernández What happens if an attacker accesses your Prometheus server? How much information can they get for fingerprinting the cluster? In this article, you will learn how attackers use this information and how to secure your cluster.
-- cast.ai: Kubernetes Security: 10 Best Practices from the Industry and Community 🌟
-- thenewstack.io: Basic Principles Key to Securing Kubernetes’ Future Once these capabilities have been established, Ops teams can begin to look further afield and explore leveraging the value of their data through activities like testing and optimization.
+- sysdig.com: How attackers use exposed Prometheus server to exploit Kubernetes clusters | Miguel Hernández What happens if an attacker accesses your Prometheus server? How much information can they get for fingerprinting the cluster? In this article, you will learn how attackers use this information and how to secure your cluster.
+- cast.ai: Kubernetes Security: 10 Best Practices from the Industry and Community 🌟
+- thenewstack.io: Basic Principles Key to Securing Kubernetes’ Future Once these capabilities have been established, Ops teams can begin to look further afield and explore leveraging the value of their data through activities like testing and optimization.
- medium.com/@codingkarma: Kubernetes Goat Part-1 In this article, you will learn how to attack and defend a Kubernetes cluster by solving the challenges of Kubernetes goat — an intentionally vulnerable cluster environment to learn and practice Kubernetes security
- medium.com/@badawekoo: Limit number of processes running in a Kubernetes pod When it comes to Kubernetes security, It is very important to harden the core components of the cluster which are pods, and limit the risks that can be originated from inside the pods. That’s why limiting number of processes that can run inside a pod will limit any vulnerabilities in your cluster.
-- copado.com: Applying a Zero Trust Infrastructure in Kubernetes
+- copado.com: Applying a Zero Trust Infrastructure in Kubernetes
- dev.to/pavanbelagatti: Kubernetes Security Best Practices For Developers
- itnext.io: Journey Of A Microservice Application In The Kubernetes World 🌟 Security considerations: security related tools. In this article, you will discuss some security considerations and see how you can ensure (at least to some extent) that the application’s specifications follow some of the best security practices.
- tutorialboy24.blogspot.com: A Detailed Talk about K8S Cluster Security from the Perspective of Attackers (Part 2) 🌟 In this 2-part series, you will address 12 common attack points in Kubernetes clusters and discuss various risks in cloud-native scenarios based on practical experience
- medium.com/cloudyrion: Kubernetes end-to-end chain exploit This article details the security flaws discovered in Kubernetes and GitOps tools due to improper configurations. It also demonstrates how an attacker could perform post-exploitation attacks, increasing their privileges and the attack surface.
- itnext.io: Performing Security Checks for Deployed Kubernetes Manifests An effective tool for checking security rule violations in Kubernetes deployments using Polaris
-- securitycafe.ro: A COMPLETE KUBERNETES CONFIG REVIEW METHODOLOGY
+- securitycafe.ro: A COMPLETE KUBERNETES CONFIG REVIEW METHODOLOGY
- itnext.io: Introduction to Kubernetes Security for Security Professionals Presenting the architecture of Kubernetes and its associated security threats, for security professionals, including penetration testers and DevSecOps practitioners.
- dev.to/mattiasfjellstrom: Kubernetes-101: Security concepts The article provides an overview of Kubernetes security concepts, focusing on NetworkPolicies, ServiceAccounts, and Security Contexts
-- blog.alexellis.io: What if your Pods need to trust self-signed certificates? Self-signed certificates are common within enterprise companies. But how do you distribute them and enable their use in Kubernetes as a user and a vendor?
-- thenewstack.io: Securing Kubernetes in a Cloud Native World As cloud native technologies continue to advance, staying informed and adaptable is key to maintaining a secure Kubernetes ecosystem.
-- collabnix.com: Applying DevSecOps Practices to Kubernetes
+- blog.alexellis.io: What if your Pods need to trust self-signed certificates? Self-signed certificates are common within enterprise companies. But how do you distribute them and enable their use in Kubernetes as a user and a vendor?
+- thenewstack.io: Securing Kubernetes in a Cloud Native World As cloud native technologies continue to advance, staying informed and adaptable is key to maintaining a secure Kubernetes ecosystem.
+- collabnix.com: Applying DevSecOps Practices to Kubernetes
- dev.to/thenjdevopsguy: Securing Kubernetes Pods For Production Workloads
- dev.to/thenjdevopsguy: The 4 C’s Of Kubernetes Security
-
+
IAM Identity And Access Management in Kubernetes
-- thenewstack.io: Cloud Native Identity and Access Management in Kubernetes
-- curity.io: OAuth 2.0 Overview
-- curity.io: OpenID Connect Overview
-- curity.io: Client Security Client security primarily covers web and mobile, to ensure best security in the browser and on devices
+- thenewstack.io: Cloud Native Identity and Access Management in Kubernetes
+- curity.io: OAuth 2.0 Overview
+- curity.io: OpenID Connect Overview
+- curity.io: Client Security Client security primarily covers web and mobile, to ensure best security in the browser and on devices
- dev.to/gabrielbiasi: Automatic SSO in Kubernetes workloads using a sidecar container In this tutorial, you will learn how to use oauth2-proxy as a sidecar container to authorize requests to your Identity Provider of choice
Securing Kubernetes Deployments
@@ -8250,7 +8250,7 @@
Securing a Kubernetes cluster using TLS certificates. Wildcard certificates
-- thenewstack.io: Jetstack Secure Promises to Ease Kubernetes TLS Security
+- thenewstack.io: Jetstack Secure Promises to Ease Kubernetes TLS Security
- xgrid.medium.com: Securing a Kubernetes cluster using TLS certificates 🌟
- ahmedy.hashnode.dev: Creating TLS Certificates for K8s components with OpenSSL In this guide, you will discuss how to create key/certificate pairs using OpenSSL to facilitate secure communication between Kubernetes Cluster components
- erkanzileli.medium.com: How TLS Certificates Work
@@ -8259,7 +8259,7 @@
Kubernetes Security Scanners
-
-
GitHub Code Security Risk Assessment: Free Vulnerability Scanning - (Related to devsecops topic)
+GitHub Code Security Risk Assessment: Free Vulnerability Scanning - (Related to devsecops topic)
-
blog.cloudsecque.com: How to Improve the Security of Your Applications with Kubernetes Security Scanners Kubernetes security scanners are tools that can be used to detect vulnerabilities and security issues in your applications. In this article you will find:
@@ -8273,16 +8273,16 @@
- techmanyu.com: Kubernetes Security with Kube-bench and Kube-hunter 🌟
- kube-bench 🌟 Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
- kube-hunter 🌟 Hunt for security weaknesses in Kubernetes clusters
-- k21academy.com: Secure and Harden Kubernetes, AKS and EKS Cluster with kube-bench, kube-hunter and CIS Benchmarks 🌟
+- k21academy.com: Secure and Harden Kubernetes, AKS and EKS Cluster with kube-bench, kube-hunter and CIS Benchmarks 🌟
- aninditabasak.medium.com: A Lap around Kubernetes Security & Vulnerability scanning Tools — checkov, kube-hunter, kube-bench & Starboard
-- blog.flant.com: Kubernetes cluster security assessment with kube-bench and kube-hunter
-- raesene.github.io: Let’s talk about Kubernetes on the Internet In this article, you will learn how to scan and discover publicly accessible Kubernetes clusters and how you can protect against it
+- blog.flant.com: Kubernetes cluster security assessment with kube-bench and kube-hunter
+- raesene.github.io: Let’s talk about Kubernetes on the Internet In this article, you will learn how to scan and discover publicly accessible Kubernetes clusters and how you can protect against it
- github.com/Shopify/kubeaudit 🌟🌟 kubeaudit helps you audit your Kubernetes clusters against common security controls. kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as:
- Run as non-root
- Use a read-only root filesystem
@@ -8294,7 +8294,7 @@
Security Checklist Kubernetes OWASP
-- kubernetes.io: Security Checklist 🌟🌟
+- kubernetes.io: Security Checklist 🌟🌟
- itnext.io: Kubernetes OWASP Top 10: Centralised Policy Enforcement This article covers the techniques for centralised policy enforcement in a Kubernetes cluster:
- CI/CD pipelines
- Security Admission controller
@@ -8304,9 +8304,9 @@
- faun.pub: Gatekeeper | K8 hardening backlog This article summarizes a list of recommendations for hardening Kubernetes clusters (both on-prem and cloud) with Admission and Mutation webhooks using the open-source tool Gatekeeper.
- systemweakness.com: OWASP-K8S Security: Insecure Workload Configurations In this series of blogs we will focus on OWASP Top 10 Kubernetes vulnerabilities, Discussing each in a separate blog.
-- owasp.org: OWASP Kubernetes Top Ten OWASP Kubernetes Top Ten is aimed at helping security practitioners, system administrators, and developers prioritize risks around the Kubernetes ecosystem. This is a prioritized list of these risks backed by data.
+- owasp.org: OWASP Kubernetes Top Ten OWASP Kubernetes Top Ten is aimed at helping security practitioners, system administrators, and developers prioritize risks around the Kubernetes ecosystem. This is a prioritized list of these risks backed by data.
- darkreading.com: Top 10 Kubernetes Security Risks Every DevSecOps Pro Should Know The mission to run any containerized application on any infrastructure makes security a challenge on Kubernetes.
-- sysdig.com: OWASP Kubernetes Top 10 🌟 One of the biggest concerns when using Kubernetes is whether we are complying with the security posture and taking into account all possible threats.
+- sysdig.com: OWASP Kubernetes Top 10 🌟 One of the biggest concerns when using Kubernetes is whether we are complying with the security posture and taking into account all possible threats.
- itnext.io: Kubernetes OWASP Top 10: Secrets Management In this article, you will discuss secrets management in Kubernetes:
- Secrets objects
- Managing Kubernetes Secrets
@@ -8318,13 +8318,13 @@
Exposed Kubernetes Clusters
-- blog.cyble.com: Exposed Kubernetes Clusters Organizations At Risk Of Data Breaches Via Misconfigured Kubernetes. Over 900k Kubernetes exposures were observed across the internet during a routine threat-hunting exercise. While this does not imply that all exposed instances are vulnerable to attacks, it still makes them a target.
+- blog.cyble.com: Exposed Kubernetes Clusters Organizations At Risk Of Data Breaches Via Misconfigured Kubernetes. Over 900k Kubernetes exposures were observed across the internet during a routine threat-hunting exercise. While this does not imply that all exposed instances are vulnerable to attacks, it still makes them a target.
NSA National Security Agent Kubernetes Hardening Guidance
- Kubernetes Hardening Guidance 🌟🌟
-- thenewstack.io: The NSA Can Help Secure Your Kubernetes Clusters
-- therecord.media: NSA, CISA publish Kubernetes hardening guide 🌟🌟
+- thenewstack.io: The NSA Can Help Secure Your Kubernetes Clusters
+- therecord.media: NSA, CISA publish Kubernetes hardening guide 🌟🌟
- Scan containers and Pods for vulnerabilities or misconfigurations.
- Run containers and Pods with the least privileges possible.
- Use network separation to control the amount of damage a compromise can cause.
@@ -8334,21 +8334,21 @@
- Periodically review all Kubernetes settings and use vulnerability scans to help ensure risks are appropriately accounted for and security patches are applied.
-- Kubescape 🌟 kubescape is the first tool for testing if Kubernetes is deployed securely as defined inKubernetes Hardening Guidance by to NSA and CISA. Tests are configured with YAML files, making this tool easy to update as test specifications evolve.
-- infoq.com: Armo Releases Kubescape K8s Security Testing Tool: Q&A with VP Jonathan Kaftzan
+- Kubescape 🌟 kubescape is the first tool for testing if Kubernetes is deployed securely as defined inKubernetes Hardening Guidance by to NSA and CISA. Tests are configured with YAML files, making this tool easy to update as test specifications evolve.
-- infoq.com NSA and CISA Publish Kubernetes Hardening Guidance
-- thenewstack.io: NSA on How to Harden Kubernetes
-- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Threat Model (Pt. 1) 🌟🌟 The NSA and CISA recently released a guide on Kubernetes hardening. We’ll cover this guide in a three part series. First, let’s explore the Threat Model and how it maps to K8s components.
+- infoq.com NSA and CISA Publish Kubernetes Hardening Guidance
+- thenewstack.io: NSA on How to Harden Kubernetes
+- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Threat Model (Pt. 1) 🌟🌟 The NSA and CISA recently released a guide on Kubernetes hardening. We’ll cover this guide in a three part series. First, let’s explore the Threat Model and how it maps to K8s components.
- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 3: Authn, Authz, Logging & Auditing In this tutorial, you will learn the authentication, authorization, logging, and auditing of a Kubernetes cluster. Specifically, you will discuss some of the best practices in AWS EKS.
-- armosec.io: NSA & CISA Kubernetes Hardening Guide – what is new with version 1.1 In March 2022, NSA & CISA has issued a new version of the Kubernetes Hardening Guide – 1.1. Here are the most important points addressed in this new version.
+- armosec.io: NSA & CISA Kubernetes Hardening Guide – what is new with version 1.1 In March 2022, NSA & CISA has issued a new version of the Kubernetes Hardening Guide – 1.1. Here are the most important points addressed in this new version.
CIS Benchmarks and CIS Operator
-- ibm.com: CIS Benchmarks Developed by a global community of cybersecurity professionals, CIS Benchmarks are a collection of best practices for securely configuring IT systems, software, networks, and cloud infrastructure.
+- ibm.com: CIS Benchmarks Developed by a global community of cybersecurity professionals, CIS Benchmarks are a collection of best practices for securely configuring IT systems, software, networks, and cloud infrastructure.
- aymen-abdelwahed.medium.com: K8s Operators — CIS Kubernetes Benchmarks How can I run my workloads securely on top of Kubernetes? In this post, we’ll be taking a look at the CIS-Benchmark, breaking the concept down to simple terms, and in the end, deploying the CIS-Operator using Helm charts and custom values
- rancher/cis-operator This is an operator that can run on a given Kubernetes cluster and provide ability to run security scans as per the CIS benchmarks, on the cluster.
@@ -8357,10 +8357,10 @@
User and Workload identities in Kubernetes
-
-
Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) 🌟 - This article explores various methods for applications hosted on Azure Kubernetes Service (AKS) to securely retrieve secrets from Azure Key Vault. It details the use of Microsoft Entra Workload ID, which integrates with Kubernetes to federate with external identity providers, enabling pods to obtain Kubernetes identities via Service Account Token Volume Projection. This allows for the secure exchange of Kubernetes tokens for Microsoft Entra access tokens, facilitating secure access to Azure resources.
+Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) 🌟 - This article explores various methods for applications hosted on Azure Kubernetes Service (AKS) to securely retrieve secrets from Azure Key Vault. It details the use of Microsoft Entra Workload ID, which integrates with Kubernetes to federate with external identity providers, enabling pods to obtain Kubernetes identities via Service Account Token Volume Projection. This allows for the secure exchange of Kubernetes tokens for Microsoft Entra access tokens, facilitating secure access to Azure resources.
-
-
learnk8s.io/authentication-kubernetes: User and workload identities in Kubernetes 🌟🌟🌟
+learnk8s.io/authentication-kubernetes: User and workload identities in Kubernetes 🌟🌟🌟
- The difference b/w externally managed and internal identities.
- How Kubernetes assigns identities for internal users with Service Accounts.
@@ -8370,8 +8370,8 @@
Service Accounts
- Service account is an important concept in terms of Kubernetes security. You can relate it to AWS instance roles and google cloud instance service account if you have a cloud background. By default, every pod gets assigned a default service account if you don’t specify a custom service account. Service account allows pods to make calls to the API server to manage the cluster resources using ClusterRoles or resources scoped to a namespace using Roles. Also, you can use the Service account token from external applications to make API calls to the kubernetes API server.
-- devopscube.com: How To Create Kubernetes Service Account For API Access
-- devopscube.com: How to Create kubernetes Role for Service Account
+- devopscube.com: How To Create Kubernetes Service Account For API Access
+- devopscube.com: How to Create kubernetes Role for Service Account
- github.com/scriptcamp/kubernetes-serviceaccount-example Example Kubernetes manifests to create service account mapped to Rolebinding.
@@ -8379,7 +8379,7 @@
- github.com/dvob/k8s-s2s-auth: Kubernetes Service Accounts 🌟 Service accounts are well known in Kubernetes to access the Kubernets API from within the cluster. This is often used for infrastructure components like operators and controllers. But we can also use service accounts to implement authentication in our own applications. This README tries to give an overview on how service accounts work and and shows a couple of variants how you can use them for authentication. Further this repository contains an example Go service which shows how to implement the authentication in an application.
- sandeepbaldawa.medium.com: Service Accounts in K8s (Kubernetes)
- mjarosie.github.io: IAM roles for Kubernetes service accounts - deep dive
-- linkerd.io: Using Kubernetes’s new Bound Service Account Tokens for secure workload identity
+- linkerd.io: Using Kubernetes’s new Bound Service Account Tokens for secure workload identity
- medium.com/pareture: Kubernetes Bound Projected Service Account Token Volumes Might Surprise You There is an important difference to understand and remember between default Service Account Projection and Bound Service Account Token Volumes.
- medium.com/geekculture: K8s — ServiceAccount Token K8s ServiceAccount token deep dive
- motilayo.hashnode.dev: Exploring Kubernetes Service Account Tokens and Secure Workload Identity Federation Ever wonder how AWS IRSA, GCP workload identity or Azure AD workload identity work in Kubernetes? This article explores how OIDC works in a Kubernetes cluster to trust external workloads
@@ -8392,26 +8392,26 @@
- dev.to: Store your Kubernetes Secrets in Git thanks to Kubeseal. Hello SealedSecret! 🌟
- blog.doit-intl.com: Kubernetes and Secrets Management in the Cloud
- itnext.io: Effective Secrets with Vault and Kubernetes
-- kubernetes.io: Encrypting Secret Data at Rest 🌟
-- “Kubernetes base64 encodes secrets because that makes arbitrary data play nice with JSON. It had nothing to do with the security model (or lack thereof). It did not occur to us at the time that people could mistake base64 for some form of encryption”
-- “I’ve always wondered how folks expect a system would be able to protect data at rest like that. If the public key and private key are local on the machine - nothing is secure no matter what algorithm is used”
-- “The issue is not new or unique to k8s. There is a general confusion between encoding and encryption. Ask any web dev about base64, and there is a good chance they’ll tell you it’s encryption”
-- “The semantics are important. Easy to grant an RBAC policy like “read only except secrets”
-- “I just meant that base64 prevents you from logging a secret in plain text by accident… but many more layers are required to keep your secrets secret”
+- kubernetes.io: Encrypting Secret Data at Rest 🌟
+- “Kubernetes base64 encodes secrets because that makes arbitrary data play nice with JSON. It had nothing to do with the security model (or lack thereof). It did not occur to us at the time that people could mistake base64 for some form of encryption”
+- “I’ve always wondered how folks expect a system would be able to protect data at rest like that. If the public key and private key are local on the machine - nothing is secure no matter what algorithm is used”
+- “The issue is not new or unique to k8s. There is a general confusion between encoding and encryption. Ask any web dev about base64, and there is a good chance they’ll tell you it’s encryption”
+- “The semantics are important. Easy to grant an RBAC policy like “read only except secrets”
+- “I just meant that base64 prevents you from logging a secret in plain text by accident… but many more layers are required to keep your secrets secret”
- “You need to configure how the key is managed and ideally opt into something like KMS plugin (which depends on how the cluster is hosted) to make it good”
- enterprisersproject.com: How to explain Kubernetes Secrets in plain English 🌟 What is a Kubernetes secret? How does this type of Kubernetes object increase security? How do you create a Kubernetes secret? What are some best practices? Experts break it down
- millionvisit.blogspot.com: Kubernetes for Developers #19: Manage app credentials using Kubernetes Secrets 🌟
-- kubermatic.com: Keeping the State of Apps Part 2: Introduction to Secrets
+- kubermatic.com: Keeping the State of Apps Part 2: Introduction to Secrets
- medium: Kubernetes Secrets Explained
- medium: Managing your sensitive information during GitOps process with Secret Sealed
- enlear.academy: Sealed Secrets with Kubernetes Usage of the sealed secret to encrypt Kubernetes secrets.
- medium.com/codex: Sealed Secrets for Kubernetes How to encrypt Kubernetes Secret component and store it on the Git. And decrypt it using Kubernetes controller.
-- macchaffee.com: Plain Kubernetes Secrets are fine 🌟 It’s no secret that Kubernetes Secrets are just base64-encoded strings stored in etcd alongside the rest of the cluster’s state. But is it really an issue? Let’s create a rudimentary threat model for Kubernetes Secrets and see what comes up.
+- macchaffee.com: Plain Kubernetes Secrets are fine 🌟 It’s no secret that Kubernetes Secrets are just base64-encoded strings stored in etcd alongside the rest of the cluster’s state. But is it really an issue? Let’s create a rudimentary threat model for Kubernetes Secrets and see what comes up.
- youtube: Manage Kubernetes Secrets With External Secrets Operator (ESO) 🌟
- carlosalca.medium.com: How to manage all my K8s secrets in git securely with Bitnami Sealed Secrets
-- cloud.redhat.com: A Guide to Secrets Management with GitOps and Kubernetes 🌟 This article will discuss two architectural approaches to managing secrets with GitOps: encrypted secrets stored in Git and storing a reference to secrets in Git
+- cloud.redhat.com: A Guide to Secrets Management with GitOps and Kubernetes 🌟 This article will discuss two architectural approaches to managing secrets with GitOps: encrypted secrets stored in Git and storing a reference to secrets in Git
- itnext.io: Vault cluster with auto unseal on Kubernetes
- pjame-fb.medium.com: Kubernetes Secrets from Secrets Manager using External Secrets Operators In this article, you will learn how to store your credentials in the Secrets Manager and automatically retrieve them for creating Kubernetes Secrets using External Secrets.
- mixi-developers.mixi.co.jp: Comparing External Secrets Operator with Secret Storage CSI as Kubernetes External Secrets is Deprecated In this article, you will compare the External Secrets Operator with Secret Storage CSI for using external secrets in a Kubernetes cluster. You will compare:
@@ -8427,23 +8427,23 @@
- eminalemdar.medium.com: Cloud Native Secret Management with External Secrets Operator
-- piotrminkowski.com: Sealed Secrets on Kubernetes with ArgoCD and Terraform In this article, you will learn how to manage secrets securely on Kubernetes in the GitOps approach using Sealed Secrets, ArgoCD, and Terraform
+- piotrminkowski.com: Sealed Secrets on Kubernetes with ArgoCD and Terraform In this article, you will learn how to manage secrets securely on Kubernetes in the GitOps approach using Sealed Secrets, ArgoCD, and Terraform
- medium.com/google-cloud: Handle Kubernetes Secrets the GitOps Way — Part 1
- dev.to: A Detailed Talk about K8S Cluster Security from the Perspective of Attackers (Part 1) This 2-part series summarizes the methods and experience of attacking Kubernetes components, external services of nodes, business pods, and container escaping, including lateral attacks, as well as attacks on the Kubernetes management platform
Kubernetes Cert-Manager. Encrypting the certificate for Kubernetes. SSL certificates with Let’s Encrypt in Kubernetes Ingress via cert-manager
-- cert-manager.io 🌟 cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. It can issue certificates from a variety of supported sources, including Let’s Encrypt, HashiCorp Vault, and Venafi as well as private PKI.
-- Kubernetes Certs
+- cert-manager.io 🌟 cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. It can issue certificates from a variety of supported sources, including Let’s Encrypt, HashiCorp Vault, and Venafi as well as private PKI.
+- Kubernetes Certs
- Using SSL certificates from Let’s Encrypt in your Kubernetes Ingress via cert-manager 🌟
- medium: Encrypting the certificate for Kubernetes (Let’s Encrypt) 🌟
-- rejupillai.com: Let’s Encrypt the Web (for free)
+- rejupillai.com: Let’s Encrypt the Web (for free)
- betterprogramming.pub: Kubernetes and SSL Certificate Management 🌟 Manage SSL certificate orders in K8s with Helm and Let’s Encrypt.
-- getbetterdevops.io: How to Secure K8S Nginx Ingress With Let’s Encrypt and Cert Manager Automate the provisioning of Let’s Encrypt certificates for ingress resources
+- getbetterdevops.io: How to Secure K8S Nginx Ingress With Let’s Encrypt and Cert Manager Automate the provisioning of Let’s Encrypt certificates for ingress resources
- faun.pub: Automate Certificate Management In Kubernetes Using Cert-Manager
- cert-manager/cert-manager Automatically provision and manage TLS certificates in Kubernetes
-- github.com/cert-manager: Policy Approver Policy Approver is a cert-manager approver that is responsible for Approving or Denying CertificateRequests.
-- jetstack.io: Getting started using cert-manager with the sig-network Gateway API
+- github.com/cert-manager: Policy Approver Policy Approver is a cert-manager approver that is responsible for Approving or Denying CertificateRequests.
+- jetstack.io: Getting started using cert-manager with the sig-network Gateway API
- medium.com/@knoldus: Configure SSL certificate with cert-manager on Kubernetes
- blog.devgenius.io: Automated DNS/TLS with External DNS & LetsEncrypt on Kubernetes In this article, you’ll learn how to create TLS certificates for your application with cert-manager and DNS entries with external DNS. Finally, you will expose your applications with an ingress resource to tie it all together.
- itnext.io: Upgrade Cert-Manager for Your Production Deployment Without Downtime When upgrading Cert-Manager, it’s often required to update the CRDs. Unfortunately, it’s not a straightforward process. In this article, you’ll learn a few options that ensure a smooth Cert-Manager upgrade to avoid downtime of production deployment.
@@ -8458,7 +8458,7 @@
- blog.devgenius.io: SSO Authentication for Applications in Kubernetes This post discusses using SSO authentication and authorization to secure apps in Kubernetes. The tutorial uses Dex and Traefik Forward Auth (or Oauth2-Proxy) to add additional security to ingresses or apps that do not support built-in OIDC
OAuth2 Proxy
-OAuth2 Proxy is an open-source reverse proxy that provides authentication and authorization for web applications. It is designed to sit in front of your web application and authenticate users using OAuth2 providers such as Google, Microsoft, and Facebook. Once a user has been authenticated, OAuth2 Proxy adds an authorization header to each request, allowing the web application to verify that the request came from an authenticated user.
+OAuth2 Proxy is an open-source reverse proxy that provides authentication and authorization for web applications. It is designed to sit in front of your web application and authenticate users using OAuth2 providers such as Google, Microsoft, and Facebook. Once a user has been authenticated, OAuth2 Proxy adds an authorization header to each request, allowing the web application to verify that the request came from an authenticated user.
OAuth2 Proxy is commonly used in Kubernetes environments to secure access to web applications deployed on a Kubernetes cluster. It integrates with Kubernetes API Server to provide automatic configuration and discovery of the OAuth2 provider’s credentials. It also supports a variety of authentication mechanisms, including Google OAuth2, Microsoft Azure AD, GitHub OAuth2, and others.
Some of the key features of OAuth2 Proxy include:
Support for multiple OAuth2 providers
@@ -8468,7 +8468,7 @@ Fine-grained access control through the use of role-based access control (RBAC)
Support for custom headers and footers to customize the user interface
Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAuth2 providers. It simplifies the authentication and authorization process and makes it easy to manage access to your applications in a Kubernetes environment.
-- geek-cookbook.funkypenguin.co.nz: Using OAuth2 proxy for Kubernetes Dashboard In this tutorial, you will learn how to set up OAuth2 Proxy to pass authentication headers to Kubernetes Dashboard, which doesn’t provide its authentication but instead relies on Kubernetes’ own RBAC auth
+- geek-cookbook.funkypenguin.co.nz: Using OAuth2 proxy for Kubernetes Dashboard In this tutorial, you will learn how to set up OAuth2 Proxy to pass authentication headers to Kubernetes Dashboard, which doesn’t provide its authentication but instead relies on Kubernetes’ own RBAC auth
- imanishchaudhary.medium.com: Securing Kubernetes Dashboards: SSO Authentication and RBAC Implementation with Okta and OAuth2 Proxy
Alternatives
@@ -8476,7 +8476,7 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
Istio: Istio is a popular open-source service mesh that provides a variety of features, including secure authentication and authorization through its Istio Authentication feature. Istio allows you to define authentication policies for your services using a variety of authentication mechanisms, such as JWT, OAuth, and mTLS.
Keycloak: Keycloak is an open-source identity and access management solution that provides a variety of features, including authentication, authorization, and user management. Keycloak can be deployed on Kubernetes using its Helm chart and can be used to secure your Kubernetes applications using a variety of authentication mechanisms, such as OAuth2, OpenID Connect, and SAML.
Dex: Dex is an open-source identity provider that can be used to provide authentication and authorization for Kubernetes applications. Dex can be deployed on Kubernetes using its Helm chart and can be used to authenticate users using a variety of authentication mechanisms, such as LDAP, OAuth2, and OpenID Connect.
-Traefik: Traefik is a popular open-source reverse proxy and load balancer that provides a variety of features, including secure authentication and authorization. Traefik can be used to secure your Kubernetes applications using a variety of authentication mechanisms, such as OAuth2, JWT, and basic authentication.
+Traefik: Traefik is a popular open-source reverse proxy and load balancer that provides a variety of features, including secure authentication and authorization. Traefik can be used to secure your Kubernetes applications using a variety of authentication mechanisms, such as OAuth2, JWT, and basic authentication.
Ambassador: Ambassador is a popular open-source API Gateway that provides a variety of features, including secure authentication and authorization. Ambassador can be used to secure your Kubernetes applications using a variety of authentication mechanisms, such as OAuth2, JWT, and basic authentication.
Each of these alternatives provides different features and may be more suitable for different use cases. It’s important to evaluate each option based on your specific needs and requirements.
RBAC and Access Control
@@ -8487,20 +8487,20 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
- Kubernetes RBAC Permission Manager 🌟
- Krane 🌟 is a Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.
- rbac.dev 🌟🌟🌟 advocacy site for Kubernetes RBAC. A site dedicated to good practices and tooling around Kubernetes RBAC. Both pull requests and issues are welcome.
-- For recipes, tips and tricks around RBAC see recipes.rbac.dev 🌟
+- For recipes, tips and tricks around RBAC see recipes.rbac.dev 🌟
- github.com/clvx/k8s-rbac-model: Kubernetes RBAC Model This is a implementation of a RBAC model for a multi project multi tenant Kubernetes cluster.
-- loft.sh: Kubernetes RBAC: Basics and Advanced Patterns
-- marcusnoble.co.uk: Restricting cluster-admin Permissions Generally, operators of the cluster are assigned to the cluster-admin ClusterRole. This gives the user access and permission to do all operations on all resources in the cluster. But what if you need to block an action performed by cluster admins?
+- loft.sh: Kubernetes RBAC: Basics and Advanced Patterns
+- marcusnoble.co.uk: Restricting cluster-admin Permissions Generally, operators of the cluster are assigned to the cluster-admin ClusterRole. This gives the user access and permission to do all operations on all resources in the cluster. But what if you need to block an action performed by cluster admins?
- medium.com/devops-mojo: Kubernetes — Role-Based Access Control (RBAC) Overview RBAC with Kubernetes — Role, ClusterRole, RoleBinding, and ClusterRoleBinding.
- loft-sh.medium.com: 10 Essentials for Kubernetes Access Control
- sumanthkumarc.medium.com: Kubernetes RBAC — Update default ClusterRoles without editing them
- faun.pub: Assign permissions to an user in Kubernetes. An overview of RBAC-based AuthZ in k8s 🌟
-- anaisurl.com: RBAC Explained with Examples 🌟 Kubernetes RBAC tutorial with two examples, using ServiceAccounts and openssl to create separate contexts for users
+- anaisurl.com: RBAC Explained with Examples 🌟 Kubernetes RBAC tutorial with two examples, using ServiceAccounts and openssl to create separate contexts for users
- medium.com/@badawekoo: Using RBAC in Kubernetes for authorization-Complete Demo-Part 1
-- thenewstack.io: Securing Access to Kubernetes Environments with Zero Trust
-- learnk8s.io: Limiting access to Kubernetes resources with RBAC 🌟🌟🌟 What happens when you combine a Kubernetes RoleBinding to a ClusterRole? Are you even allowed? In this article, Yanan Zhao explores the K8s RBAC authorization model by rebuilding it from scratch.
+- thenewstack.io: Securing Access to Kubernetes Environments with Zero Trust
+- learnk8s.io: Limiting access to Kubernetes resources with RBAC 🌟🌟🌟 What happens when you combine a Kubernetes RoleBinding to a ClusterRole? Are you even allowed? In this article, Yanan Zhao explores the K8s RBAC authorization model by rebuilding it from scratch.
- medium.com/@15daniel10: YOYO attack on a K8S cluster In addition to the performance degradation for the attacked service, the underlying idea behind the attack is to exploit the autoscaling mechanism in order to make the victim deploy excessive resources and pay for them while having as little cost footprint for the attacker as possible. In other words, the attacker harnesses the power of the cloud against the organization that uses it.
- dev.to: Binding AWS IAM roles to Kubernetes Service Account for on-prem clusters | Daniele Polencic 🌟 AWS IAM to Kubernetes service accounts integration, but for on-prem clusters (i.e. non EKS, just regular clusters). Process to grant permissions to Pods.
- medium.com/@danielepolencic: How does RBAC work in kubernetes 🌟 A short and visual thread on how Kubernetes RBAC works in Kubernetes
@@ -8512,8 +8512,8 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
- medium.com/@danielepolencic: AWS IAM Roles for service accounts for on-prem clusters In this short tutorial, you will learn how to configure the IAM roles for Service Account for a bare-metal cluster using minikube as an example.
- medium.com/andcloudio: Setting up Authentication and RBAC Authorization in Kubernetes
- dev.to: Configure RBAC in Kubernetes Like a Boss You will configure RBAC both with kubectl and yaml definitions.
-- raesene.github.io: Auditing RBAC - Redux The challenges of auditing Kubernetes authorization. Auditing Kubernetes authorization can be a bit of a tricky task. In this article, you will learn what techniques and tools you can use to identify, reassign and manage RBAC rules in your cluster.
-- goteleport.com: A Simple Overview of Authentication Methods for Kubernetes Clusters
+- raesene.github.io: Auditing RBAC - Redux The challenges of auditing Kubernetes authorization. Auditing Kubernetes authorization can be a bit of a tricky task. In this article, you will learn what techniques and tools you can use to identify, reassign and manage RBAC rules in your cluster.
+- goteleport.com: A Simple Overview of Authentication Methods for Kubernetes Clusters
- medium.com/@mehmetodabashi: Authentication and Authorization in Kubernetes: Client Certificates and Role Based Access Control (RBAC) In this tutorial, you’ll learn how to authenticate and authorize a user to access Kubernetes Clusters with client certificates
- medium.com/@brunoolimpio: Kubernetes DeepDive — Parte 2 - Kubernetes RBAC and more… | Bruno Olimpio
- youtube: Kubernetes RBAC Explained | Anton Putra 🌟
@@ -8525,13 +8525,13 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
Kubernetes and LDAP
-- loft.sh: Kubernetes and LDAP: Enterprise Authentication for Kubernetes
+- loft.sh: Kubernetes and LDAP: Enterprise Authentication for Kubernetes
Admission Control
- blog.styra.com: Why RBAC is not enough for kubernetes security 🌟🌟
- medium: Single Sign-On in Kubernetes 🌟
-- trstringer.com: Create a Basic Kubernetes Validating Webhook
+- trstringer.com: Create a Basic Kubernetes Validating Webhook
- box/kube-exec-controller An admission controller service and kubectl plugin to handle container drift in K8s clusters
Kubernetes Security Best Practices
@@ -8540,7 +8540,7 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
Building a DDoS Response Plan with Azure DDoS Protection - (Related to azure topic)
-
-
Kubernetes Security 101: Risks and 29 Best Practices 🌟 Security Best Practices Across Build, Deploy, and Runtime Phases.
+Kubernetes Security 101: Risks and 29 Best Practices 🌟 Security Best Practices Across Build, Deploy, and Runtime Phases.
- Build Phase:
- Use minimal base images
@@ -8572,15 +8572,15 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
- If breached, scale suspicious pods to zero
-- thenewstack.io: 6 Kubernetes Security Best Practices 🌟
-- armosec.io: Kubernetes Security Best Practices: Definitive Guide
-- semaphoreci.com: Secure Your Kubernetes Deployments In this tutorial, we present three tools to validate and secure your Kubernetes deployments:
+- thenewstack.io: 6 Kubernetes Security Best Practices 🌟
+- armosec.io: Kubernetes Security Best Practices: Definitive Guide
+- semaphoreci.com: Secure Your Kubernetes Deployments In this tutorial, we present three tools to validate and secure your Kubernetes deployments:
- Kubeval
- Kubeconform
- Kubescore
-- engineering.dynatrace.com: Kubernetes Security Best Practices -Part 1: Role Based Access Control (RBAC)
+- engineering.dynatrace.com: Kubernetes Security Best Practices -Part 1: Role Based Access Control (RBAC)
- medium.com/dynatrace-engineering: Kubernetes Security Best Practices Part 2: Network Policies In this blog post, you’ll cover the following topics:
- What a NetworkPolicy is, and why do you need it
- How NetworkPolicies are structured
@@ -8588,12 +8588,12 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
- An example of defining NetworkPolicies
-- blog.frankel.ch: Learning by auditing Kubernetes manifests In this article, you will learn about Kubernetes security and architecture by reviewing reports from Chekov — a tool designed to find misconfigurations before they’re deployed.
-- spectrocloud.com: Kubernetes security best practices: 5 easy ways to cut risk
+- blog.frankel.ch: Learning by auditing Kubernetes manifests In this article, you will learn about Kubernetes security and architecture by reviewing reports from Chekov — a tool designed to find misconfigurations before they’re deployed.
+- spectrocloud.com: Kubernetes security best practices: 5 easy ways to cut risk
- medium.com/@cloud_tips: Kubernetes Security Best Practices
-
+
Kubernetes Authentication and Authorization
@@ -8602,15 +8602,15 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
Configure Microsoft Entra for Increased Security - This article provides guidance on configuring Microsoft Entra for enhanced security, organized by themes aligned with the Secure Future Initiative (SFI). It focuses on implementing controls for traditional workforce tenants to reduce credential-related risks and build a foundation for secure resource management. The document highlights the use of automated assessments like the Zero Trust Assessment for efficient validation of security configurations.
-
-
+
-- kubernetes.io: Access Clusters Using the Kubernetes API
-- kubernetes.io: Accesing Clusters
+- kubernetes.io: Access Clusters Using the Kubernetes API
+- kubernetes.io: Accesing Clusters
- magalix.com: kubernetes authentication 🌟
- magalix.com: kubernetes authorization 🌟
-- kubernetes login
-- learnk8s.io: Authentication between microservices using Kubernetes identities 🌟
-- gravitational.com: How to Set Up Kubernetes SSO with SAML
+- kubernetes login
+- learnk8s.io: Authentication between microservices using Kubernetes identities 🌟
+- gravitational.com: How to Set Up Kubernetes SSO with SAML
- lisowski0925.medium.com: Using Kubernetes Certificate Signing Requests and RBAC for User Authentication and Authorization
Kubernetes Authentication Methods
@@ -8625,36 +8625,36 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
OpenID Connect
Implementing a custom Kubernetes authentication method
-- Implementing a custom Kubernetes authentication method
+- Implementing a custom Kubernetes authentication method
Pod Security Policies (SCCs - Security Context Constraints in OpenShift)
-- Pod Security Policy (SCC in OpenShift) 🌟
-- rancher.com: Enhancing Kubernetes Security with Pod Security Policies, Part 1
-- rancher.com: Enhancing Kubernetes Security with Pod Security Policies, Part 2
+- Pod Security Policy (SCC in OpenShift) 🌟
+- rancher.com: Enhancing Kubernetes Security with Pod Security Policies, Part 1
-- developer.squareup.com: Kubernetes Pod Security Policies (PSP) an example with exception management
+- developer.squareup.com: Kubernetes Pod Security Policies (PSP) an example with exception management
- itnext.io: Implementing a Secure-First Pod Security Policy Architecture
-- Neon Mirrors: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno
+- Neon Mirrors: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno
- ibrahims.medium.com: Security Context — Kubernetes
Security Profiles Operator
- The Security Profiles Operator (SPO) is an out-of-tree Kubernetes enhancement to make the management of seccomp, SELinux and AppArmor profiles easier and more convenient.
- kubernetes-sigs/security-profiles-operator
-- kubernetes.io: What’s new in Security Profiles Operator v0.4.0
+- kubernetes.io: What’s new in Security Profiles Operator v0.4.0
EKS Security
- Security Group Rules EKS
- EC2 ENI and IP Limit
-- Calico in EKS
-- Amazon EKS Best Practices Guide for Security 🌟
+- Calico in EKS
+- Amazon EKS Best Practices Guide for Security 🌟
- medium.com: Securing Kubernetes Dashboard on EKS with Pomerium
External Secrets Operator
@@ -8670,8 +8670,8 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
Official Kubernetes CVE Feed
-- kubernetes.io: Official CVE Feed 🌟
-- kubernetes.io: Announcing the Auto-refreshing Official Kubernetes CVE Feed
+- kubernetes.io: Official CVE Feed 🌟
+- kubernetes.io: Announcing the Auto-refreshing Official Kubernetes CVE Feed
Videos
@@ -8688,7 +8688,7 @@ Overall, OAuth2 Proxy is a powerful tool for securing web applications using OAu
-Kubernetes base64 encodes secrets because that makes arbitrary data play nice with JSON. It had nothing to do with the security model (or lack thereof). It did not occur to us at the time that people could mistake base64 for some form of encryption.
— Daniel Smith (@originalavalamp) July 4, 2021
+Kubernetes base64 encodes secrets because that makes arbitrary data play nice with JSON. It had nothing to do with the security model (or lack thereof). It did not occur to us at the time that people could mistake base64 for some form of encryption.
— Daniel Smith (@originalavalamp) July 4, 2021
#OAuth has 4 Flows for retrieving an Access Token.
If you have worked with it, you know how difficult is it to remember what is what.
A Zine says a lot, seriously a lot. Check this out.
Idea credits @b0rk #IAM #security #infosec #webdev #web #webcomic #webcomics
RT if useful pic.twitter.com/fbrls0V08K
— Rohit (@sec_r0) January 8, 2021
diff --git a/kubernetes-storage.html b/kubernetes-storage.html
index 348dbcc1..c32d3cca 100644
--- a/kubernetes-storage.html
+++ b/kubernetes-storage.html
@@ -8108,69 +8108,69 @@
Introduction
-- thenewstack.io: How Kubernetes provides networking and storage to applications
+- thenewstack.io: How Kubernetes provides networking and storage to applications
- medium: Kubernetes Storage Explained 🌟 kubernetes/volumes/claims
-- thenewstack.io: A Guide to Running Stateful Applications in Kubernetes
-- forbes.com: 5 Cloud Native Storage Startups To Watch Out For In 2019
+- thenewstack.io: A Guide to Running Stateful Applications in Kubernetes
+- forbes.com: 5 Cloud Native Storage Startups To Watch Out For In 2019
- medium: Solution architect’s guide to Kubernetes persistent storage
-- howtoforge.com: Storage in Kubernetes 🌟
-- cncf.io: Container Attached Storage is Cloud Native Storage (CAS)
-- thenewstack.io: The most popular cloud native solutions 🌟
+- howtoforge.com: Storage in Kubernetes 🌟
+- cncf.io: Container Attached Storage is Cloud Native Storage (CAS)
+- thenewstack.io: The most popular cloud native solutions 🌟
- medium: Kubernetes Storage Performance Comparison v2 (2020 Updated) 🌟
-- blocksandfiles.com: geless storage is the ‘answer’ to Kubernetes data challenges
-- rancher.com: What is Cloud-Native Storage?
-- softwareengineeringdaily.com: Why Is Storage On Kubernetes So Hard? 🌟
-- thenewstack.io: Compute and Storage Should Be Decoupled for Log Management at Scale
-- blog.min.io: Why Kubernetes Managed Object Storage Matters
+- blocksandfiles.com: geless storage is the ‘answer’ to Kubernetes data challenges
+- rancher.com: What is Cloud-Native Storage?
+- softwareengineeringdaily.com: Why Is Storage On Kubernetes So Hard? 🌟
+- thenewstack.io: Compute and Storage Should Be Decoupled for Log Management at Scale
+- blog.min.io: Why Kubernetes Managed Object Storage Matters
- gitlab.com: Kubernetes storage provider benchmarks
-- ibm.com: Using Fio to Tell Whether Your Storage is Fast Enough for Etcd
+- ibm.com: Using Fio to Tell Whether Your Storage is Fast Enough for Etcd
- marketplace.redhat.com: Dont treat Kubernetes storage as an afterthought: Turn to persistent container storage for high performance and availability
- thenewstack.io: Beyond Block and File: COSI Enables Object Storage in Kubernetes 🌟
-- thenewstack.io: When Is Decentralized Storage the Right Choice?
-- storj.io: Integrating Decentralized Cloud Storage with Duplicati
-- thenewstack.io: The Biggest Gap in Kubernetes Storage Architecture?
+- thenewstack.io: When Is Decentralized Storage the Right Choice?
+- storj.io: Integrating Decentralized Cloud Storage with Duplicati
+- thenewstack.io: The Biggest Gap in Kubernetes Storage Architecture?
- medium: Provisioning storage in Kubernetes
-- kylezsembery.com: Persistent Storage in Kubernetes In this post I’ll briefly explain how persistent storage works in Kubernetes.
+- kylezsembery.com: Persistent Storage in Kubernetes In this post I’ll briefly explain how persistent storage works in Kubernetes.
- blog.mayadata.io: Container Attached Storage (CAS) vs. Software-Defined Storage - Which One to Choose?
-- thenewstack.io: Stateful Workloads on Kubernetes with Container Attached Storage 🌟
+- thenewstack.io: Stateful Workloads on Kubernetes with Container Attached Storage 🌟
- developers.redhat.com: How to maximize data storage for microservices and Kubernetes, Part 1: An introduction 🌟
- blog.mayadata.io: Kubernetes storage basics: PV, PVC and StorageClass 🌟
-- infoworld.com: Kubernetes object storage best practices Like Kubernetes itself, the underlying object storage should be distributed, decoupled, declarative, and immutable.
+- infoworld.com: Kubernetes object storage best practices Like Kubernetes itself, the underlying object storage should be distributed, decoupled, declarative, and immutable.
- ondat.io: Stateful Apps in Kubernetes are a big deal
-- techgenix.com: Data Storage Management for Kubernetes - 5 movers and shakers
-- thenewstack.io: The Growth of State in Kubernetes
+- techgenix.com: Data Storage Management for Kubernetes - 5 movers and shakers
+- thenewstack.io: The Growth of State in Kubernetes
- itnext.io: Highly Available NFS cluster in Kubernetes, a cloud vendor independent storage solution
-- armosec.io: Data Storage in Kubernetes Kubernetes in cooperation with cloud vendor infrastructure provides flexible mechanisms for data storage and management. It is up to the users to decide which mechanism best fits their application needs. However, the security side of the data storage falls completely under the user’s responsibility. Most of the default settings are wide open and require significant security expertise to protect your applications from data leakage.
-- infoq.com: Best Practices for Running Stateful Applications on Kubernetes
-- blog.flant.com: Comparing Ceph, LINSTOR, Mayastor, and Vitastor storage performance in Kubernetes Are you looking for an easy-to-use, reliable block-type storage for your cluster?
+- armosec.io: Data Storage in Kubernetes Kubernetes in cooperation with cloud vendor infrastructure provides flexible mechanisms for data storage and management. It is up to the users to decide which mechanism best fits their application needs. However, the security side of the data storage falls completely under the user’s responsibility. Most of the default settings are wide open and require significant security expertise to protect your applications from data leakage.
+- infoq.com: Best Practices for Running Stateful Applications on Kubernetes
+- blog.flant.com: Comparing Ceph, LINSTOR, Mayastor, and Vitastor storage performance in Kubernetes Are you looking for an easy-to-use, reliable block-type storage for your cluster?
- medium.com/@amir.ilw: Kubernetes Storage Migration 🌟 Storage migrations, storage path changes or even moving to a newer faster CSI can be overwhelming. In this article, you’ll learn the required steps, how to avoid the pitfalls of immutable volumes and how to plan your next migration.
- discoblocks.io 🌟 - ondat/discoblocks Open Source declarative disk configuration system for Kubernetes. Discoblocks is an open-source declarative disk configuration system for Kubernetes helping to automate CRUD (Create, Read, Update, Delete) operations for cloud disk device resources attached to Kubernetes cluster nodes.
- medium.com/geekculture: Storage | Kubernetes A Deep Dive into Kubernetes Storage
- itnext.io: Temporary Storage for Kubernetes Pods Or emptyDir vs. container File System. Kubernetes applications might need some temporary storage that could be discarded after a container is stopped/removed. In this article, you will compare emptyDir and the container’s local storage.
-- container-object-storage-interface.github.io: Kubernetes COSI [ARCHIVED] Kubernetes Container Object Storage Interface (COSI) is a standard for exposing object storage to containerized workloads running in Kubernetes. COSI is meant to be a departure from the CSI since the latter does not work well with object storage.
+- container-object-storage-interface.github.io: Kubernetes COSI [ARCHIVED] Kubernetes Container Object Storage Interface (COSI) is a standard for exposing object storage to containerized workloads running in Kubernetes. COSI is meant to be a departure from the CSI since the latter does not work well with object storage.
- medium.com/nerd-for-tech: Persistence with Kubernetes
-- cncf.io: Kubernetes storage is complex, but it’s getting better
+- cncf.io: Kubernetes storage is complex, but it’s getting better
- yuminlee2.medium.com: Kubernetes: Storage In Kubernetes, pods are temporary and any data stored within them is lost when they’re deleted or restarted. To avoid this, use persistent storage options such as PVs(Persistent Volumes)and PVCs(Persistent Volume Claims). PVs are storage resources with an independent lifecycle, while PVCs are requests for storage. Use them for simplified storage management and scaling. Provisioning persistent volumes can be static or dynamic. StorageClass defines the provisioner, parameters, and reclaim policy for dynamically provisioned PVs.
- medium.com/kubernetes-deveops: Kubernetes — Deploying Application with Persistent Storage Implementing Storage Controller for Auto-Provisioning
Kubernetes Storage API Interface
-- danielmangum.com: K8s ASA: The Storage Interface The primary function of the Kubernetes API Server is to ingest data, store it, and then return it when requested. In this article, you will learn how the API Server stores data.
+- danielmangum.com: K8s ASA: The Storage Interface The primary function of the Kubernetes API Server is to ingest data, store it, and then return it when requested. In this article, you will learn how the API Server stores data.
Kubernetes Storage Classes
-- kubermatic.com: Keeping the State of Apps 5: Introduction to Storage Classes
+- kubermatic.com: Keeping the State of Apps 5: Introduction to Storage Classes
Kubernetes Volumes
- itnext.io: Kubernetes: PersistentVolume and PersistentVolumeClaim — an overview with examples
-- thenewstack.io: Persistent Volumes: Separating Compute and Storage
-- developers.redhat.com: Persistent storage in action: Understanding Red Hat OpenShift’s persistent volume framework 🌟
+- thenewstack.io: Persistent Volumes: Separating Compute and Storage
+- developers.redhat.com: Persistent storage in action: Understanding Red Hat OpenShift’s persistent volume framework 🌟
- itnext.io: Resizing StatefulSet Persistent Volumes with zero downtime 🌟
- github.com/kubernetes-sigs: Local Persistence Volume Static Provisioner 🌟 The local volume static provisioner manages PersistentVolume lifecycle for pre-allocated disks by detecting and creating PVs for each local disk on the host and cleaning up the disks when released. It does not support dynamic provisioning
- shuanglu1993.medium.com: What happens when volumeManager in the kubelet starts? In this deep-dive, you will learn how the volumeManager sync loop is initialized and starts 3 async calls to maintain the objects ‘desiredStateOfWorld’ and ‘actualStateOfWorld’ and ‘reconcile’ the volumes on the node to the desired state.
-- linkedin.com/pulse: What are Kubernetes Persistent Volumes?
-- blog.newrelic.com: Kubernetes Fundamentals, Part 5: Working with Kubernetes Volumes
+- linkedin.com/pulse: What are Kubernetes Persistent Volumes?
+- blog.newrelic.com: Kubernetes Fundamentals, Part 5: Working with Kubernetes Volumes
- medium.com/codex: Kubernetes Persistent Volume Explained Learn what a Persistent Volume is and how to create a persistent volume from a storage class. Then, learn how to create a persistent volume claim and how to attach the PVC to a Pod:
- How to create a persistent volume from a storage class
- How to create a persistent volume claim
@@ -8180,8 +8180,8 @@
- giffgaff.io: Resizing StatefulSet Persistent Volumes with zero downtime 🌟
- kubermatic.com: Keeping the State of Apps 1: Introduction to Volume and volumeMounts In this blog post, you will get a hands-on practice and learn how to provide persistent storage in the form of different volumes to the Pods.
- blog.cloudnloud.com: Kubernetes Volume
-- adamtheautomator.com: Effortless Storage Management With Kubernetes PVC 🌟 In this tutorial, you’ll learn about Kubernetes PVC and set up a persistent volume for a MySQL database. You’ll also confirm that the data persists even after deleting and recreating the pods.
-- portworx.com: Kubernetes Persistent Volume Tutorial by Portworx
+- adamtheautomator.com: Effortless Storage Management With Kubernetes PVC 🌟 In this tutorial, you’ll learn about Kubernetes PVC and set up a persistent volume for a MySQL database. You’ll also confirm that the data persists even after deleting and recreating the pods.
+- portworx.com: Kubernetes Persistent Volume Tutorial by Portworx
- What is K8s PV?
- How do they differ from k8s volumes?
- Why would you use persistent volumes?
@@ -8209,7 +8209,7 @@
- DoK Community 🌟
- Kubernetes was originally designed to run stateless workloads. Today, it is increasingly used to run databases and other stateful workloads. Yet despite the success of these early adopters, there remain few known good practices for running data on Kubernetes.
- After discussions with thousands of companies and individuals running data workloads on Kubernetes we’ve come to see that there is a need for a sharing of patterns and concerns about how to build and operate data-centric applications on Kubernetes. As a result, the Data on Kubernetes Community (DoKC) was born.
-- dok.community: Data on Kubernetes 2021 🌟 Insights from over 500 executives and technology leaders on how Kubernetes is being used for data and the factors driving further adoption
+- dok.community: Data on Kubernetes 2021 🌟 Insights from over 500 executives and technology leaders on how Kubernetes is being used for data and the factors driving further adoption
ReadWriteMany PersistentVolumeClaims
@@ -8228,55 +8228,55 @@
Rook
-- Rook
+- Rook
- itnext.io: Using Rook On A K3s Cluster
- medium.com/@abdulfayis: storage Orchestration for Kubernetes
Robin
Reduxio
Portworx
StorageOS
OpenEBS
-- OpenEBS extends the benefits of software-defined storage to cloud native through the container attached approach.
-- MayaData Founder of OpenEBS
-- goglides.io: Running OpenEBS in Kubernetes
+- OpenEBS extends the benefits of software-defined storage to cloud native through the container attached approach.
+- MayaData Founder of OpenEBS
+- goglides.io: Running OpenEBS in Kubernetes
- OpenEBS Features and Benefits OpenEBS is cloudnative storage for stateful applications on K8s where “cloud native” means following a loosely coupled architecture. As such the normal benefits to cloud native, loosely coupled architectures apply.
- openebs/dynamic-localpv-provisioner: Dynamic Kubernetes Local Persistent Volumes Dynamic Local Volumes for Kubernetes Stateful workloads.
- openebs/lvm-localpv CSI Driver for dynamic provisioning of Persistent Local Volumes for Kubernetes using LVM.
LightOS
-- LightOS
-- blocksandfiles.com: Lightbits Labs adds Kubernetes table stakes: CSI support
+- LightOS
+- blocksandfiles.com: Lightbits Labs adds Kubernetes table stakes: CSI support
Longhorn
-- Longhorn
-- thenewstack.io: Rancher Donates its ‘Longhorn’ Kubernetes Persistent Storage Software to CNCF. Gluster and Ceph were “designed to be run by some storage admin. In the Kubernetes world, a lot of these things tend to be deployed by DevOps teams, so (the storage layer) needs to be a lot more lightweight and a lot simpler.” — Rancher Labs CEO Sheng Liang.
-- Longhorn Simplifies Distributed Block Storage in Kubernetes
-- containerjournal.com: Rancher Labs Adds Support for Longhorn Storage on Kubernetes Clusters
+- Longhorn
+- thenewstack.io: Rancher Donates its ‘Longhorn’ Kubernetes Persistent Storage Software to CNCF. Gluster and Ceph were “designed to be run by some storage admin. In the Kubernetes world, a lot of these things tend to be deployed by DevOps teams, so (the storage layer) needs to be a lot more lightweight and a lot simpler.” — Rancher Labs CEO Sheng Liang.
+- Longhorn Simplifies Distributed Block Storage in Kubernetes
+- containerjournal.com: Rancher Labs Adds Support for Longhorn Storage on Kubernetes Clusters
- aesher9o1.medium.com: Autoscale large images faster using Longhorn (distributed storage)
- medium.com/@abdelrhmanahmed131: Longhorn — Distributed Block Storage for K8s
IBM Spectrum Storage Suite
-- IBM Spectrum IBM Spectrum Storage software for data-driven architecture. A complete storage software family with AI-infused capability that changes the economics of storage on-prem and in the hybrid multicloud.
+- IBM Spectrum IBM Spectrum Storage software for data-driven architecture. A complete storage software family with AI-infused capability that changes the economics of storage on-prem and in the hybrid multicloud.
- redbooks.ibm.com: IBM Storage for Red Hat OpenShift. IBM block storage & IBM Spectrum Scale
-- searchstorage.techtarget.com: IBM Spectrum
+- searchstorage.techtarget.com: IBM Spectrum
Linbit
-- linbit.com: LINSTOR - kubernetes persistent container storage
+- linbit.com: LINSTOR - kubernetes persistent container storage
Kadalu
@@ -8284,16 +8284,16 @@
IOMesh
-- iomesh.com
-- blocksandfiles.com: Kubernetes storage: SmartX’s IOMesh beats Portworx, Longhorn and OpenEBS
+- iomesh.com
+- blocksandfiles.com: Kubernetes storage: SmartX’s IOMesh beats Portworx, Longhorn and OpenEBS
- iomesh.com: Outperforming Peer Products, IOMesh Takes Cloud Native Storage to the Next Level
MinIO
-- min.io Multi-Cloud Object Storage. MinIO offers high-performance, S3 compatible object storage. Native to Kubernetes, MinIO is the only object storage suite available on every public cloud, every Kubernetes distribution, the private cloud and the
+
- min.io Multi-Cloud Object Storage. MinIO offers high-performance, S3 compatible object storage. Native to Kubernetes, MinIO is the only object storage suite available on every public cloud, every Kubernetes distribution, the private cloud and the
edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
-- blog.min.io: Best Practices for Kubernetes Object Storage
-- blog.min.io: Cloud-Native Object Storage Architectures: Single-Tenant vs Multi-Tenant
+- blog.min.io: Best Practices for Kubernetes Object Storage
+- blog.min.io: Cloud-Native Object Storage Architectures: Single-Tenant vs Multi-Tenant
NetApp Data Store
@@ -8313,11 +8313,11 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
OpenShift Container Storage Operator (OCS)
OCS 3 (OpenShift 3)
-- OpenShift Container Storage based on GlusterFS technology.
+- OpenShift Container Storage based on GlusterFS technology.
- Not OpenShift 4 compliant: Migration tooling will be available to facilitate the move to OCS 4.x (OpenShift Gluster APP Mitration Tool).
OCS 4 (OpenShift 4)
@@ -8329,8 +8329,8 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
- Uses Red Hat Ceph Storage and Noobaa.
-- Red Hat Ceph Storage
-- Noobaa:
+- Red Hat Ceph Storage
+- Noobaa:
- Red Hat Multi Cloud Gateway (AWS, Azure, GCP, etc)
- Asynchronous replication of data between my local ceph and my cloud provider
- Deduplication
@@ -8349,17 +8349,17 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
- github.com/kubernetes-csi Kubernetes specific Container-Storage-Interface (CSI) components
- SMB CSI Driver for Kubernetes This driver allows Kubernetes to access SMB Server on both Linux and Windows nodes.
- github.com/yandex-cloud: CSI for S3 This is a Container Storage Interface (CSI) for S3 (or S3 compatible) storage. This can dynamically allocate buckets and mount them via a fuse mount into any container.
-- sklar.rocks: How the CSI (Container Storage Interface) Works
+- sklar.rocks: How the CSI (Container Storage Interface) Works
Kubestr
-- kubestr.io Kubestr is a collection of tools to discover, validate and evaluate your kubernetes storage options.
+- kubestr.io Kubestr is a collection of tools to discover, validate and evaluate your kubernetes storage options.
- blog.kasten.io: Benchmarking and Evaluating Your Kubernetes Storage with Kubestr
VolSync
- VolSync 🌟 Asynchronous data replication for Kubernetes volumes. VolSync asynchronously replicates Kubernetes persistent volumes between clusters using either rsync or rclone. It also supports creating backups of persistent volumes via restic.
-- next.redhat.com: Introducing VolSync: your data, anywhere VolSync, a new storage-agnostic utility for exporting and importing objects from one Kubernetes namespace to another, even across clusters!
+- next.redhat.com: Introducing VolSync: your data, anywhere VolSync, a new storage-agnostic utility for exporting and importing objects from one Kubernetes namespace to another, even across clusters!
Discoblocks
@@ -8369,7 +8369,7 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
Click to expand!
-
+
Tweets
diff --git a/kubernetes-tools.html b/kubernetes-tools.html
index d4316241..d8f53353 100644
--- a/kubernetes-tools.html
+++ b/kubernetes-tools.html
@@ -9020,21 +9020,21 @@
Introduction
-- collabnix.com: Top 10 Kubernetes Tools You Need for 2021 – Part 1
-- collabnix.github.io: Kubetools - A Curated List of Kubernetes Tools: Kubetools - A Curated List of Kubernetes Tools
+- collabnix.com: Top 10 Kubernetes Tools You Need for 2021 – Part 1
+- collabnix.github.io: Kubetools - A Curated List of Kubernetes Tools: Kubetools - A Curated List of Kubernetes Tools
- cyberithub.com: 70+ Important Kubernetes Related Tools You Should Know About
- itnext.io: Kubernetes GitOps Tools
- itnext.io: Kubernetes Essential Tools: 2021
-- containerjournal.com: 9 Open Source Developer Tools for Kubernetes
+- containerjournal.com: 9 Open Source Developer Tools for Kubernetes
- blog.devgenius.io: 7 Open Source Kubernetes Developer Tools to Follow in 2022
-- dev.to: Top 200 Kubernetes Tools for DevOps Engineer Like You
+- dev.to: Top 200 Kubernetes Tools for DevOps Engineer Like You
- devops.cisel.ch: Kubernetes operational tools you must TRY
-- loft.sh: Kubernetes on Windows: 6 Life-Saving Tools & Tips Kubernetes is primarily a Linux technology, so it’s fairly straightforward to run it on different Linux distros. But what about the developers working on Windows who need to run Kubernetes locally?
-- infoworld.com: 15 tools that make Kubernetes easier Take advantage of these Kubernetes companions to improve monitoring, command-line ops, multi-cluster management, and more.
+- loft.sh: Kubernetes on Windows: 6 Life-Saving Tools & Tips Kubernetes is primarily a Linux technology, so it’s fairly straightforward to run it on different Linux distros. But what about the developers working on Windows who need to run Kubernetes locally?
+- infoworld.com: 15 tools that make Kubernetes easier Take advantage of these Kubernetes companions to improve monitoring, command-line ops, multi-cluster management, and more.
- youtube: 10 Must-Have Kubernetes Tools | DevOps Toolkit
- medium.com/container-talks: 7 Tools To Make Kubernetes Management Easy
- opensource.com: 5 open source tools for developing on the cloud Here are a few IDEs that can improve your programming experience while using multiple cloud service providers.
-- devtron.ai: 7 Tools To Make Kubernetes Management Easy
+- devtron.ai: 7 Tools To Make Kubernetes Management Easy
- developers.redhat.com: 8 open source Kubernetes security tools
- blog.devops.dev: Tools to manage Kubernetes Kubernetes Command Line Tools
- medium.com/@onai.rotich: 4 Tools that Make it Easy to manage your Kubernetes Cluster
@@ -9046,7 +9046,7 @@
- mirrord - to intercept traffic from k8s to the local app instance
-- coruzant.com/appdev: Kubernetes Management: Tools and Best Practices
+- coruzant.com/appdev: Kubernetes Management: Tools and Best Practices
- dev.to/cyclops-ui: Five tools to make your K8s experience more enjoyable
K8s Tools
@@ -9057,67 +9057,67 @@
- Kubeterm: Graphical Management Tool for Kubernetes - Kubeterm is a desktop and mobile graphical management tool for Kubernetes clusters. It offers clear visibility, easy resource and application management, and troubleshooting capabilities without requiring any installation within the cluster. It supports automatic kubeconfig loading and integrates with cloud provider accounts (GCP, Azure, AWS) for cluster import.
- Nelm: A Helm Alternative for Kubernetes Deployments - (Related to helm topic)
- SQL Studio: A Unified SQL Database Explorer - SQL Studio is a command-line tool that acts as a universal explorer for various SQL databases, including SQLite, libSQL, PostgreSQL, MySQL/MariaDB, ClickHouse, DuckDB, and Microsoft SQL Server. It simplifies database interaction by providing a single interface for querying and managing data across different database systems.
-- Ephemeral Values in Terraform - (Related to terraform topic)
+- Ephemeral Values in Terraform - (Related to terraform topic)
- QuickRef.ME - Quick Reference Cheat Sheets - (Related to cheatsheets topic)
- FreeLens - FreeLens is a free IDE (Integrated Development Environment) specifically designed for Kubernetes. It provides a user-friendly interface and tools to manage and interact with Kubernetes clusters.
- OpenOps: No-Code FinOps Automation Platform with AI - (Related to finops topic)
- DockSTARTer - (Related to docker topic)
- TerraSchema: Generate JSON Schema from Terraform Configurations - (Related to terraform topic)
-- NFTables mode for kube-proxy in Kubernetes - (Related to kubernetes-networking topic)
+- NFTables mode for kube-proxy in Kubernetes - (Related to kubernetes-networking topic)
- KubeUI: A Desktop Kubernetes Client - KubeUI is a desktop application designed to simplify day-to-day Kubernetes cluster management. It offers features for browsing Kubernetes resources and editing YAML manifests directly from a desktop environment.
CI/CD Tools
- Pulumi: Infrastructure as Code in Any Programming Language - (Related to iac topic)
-- PMEase QuickBuild - (Related to cicd topic)
+- PMEase QuickBuild - (Related to cicd topic)
- AWS EKS Argo CD Terraform Component - (Related to gitops topic)
- FossFLOW - (Related to cicd topic)
-- Canine: A Developer-friendly PaaS for Kubernetes 🌟 - Canine is an open-source deployment platform designed to simplify the deployment and management of applications on Kubernetes. It offers a Heroku-like experience, enabling developers to push code and have Canine manage the build, deployment, and entire application lifecycle. Key features include GitHub integration, one-click deployments and rollbacks, automatic SSL certificate management via Let’s Encrypt, and a developer-friendly CLI. It aims to provide cost-effective hosting by making cheaper cloud providers as easy to use as more expensive ones.
+- Canine: A Developer-friendly PaaS for Kubernetes 🌟 - Canine is an open-source deployment platform designed to simplify the deployment and management of applications on Kubernetes. It offers a Heroku-like experience, enabling developers to push code and have Canine manage the build, deployment, and entire application lifecycle. Key features include GitHub integration, one-click deployments and rollbacks, automatic SSL certificate management via Let’s Encrypt, and a developer-friendly CLI. It aims to provide cost-effective hosting by making cheaper cloud providers as easy to use as more expensive ones.
- Platform Engineering Guide - 5 Key Use Cases of Internal Developer Platforms - (Related to devops topic)
-- Warp: The Agentic Development Environment 🌟 - Warp is an open-source agentic development environment that allows developers to build software with AI agents, locally and in the cloud. It offers a modern terminal for agentic coding and an orchestration platform for cloud agents. It aims to accelerate development workflows by integrating AI capabilities.
-- Enhanced Local IDE Experience for AWS Step Functions - (Related to aws topic)
-- Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - This Cloud Posse component provisions ‘RunsOn’ for GitHub Actions self-hosted runners. It involves deploying a CloudFormation template to set up the necessary infrastructure and then installing the RunsOn GitHub App within your organization to enable runner registration. The documentation details compatibility requirements, usage examples with Terraform, and configuration parameters such as CPU, memory, and encryption settings for EBS volumes.
+- Warp: The Agentic Development Environment 🌟 - Warp is an open-source agentic development environment that allows developers to build software with AI agents, locally and in the cloud. It offers a modern terminal for agentic coding and an orchestration platform for cloud agents. It aims to accelerate development workflows by integrating AI capabilities.
+- Enhanced Local IDE Experience for AWS Step Functions - (Related to aws topic)
+- Cloud Posse runs-on: GitHub Actions Self-Hosted Runners - This Cloud Posse component provisions ‘RunsOn’ for GitHub Actions self-hosted runners. It involves deploying a CloudFormation template to set up the necessary infrastructure and then installing the RunsOn GitHub App within your organization to enable runner registration. The documentation details compatibility requirements, usage examples with Terraform, and configuration parameters such as CPU, memory, and encryption settings for EBS volumes.
- Terraform Module Releaser GitHub Action - (Related to iac topic)
- Gama: Terminal UI for GitHub Actions - (Related to cicd topic)
- The Maester - Terraform Module - (Related to terraform topic)
-- Sharing a NVIDIA GPU Between Pods in Kubernetes 🌟 - This article explains how to implement sharing of NVIDIA GPUs between multiple pods in a Kubernetes cluster. It highlights the high cost of GPUs and the benefits of sharing them to reduce expenses and increase accessibility for graphical-based workloads. The post also touches upon the role of the NVIDIA GPU Operator in facilitating hardware-software communication and extending Kubernetes capabilities.
+- Sharing a NVIDIA GPU Between Pods in Kubernetes 🌟 - This article explains how to implement sharing of NVIDIA GPUs between multiple pods in a Kubernetes cluster. It highlights the high cost of GPUs and the benefits of sharing them to reduce expenses and increase accessibility for graphical-based workloads. The post also touches upon the role of the NVIDIA GPU Operator in facilitating hardware-software communication and extending Kubernetes capabilities.
- bul: Interactive TUI for Exploring Kubernetes Container Logs - bul is a Work In Progress (WIP) tool that provides an interactive Text User Interface (TUI) for exploring container logs within Kubernetes. It offers features such as filtering streaming logs by keywords and a ‘Digger mode’ to query the latest N logs. The project was archived on August 13, 2024, making it read-only.
-
Web Terminal Operator: Tips y Trucos - Explora consejos y trucos prácticos para utilizar el operador de terminal web en entornos Kubernetes.
-
-
downloadkubernetes.com: Download Kubernetes 🌟 An easier way to get the binaries you need
+downloadkubernetes.com: Download Kubernetes 🌟 An easier way to get the binaries you need
- ramitsurana/awesome-kubernetes: Tools 🌟
-- VMware octant A web-based, highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
-- octant.dev Visualize your Kubernetes workloads. Octant is an open source developer-centric web interface for Kubernetes that lets you inspect a Kubernetes cluster and its applications.
+- VMware octant A web-based, highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
+- octant.dev Visualize your Kubernetes workloads. Octant is an open source developer-centric web interface for Kubernetes that lets you inspect a Kubernetes cluster and its applications.
- KSS - Kubernetes pod status on steroid
- kubectl-tree kubectl plugin to browse Kubernetes object hierarchies as a tree
-- The Golden Kubernetes Tooling and Helpers list
-- kubech (kubectl change) Set kubectl contexts/namespaces per shell/terminal to manage multi Kubernetes cluster at the same time.
+- The Golden Kubernetes Tooling and Helpers list
+- kubech (kubectl change) Set kubectl contexts/namespaces per shell/terminal to manage multi Kubernetes cluster at the same time.
- Kubecle is a web ui running locally that provides useful information about your kubernetes clusters. It is an alternative to Kubernetes Dashboard. Because it runs locally, you can access any kubernetes clusters you have access to
- Permission Manager 🌟 is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW. Permission Manager is an application that enables a super-easy and user-friendly RBAC management for Kubernetes. With Permission Manager, you can create users, assign namespaces/permissions, and distribute Kubeconfig YAML files via a nice & easy web UI.
-- cloudnatively.com: Kubernetes client tools overview
+- cloudnatively.com: Kubernetes client tools overview
- kubectx + kubens: : Power tools for kubectl🌟🌟 Faster way to switch between clusters and namespaces in kubectl
- go-kubectx 5x-10x faster alternative to kubectx. Uses client-go.
-- kubevious: application centric Kubernetes UI 🌟 is open-source software that provides a usable and highly graphical interface for Kubernetes. Kubevious renders all configurations relevant to the application in one place.
+- kubevious: application centric Kubernetes UI 🌟 is open-source software that provides a usable and highly graphical interface for Kubernetes. Kubevious renders all configurations relevant to the application in one place.
- KubeStellar Console 🌟 Open source AI-powered multi-cluster Kubernetes dashboard with real-time observability, AI-guided operations, and 20+ CNCF integrations. CNCF Sandbox project.
-- Kubevious SaaS: portal.kubevious.io
+- Kubevious SaaS: portal.kubevious.io
- Kubevious SaaS Beta is Live!
-- kubevious.io: Built-in Validators Kubevious comes with 32 build-in validators to detect misconfigurations and violations to Kubernetes and Cloud-Native best practices.
+- kubevious.io: Built-in Validators Kubevious comes with 32 build-in validators to detect misconfigurations and violations to Kubernetes and Cloud-Native best practices.
- learnitguide.net: Kubevious - A Powerful Kubernetes Dashboard
-- Guard is a Kubernetes Webhook Authentication server. Using guard, you can log into your Kubernetes cluster using various auth providers. Guard also configures groups of authenticated user appropriately.
+- Guard is a Kubernetes Webhook Authentication server. Using guard, you can log into your Kubernetes cluster using various auth providers. Guard also configures groups of authenticated user appropriately.
- itnext.io: arkade by example — Kubernetes apps, the easy way 🌟
-- Kubei is a flexible Kubernetes runtime scanner, scanning images of worker and Kubernetes nodes providing accurate vulnerabilities assessment.
+- Kubei is a flexible Kubernetes runtime scanner, scanning images of worker and Kubernetes nodes providing accurate vulnerabilities assessment.
- Tubectl: a kubectl alternative which adds a bit of magic to your everyday kubectl routines by reducing the complexity of working with contexts, namespaces and intelligent matching resources.
- Kpt: Packaging up your Kubernetes configuration with git and YAML since 2014 (Google)
- kubernetes-common-services These services help make it easier to manage your applications environment in Kubernetes
- k8s-job-notify Kubernetes Job/CronJob Notifier. This tool sends an alert to slack whenever there is a Kubernetes cronJob/Job failure/success.
-- kube-opex-analytics 🌟 Kubernetes Cost Allocation and Capacity Planning Analytics Tool. Built-in hourly, daily, monthly reports - Prometheus exporter - Grafana dashboard.
+- kube-opex-analytics 🌟 Kubernetes Cost Allocation and Capacity Planning Analytics Tool. Built-in hourly, daily, monthly reports - Prometheus exporter - Grafana dashboard.
- Run any kubelet API call
- Scan for nodes with opened kubelet API
- Scan for containers with RCE
@@ -9127,31 +9127,31 @@
- K8bit — the tiny Kubernetes dashboard 🌟 K8bit is a tiny dashboard that is meant to demonstrate how to use the Kubernetes API to watch for changes.
-- KUbernetes Test TooL (kuttl) 🌟
+- KUbernetes Test TooL (kuttl) 🌟
-- Portfall: A desktop k8s port-forwarding portal for easy access to all your cluster UIs 🌟
+- Portfall: A desktop k8s port-forwarding portal for easy access to all your cluster UIs 🌟
- k8s-dt-node-labeller is a Kubernetes controller for labelling a node with devicetree properties (devicetree is a data structure for describing hardware).
-- kubedev 🌟 is a Kubernetes Dashboard that helps developers in their everyday usage
+- kubedev 🌟 is a Kubernetes Dashboard that helps developers in their everyday usage
- Kubectl SSH Proxy 🌟 Kubectl plugin to launch a ssh socks proxy and use it. This plugin aims to make your life easier when using kubectl a cluster that’s behind a SSH bastion.
- kubectl-images Show container images used in the cluster. Kubectl-images is a kubectl plugin that shows the container images used in the cluster. It first calls kubectl get pods to retrieve pods details and filters out the container image information of each pod then prints out the final result in a table view.
-- Access Pod Online using Podtnl A Powerful CLI that makes your pod available to online without exposing a k8 service.
-- kiosk: Multi-Tenancy Extension For Kubernetes - Secure Cluster Sharing & Self-Service Namespace Provisioning 🌟 Kubernetes is designed as a single-tenant platform, which makes it hard for cluster admins to host multiple tenants in a single cluster. Kiosk extends Kubernetes for multi-tenancy. The core idea is to use Kubernetes namespaces as isolated workspaces.
-- asdf-kubectl kubectl plugin for asdf version manager. asdf-vm is a CLI tool that can manage multiple language runtime versions on a per-project basis. It is like gvm, nvm, rbenv & pyenv (and more) all in one! Simply install your language’s plugin!
+- Access Pod Online using Podtnl A Powerful CLI that makes your pod available to online without exposing a k8 service.
+- kiosk: Multi-Tenancy Extension For Kubernetes - Secure Cluster Sharing & Self-Service Namespace Provisioning 🌟 Kubernetes is designed as a single-tenant platform, which makes it hard for cluster admins to host multiple tenants in a single cluster. Kiosk extends Kubernetes for multi-tenancy. The core idea is to use Kubernetes namespaces as isolated workspaces.
+- asdf-kubectl kubectl plugin for asdf version manager. asdf-vm is a CLI tool that can manage multiple language runtime versions on a per-project basis. It is like gvm, nvm, rbenv & pyenv (and more) all in one! Simply install your language’s plugin!
- k8s Spot Rescheduler is a tool that tries to reduce load on a set of Kubernetes nodes. It was designed with the purpose of moving Pods scheduled on AWS on-demand instances to AWS spot instances to allow the on-demand instances to be safely scaled down (By the Cluster Autoscaler).
- kube-spot-termination-notice-handler is a Kubernetes DaemonSet designed to gracefully delete pods 2 minutes before an EC2 Spot Instance is terminated.
- kmoncon Monitoring connectivity between your kubernetes nodes.
-- Tesoro Kapitan Secrets Controller for Kubernetes. Tesoro is Kapitan Admission Controller Webhook. Tesoro allows you to seamleslsly apply Kapitan secret refs in compiled Kubernetes manifests. As it runs in the cluster, it will be able to reveal embedded kapitan secret refs in manifests when applied.
+- Tesoro Kapitan Secrets Controller for Kubernetes. Tesoro is Kapitan Admission Controller Webhook. Tesoro allows you to seamleslsly apply Kapitan secret refs in compiled Kubernetes manifests. As it runs in the cluster, it will be able to reveal embedded kapitan secret refs in manifests when applied.
- DAST operator Dynamic application security testing (DAST) is a Kubernetes operator that leverages OWASP ZAP to make automated basic web service security testing.
- Teleskope is a Kubernetes dashboard designed to give your devs and product managers an inside view of the cluster.
-- Introducing cdk8s+: Intent-driven APIs for Kubernetes objects Everyone hates yaml. Take that 75 lines of yaml and turn it into 45 lines of testable javascript with cdk8s+
+- Introducing cdk8s+: Intent-driven APIs for Kubernetes objects Everyone hates yaml. Take that 75 lines of yaml and turn it into 45 lines of testable javascript with cdk8s+
@@ -9160,7 +9160,7 @@
- Beetle Kubernetes multi-cluster deployment automation service.
- vault-controller A K8s controller to manage Hashicorp Vault configuration using CRDs.
- k8s-crash-informer is a Kubernetes controller that informs a Mattermost or Slack channel if an annotated deployment goes into crash loop.
-- Azure Arc enabled Kubernetes allows you to connect and manage external Kubernetes clusters in Azure
+- Azure Arc enabled Kubernetes allows you to connect and manage external Kubernetes clusters in Azure
- Kip, the Kubernetes Cloud Instance Provider Kip is a Virtual Kubelet provider that allows a Kubernetes cluster to transparently launch pods onto their own cloud instances. The kip pod is run on a cluster and will create a virtual Kubernetes node in the cluster.
- Kubeletctl is a command line tool that implement kubelet’s API 🌟
- k8s-node-label-monitor: Kubernetes Node Label Monitor provides a custom Kubernetes controller for monitoring and notifying changes in the label states of Kubernetes nodes (labels added, deleted, or updated), and can be run either node-local or cluster-wide
@@ -9168,11 +9168,11 @@
- Pluto is a cli tool to help discover deprecated apiVersions in Kubernetes 🌟 Find Kubernetes resources that have been deprecated
- Switchboard is a tool that manages DNS zones and their A/CNAME records for arbitrary backends. It runs as Kubernetes controller and watches for custom resources DNSZone and DNSRecord.
- Kubernetes Deployment Builder 🌟🌟
-- ktx 🌟 Managing kubeconfig files can become tedious when you have multiple clusters and contexts to switch between. ktx aims to reduce friction caused by switching between various configurations.
+- ktx 🌟 Managing kubeconfig files can become tedious when you have multiple clusters and contexts to switch between. ktx aims to reduce friction caused by switching between various configurations.
- k8s-alert is a simple and lightweight alerting tool for Kubernetes.
- Arktos is an open source cluster management system designed for large scale clouds. It is evolved from the open source Kubernetes v1.15 codebase with some fundamental improvements.
-- kube-exec 🌟 is a library similar to os/exec that allows you to run commands in a Kubernetes pod, as if that command was executed locally. It is inspired from go-dexec, which does the same thing, but for a Docker engine.
-- identity-server Identity Server implements a Kubernetes “whoami” service.
+- kube-exec 🌟 is a library similar to os/exec that allows you to run commands in a Kubernetes pod, as if that command was executed locally. It is inspired from go-dexec, which does the same thing, but for a Docker engine.
+- identity-server Identity Server implements a Kubernetes “whoami” service.
- The Kubernetes Goat is a project designed to be intentionally vulnerable cluster environment to learn and practice Kubernetes security.
- kubefs lets you mount kubernetes’s metadata object store as a file system
- pangolin 🌟 is an enhanced Horizontal Pod Autoscaler for Kubernetes.
@@ -9190,9 +9190,9 @@
- Authelia 🌟 is a Single Sign-On and Multi-Factor portal for web apps that can be installed in Kubernetes and can integrate with your ingress controller
- k8sdeploy is a go based tool, written with the goal of creating a cli that utilizes helm and kubernetes client libraries to deploy to multiple namespaces at once.
- node-policy-webhook is a Kubernetes webhook designed to help you handle tolerations, nodeSelector and nodeAffinity.
-- ipvs-node-controller is the kubernetes controller that solves External-IP (Load Balancer IP) issue with IPVS proxy mode.
+- ipvs-node-controller is the kubernetes controller that solves External-IP (Load Balancer IP) issue with IPVS proxy mode.
- kubeonoff A simple web UI for managing Kubernetes deployments. Kubeonoff is a small web UI that allows to quickly stop/start/restart pods. Basically it’s for non-developers to manage k8s objects per namespace.
-- Maistra 🌟 is an opinionated distribution of Istio designed to work with Openshift. It combines Kiali, Jaeger, and Prometheus into a platform managed according to the OperatorHub lifecycle.
+- Maistra 🌟 is an opinionated distribution of Istio designed to work with Openshift. It combines Kiali, Jaeger, and Prometheus into a platform managed according to the OperatorHub lifecycle.
- custom-pod-autoscaler A Custom Pod Autoscaler is a Kubernetes autoscaler that is customised and user created. The Custom Pod Autoscaler framework allows easier and faster development of Kubernetes autoscalers.
- Kubevol 🌟 allows you to audit all your Kubernetes pods for an attached volume or see all the volumes attached to each pod by a specific type (eg: ConfigMap, Secret).
- kubectl-fuzzy 🌟 uses fzf(1)-like fuzzy-finder to do partial or fuzzy search of Kubernetes resources. Instead of specifying full resource names to kubectl commands, you can choose them from an interactive list that you can filter by typing a few characters.
@@ -9201,8 +9201,8 @@
- hackernoon.com: How to Generate Kubernetes Manifests With a Single Command (kompose)
-- kalm.dev 🌟 Easily deploy and manage applications on Kubernetes. Get what you want out of Kubernetes without having to write and maintain a ton of custom tooling. Deploy apps, handle requests, and hook up CI/CD, all through an intuitive web interface.
-- Kev Develop Kubernetes apps iteratively with Docker-Compose. Kev helps developers port and iterate Docker Compose apps onto Kubernetes. It understands the Docker Compose application topology and prepares it for deployment in (multiple) target environments, with minimal user input. We leverage the Docker Compose specification and allow for target-specific configurations to be applied to each component of the application stack, simply.
+- kalm.dev 🌟 Easily deploy and manage applications on Kubernetes. Get what you want out of Kubernetes without having to write and maintain a ton of custom tooling. Deploy apps, handle requests, and hook up CI/CD, all through an intuitive web interface.
+- Kev Develop Kubernetes apps iteratively with Docker-Compose. Kev helps developers port and iterate Docker Compose apps onto Kubernetes. It understands the Docker Compose application topology and prepares it for deployment in (multiple) target environments, with minimal user input. We leverage the Docker Compose specification and allow for target-specific configurations to be applied to each component of the application stack, simply.
- Synator Kubernetes Secret and ConfigMap synchronizer 🌟 Synator synchronize your Secrets and ConfigMaps with your desired namespaces
- kubes 🌟 is a Kubernetes Deployment Tool. It builds the docker image, creates the Kubernetes YAML, and runs kubectl apply.
- Kubernetes DaemonSet that enables a direct shell on each Node using SSH to localhost Learn how you can use a DaemonSet to expose an SSH shell on each node of your cluster (even if you don’t have SSH installed). I run several K8S cluster on EKS and by default do not setup inbound SSH to the nodes. Sometimes I need to get into each node to check things or run a one-off tool. Rather than update my terraform, rebuild the launch templates and redeploy brand new nodes, I decided to use kubernetes to access each node directly.
@@ -9210,27 +9210,27 @@
- kubeswitch: Kubernetes Version Switcher 🌟 Easily switch kubectl binary versions.
- Kubeswitch (for operators) 🌟 The kubectx for operators. kubeswitch (lazy: switch) takes Kubeconfig context switching to the next level, catering to operators of large scale Kubernetes installations. Designed as a drop-in replacement for kubectx.
- kubectl build (formerly known as kubectl-kaniko) Kubectl build mimics the kaniko executor, but performs building on your Kubernetes cluster side. This allows you to simply build your local dockerfiles remotely without leaving your cozy environment.
-- Kubei 🌟 is a vulnerabilities scanning tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters. Kubei scans all images used in a Kubernetes cluster including images of application pods and system pods
+- Kubei 🌟 is a vulnerabilities scanning tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters. Kubei scans all images used in a Kubernetes cluster including images of application pods and system pods
- Shell-operator is a tool for running event-driven scripts in a Kubernetes cluster. Shell-operator provides an integration layer between Kubernetes cluster events and shell scripts.
- ecrcp aims to mimic cp command in Linux systems as closely as possible in its implementation. Consider ecrcp to be the cp equivalent to copy container images from docker hub to ECR.
-- Checkov 🌟 is a static code analysis tool for infrastructure-as-code. It scans cloud infrastructure provisioned using Terraform, Cloudformation, Kubernetes, Serverless or ARM Templates and detects security and compliance misconfigurations.
-- Cluster Cloner 🌟 Reads the Kubernetes clusters in one location (optionally filtering by labels) and clones them into another (or just outputs JSON as a dry run), to/from AWS, GCP, and Azure.
+- Checkov 🌟 is a static code analysis tool for infrastructure-as-code. It scans cloud infrastructure provisioned using Terraform, Cloudformation, Kubernetes, Serverless or ARM Templates and detects security and compliance misconfigurations.
+- Cluster Cloner 🌟 Reads the Kubernetes clusters in one location (optionally filtering by labels) and clones them into another (or just outputs JSON as a dry run), to/from AWS, GCP, and Azure.
- kubectl-eksporter 🌟 A simple Ruby-script to export k8s resources, and removes a pre-defined set of fields for later import.
- kubectl-neat 🌟 Remove clutter from Kubernetes manifests to make them more readable.
- medium: 4 Simple Kubernetes Terminal Customizations to Boost Your Productivity
- Move2Kube 🌟 Move2Kube is a command-line tool that accelerates the process of re-platforming to Kubernetes/Openshift. It does so by analysing the environment and source artifacts, and asking guidance from the user when required. This tool that can help users migrate from Cloud Foundry and Docker Swarm to Kubernetes. https://move2kube.konveyor.io
- skopeo 🌟 Use skopeo to copy images between registries
- junit5-kubernetes aims at using a kubernetes pod directly form your junit5 test classes.
-- mbuffett.com: Replacing ngrok with ktunnel
+- mbuffett.com: Replacing ngrok with ktunnel
- seaworthy: A CLI to verify #Kubernetes resource health !! 🌟 Post-apply check to verify your K8s resources are Seaworthy
-- kVDI A Kubernetes-native Virtual Desktop Infrastructure.
+- kVDI A Kubernetes-native Virtual Desktop Infrastructure.
- kcg 🌟 is a command line tool that lets you create kubeconfig files. The user can interactively choose a namespace and service account and generate a config file with token authentication that has same RBAC permissions assigned to chosen service account.
- Compass 🌟 Quickly Pinpoint Errors in your Kubernetes Deployment.
- Gitkube 🌟 is a tool for building and deploying Docker images on Kubernetes using git push. After a simple initial setup, users can simply keep git push-ing their repos to build and deploy to Kubernetes automatically.
- vesion-checker is a Kubernetes utility for observing the current versions of images running in the cluster, as well as the latest available upstream. These checks get exposed as Prometheus metrics to be viewed on a dashboard, or soft alert cluster operators.
- Descheduler for Kubernetes 🌟 -> wecloudpro.com: Balance your Kubernetes cluster
- kubediff 🌟 is a tool for Kubernetes to show you the differences between your running configuration and your version controlled configuration.
-- awslabs/karpenter Karpenter is a metrics-driven autoscaler built for Kubernetes and can run in any Kubernetes cluster anywhere. It’s performant, extensible, and can autoscale anything that implements the Kubernetes scale subresource.
+- awslabs/karpenter Karpenter is a metrics-driven autoscaler built for Kubernetes and can run in any Kubernetes cluster anywhere. It’s performant, extensible, and can autoscale anything that implements the Kubernetes scale subresource.
- ekglue - Envoy/Kubernetes glue ekglue is a projects that facilitates connecting Kubernetes and Envoy, allowing Envoy to read Kubernetes services and endpoints as clusters (via CDS) and endpoints (via EDS).
- salesforce/Craft CRAFT helps you to create Kubernetes Operators in a robust and generic way for any resource, letting developers focus on CRUD operations of resource management in a Dockerfile.
- hyscale 🌟 HyScale takes a declarative definition of your service config and it generates Dockerfile, Container Image, Kubernetes Manifests (YAMLs) and deploys to any Kubernetes Cluster.
@@ -9240,15 +9240,15 @@
- kubeshell is a command line tool to interactively shell in to (and out of) kubernetes pods.
- k8s-harness 🌟 lets you create a disposable Kubernetes cluster with vagrant and Ansible to test your app in a prod-like environment.
- Secret backup operator is an operator designed to backup secrets on a Kubernetes cluster. Backup happens when secrets are modified.
-- DevNation: 10 awesome kubernetes tools every user should know
+- DevNation: 10 awesome kubernetes tools every user should know
- kube-fledged is a kubernetes add-on for creating and managing a cache of container images directly on the worker nodes of a kubernetes cluster. It allows a user to define a list of images and onto which worker nodes those images should be cached (i.e. pre-pulled). As a result, application pods start almost instantly, since the images need not be pulled from the registry.
- Tagger keeps references to externally hosted Docker images internally in a Kubernetes cluster by mapping their tags (such as latest) into their references by hash
- helm-ecr 🌟 is a Helm plugin that supports installing Charts from AWS ECR.
-- PipeCD is a continuous delivery system for declarative Kubernetes, Serverless, and Infrastructure applications.
-- kubecolor 🌟 colorises your kubectl output
+- PipeCD is a continuous delivery system for declarative Kubernetes, Serverless, and Infrastructure applications.
+- kubecolor 🌟 colorises your kubectl output
@@ -9256,15 +9256,15 @@
- kfilt is a tool that lets you filter specific resources from a stream of Kubernetes YAML manifests. It can read manifests from a file, URL, or from stdin.
- k8s-mirror: Creates a local mirror of a kubernetes cluster in a docker container to support offline reviewing 🌟
- kube-secret-syncer 🌟 is a Kubernetes operator developed using the Kubebuilder framework that keeps the values of Kubernetes Secrets synchronised to secrets in AWS Secrets Manager.
-- contentful.com: Open-sourcing kube-secret-syncer: A Kubernetes operator to sync secrets from AWS Secrets Manager Kube-secret-syncer is a Kubernetes operator developed using the Kubebuilder framework that keeps the values of Kubernetes Secrets synchronised to secrets in AWS Secrets Manager.
+- contentful.com: Open-sourcing kube-secret-syncer: A Kubernetes operator to sync secrets from AWS Secrets Manager Kube-secret-syncer is a Kubernetes operator developed using the Kubebuilder framework that keeps the values of Kubernetes Secrets synchronised to secrets in AWS Secrets Manager.
- kapp 🌟 is a CLI that calculates changes between your configuration and live cluster state and applies changes you approve.
-- thecloudblog.net: Managing Applications in Kubernetes with the Carvel Kapp Controller kapp enables users to group a set of resources (resources with the same label) as an application. In this tutorial, you will learn how to deploy a front-end and backend app with Redis as a single unit with kapp.
+- thecloudblog.net: Managing Applications in Kubernetes with the Carvel Kapp Controller kapp enables users to group a set of resources (resources with the same label) as an application. In this tutorial, you will learn how to deploy a front-end and backend app with Redis as a single unit with kapp.
-- garden.io Break down the barriers between development, testing, and CI. Use the same workflows and production-like Kubernetes environments at every step of the process
-- thenewstack.io: Garden: The Configure-Once Kubernetes Platform for Seamless Dev/Prod Integration
+- garden.io Break down the barriers between development, testing, and CI. Use the same workflows and production-like Kubernetes environments at every step of the process
- pvc-autoresizer resizes PersistentVolumeClaims (PVCs) when the free amount of storage is below the threshold. It queries the volume usage metrics from Prometheus that collects metrics from kubelet.
@@ -9282,56 +9282,56 @@
- Kubernetes Janitor cleans up (deletes) Kubernetes resources on a configured TTL (time to live) or a configured expiry date (absolute timestamp).
-- kube-batch is a batch scheduler for Kubernetes, providing mechanisms for applications which would like to run batch jobs leveraging Kubernetes. A batch scheduler of kubernetes for high performance workload, e.g. AI/ML, BigData, HPC
+- kube-batch is a batch scheduler for Kubernetes, providing mechanisms for applications which would like to run batch jobs leveraging Kubernetes. A batch scheduler of kubernetes for high performance workload, e.g. AI/ML, BigData, HPC
- slipway: A Kubernetes controller to automate gitops provisioning
- github.com: dnsconfig-injector - Mutating Admission Webhook for dnsconfig pod injection
- kubectl-view-webhook 🌟 Visualize your webhook configurations in Kubernetes.
- ContainerSSH: Launch containers on demand 🌟🌟 ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users required.
-- reconshell.com: Kubei – Kubernetes Runtime Vulnerabilities Scanner 🌟
-- openshift: Introducing kube-burner, A tool to Burn Down Kubernetes and OpenShift 🌟 Kube-burner is a tool designed to stress different OpenShift components basically by coordinating the creation and deletion of k8s resources. Along this blog series we’ll talk about how to use it in OpenShift 4.
+- reconshell.com: Kubei – Kubernetes Runtime Vulnerabilities Scanner 🌟
+- openshift: Introducing kube-burner, A tool to Burn Down Kubernetes and OpenShift 🌟 Kube-burner is a tool designed to stress different OpenShift components basically by coordinating the creation and deletion of k8s resources. Along this blog series we’ll talk about how to use it in OpenShift 4.
- kube-ebpf-exporter 🌟 Prometheus exporter for custom eBPF metrics.
- qontract qontract (Queryable cONTRACT) is a collection of tools used to SREs to expose available managed services to application developer teams.
- sheaf Manages bundles of Kubernetes components. sheaf is a tool that can create a bundle of Kubernetes components. It can generate an archive from the bundle that can be distributed for use in Kubernetes clusters. The initial idea was inspired by CNAB. It answers the question: how can I distribute Kubernetes manifests with their associated images?
-- cnab.io: CNABs facilitate the bundling, installing and managing of container-native apps — and their coupled services
-- tremolosecurity.com: Secure Access to Kubernetes From Your Pipeline
+- cnab.io: CNABs facilitate the bundling, installing and managing of container-native apps — and their coupled services
+- tremolosecurity.com: Secure Access to Kubernetes From Your Pipeline
- openpitrix 🌟 Application Management Platform on Multi-Cloud Environment. OpenPitrix is a web-based open-source system to package, deploy and manage different types of applications including Kubernetes application, microservice application and serverless applications into multiple cloud environment such as AWS, Azure, Kubernetes, QingCloud, OpenStack, VMWare etc.
-- kube-burner 🌟 Kube-burner is a tool aimed at stressing kubernetes clusters.
+- kube-burner 🌟 Kube-burner is a tool aimed at stressing kubernetes clusters.
- gimletd - the GitOps release manager GimletD acts as a release manager and detaches the release workflow from CI. By doing so, it unlocks the possibility of advanced release logics and flexibility to refactor workflows.
- github.com/cloudflare/lockbox Offline encryption of Kubernetes Secrets. Lockbox is a secure way to store Kubernetes Secrets offline. Secrets are asymmetrically encrypted, and can only be decrypted by the Lockbox Kubernetes controller. A companion CLI tool, locket, makes encrypting secrets a one-step process.
- Suspicious pods 🌟 Prints a list of k8s pods that might not be working correctly
-- Armada A multi-cluster batch queuing system for high-throughput workloads on Kubernetes. Armada is an application to achieve high throughput of run-to-completion jobs on multiple Kubernetes clusters. It stores queues for users/projects with pod specifications and creates these pods once there is available resource in one of the connected Kubernetes clusters.
-- Ko: Easy Go Containers 🌟 Build and deploy Go applications on Kubernetes
-- kubestr 🌟 Explore your Kubernetes storage options. Kubestr is a collection of tools to discover, validate and evaluate your kubernetes storage options.
-- KubeEye: An Automatic Diagnostic Tool that Provides a Holistic View of Your Kubernetes Cluster 🌟
-- k8gb 🌟 A cloud native Kubernetes Global Balancer k8gb.io
-- k8s-image-swapper 🌟 Mirror images into your own registry and swap image references automatically. estahn.github.io/k8s-image-swapper
+- Armada A multi-cluster batch queuing system for high-throughput workloads on Kubernetes. Armada is an application to achieve high throughput of run-to-completion jobs on multiple Kubernetes clusters. It stores queues for users/projects with pod specifications and creates these pods once there is available resource in one of the connected Kubernetes clusters.
+- Ko: Easy Go Containers 🌟 Build and deploy Go applications on Kubernetes
+- kubestr 🌟 Explore your Kubernetes storage options. Kubestr is a collection of tools to discover, validate and evaluate your kubernetes storage options.
+- KubeEye: An Automatic Diagnostic Tool that Provides a Holistic View of Your Kubernetes Cluster 🌟
+- k8gb 🌟 A cloud native Kubernetes Global Balancer k8gb.io
+- k8s-image-swapper 🌟 Mirror images into your own registry and swap image references automatically. estahn.github.io/k8s-image-swapper
- RBACSync 🌟 Automatically sync groups into Kubernetes RBAC. RBACSync provides a Kubernetes controller to synchronize RoleBindings and ClusterRoleBindings, used in Kubernetes RBAC, from group membership sources using consolidated configuration objects.
- Saffire a controller to override image sources in the event that an image cannot be pulled. The intent of saffire is to provide operators with a method of automatically switching image repositories when imagePullErrors occur.
-- Cluster API Provider for Managed Bare Metal Hardware This repository contains a Machine actuator implementation for the Kubernetes Cluster API for managing bare metal hardware - metal3.io: Bare metal host provisioning for kubernetes
+- Cluster API Provider for Managed Bare Metal Hardware This repository contains a Machine actuator implementation for the Kubernetes Cluster API for managing bare metal hardware - metal3.io: Bare metal host provisioning for kubernetes
- enterprisersproject.com: Kubernetes: 6 open source tools to put your cluster to the test The Kubernetes ecosystem includes an ever-growing number of tools and services you can plug in: Let’s look at six useful tools for putting your Kubernetes cluster and applications to the test.
- kubectl-node-restart 🌟 Krew plugin to restart Kubernetes Nodes sequentially and gracefully
- k8s-platform-lcm: Kubernetes platform lifecycle management 🌟 A faster and easier way to manage the lifecycle of applications and tools, running and living around your Kubernetes platform. Kubernetes platform lifecycle management helps you keep track of all your software and tools that are used or running in and around your Kubernetes platform.
- Nebula A scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world.
- kube-bench Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
- kube-bench-exporter Helps you to export your kube-bench reports to multiple targets like Amazon S3 buckets with ease.
-- Karmada Karmada (Kubernetes Armada) is a Kubernetes management system that enables you to run your cloud-native applications across multiple Kubernetes clusters and clouds, with no changes to your applications. By speaking Kubernetes-native APIs and providing advanced scheduling capabilities, Karmada enables truly open, multi-cloud Kubernetes. - https://karmada.io/
+- Karmada Karmada (Kubernetes Armada) is a Kubernetes management system that enables you to run your cloud-native applications across multiple Kubernetes clusters and clouds, with no changes to your applications. By speaking Kubernetes-native APIs and providing advanced scheduling capabilities, Karmada enables truly open, multi-cloud Kubernetes. - https://karmada.io
- kube-secrets-init Kubernetes mutating webhook for
secrets-init injection
- liqo: Enable dynamic and seamless Kubernetes multi-cluster topologies Building your endless Kubernetes ocean. Enable dynamic and seamless Kubernetes multi-cluster topologies. Liqo is a platform to enable dynamic and decentralized resource sharing across Kubernetes clusters, either on-prem or managed. Liqo allows to run pods on a remote cluster seamlessly and without any modification of Kubernetes and the applications. With Liqo it is possible to extend the control plane of a Kubernetes cluster across the cluster’s boundaries, making multi-cluster native and transparent: collapse an entire remote cluster to a virtual local node, by allowing workloads offloading and resource management compliant with the standard Kubernetes approach.
- redhat-certification: chart-verifier: Rules based tool to certify Helm charts 🌟
- helm-changelog: Create changelogs for Helm Charts, based on git history
- ingressbuilder.jetstack.io 🌟🌟 Ingress Builder allows users to select any annotation from the list of available controllers, to add to the ingress manifest.
-- Jetstack Secure Agent 🌟🌟 Automatically perform Kubernetes cluster configuration checks using Open Policy Agent (OPA)
+- Jetstack Secure Agent 🌟🌟 Automatically perform Kubernetes cluster configuration checks using Open Policy Agent (OPA)
- Replicated Troubleshoot 🌟 Troubleshoot is a framework for collecting, redacting, and analyzing highly customizable diagnostic information about a Kubernetes cluster.
-- outdated.sh 🌟 A kubectl plugin to show out-of-date images running in a cluster.
+- outdated.sh 🌟 A kubectl plugin to show out-of-date images running in a cluster.
- kubestriker 🌟 A Blazing fast Security Auditing tool for Kubernetes. Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation.
- KubeEye 🌟 KubeEye aims to find various problems on Kubernetes, such as application misconfiguration, unhealthy cluster components and node problems.
- Analyze Kubernetes Audit logs using Falco 🌟 Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco
- KubeHelper KubeHelper - simplifies many daily Kubernetes cluster tasks through a web interface. Search, analysis, run commands, cron jobs, reports, filters, git synchronization and many more.
- kubewebhook Go framework to create Kubernetes mutating and validating webhooks
- kaDalu A lightweight Persistent storage solution for Kubernetes / OpenShift using GlusterFS in background. Kadalu is a project which started as an idea to make glusterfs’s deployment and management simpler in kubernetes
-- forklift.konveyor.io 🌟 A tool that accelerates the process of re-hosting / re-platforming virtual machines to Kubernetes and KubeVirt. It does so by mapping resources (network and storage), creating equivalent resources int he target, and converting disk images.
+- forklift.konveyor.io 🌟 A tool that accelerates the process of re-hosting / re-platforming virtual machines to Kubernetes and KubeVirt. It does so by mapping resources (network and storage), creating equivalent resources int he target, and converting disk images.
- opensource.com: Migrate virtual machines to Kubernetes with this new tool - forklift 🌟 Transition your virtualized workloads to Kubernetes with Forklift.
-- konveyor 🌟 is an open source project that helps transition existing workloads (development, test, and production) to Kubernetes. Its tools include Crane, to move containers from one Kubernetes platform to another; Move2Kube, to bring workloads from Cloud Foundry to Kubernetes; and Tackle, to analyze Java applications to modernize them by making them more standard and portable for the runtimes available in containerized platforms like Kubernetes.
+- konveyor 🌟 is an open source project that helps transition existing workloads (development, test, and production) to Kubernetes. Its tools include Crane, to move containers from one Kubernetes platform to another; Move2Kube, to bring workloads from Cloud Foundry to Kubernetes; and Tackle, to analyze Java applications to modernize them by making them more standard and portable for the runtimes available in containerized platforms like Kubernetes.
- go-containerregistry 🌟 Go library and CLIs for working with container registries
@@ -9339,7 +9339,7 @@
- skooner - Kubernetes Dashboard Simple Kubernetes realtime dashboard and management
- Polaris: Best Practices for Kubernetes Workload Configuration 🌟 Validation of best practices in your Kubernetes clusters - fairwinds.com: What is Fairwinds’ Polaris? Kubernetes Open Source Configuration Validation
- Krane 🌟 is a Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.
-- KTail: Kubernetes log viewer 🌟 KTail allows you to tail multiple pods in one view. It automatically detects updates and attaches to new pods. Configurable highlighters show how often regular expressions matched and let you quickly navigate in the results.
+- KTail: Kubernetes log viewer 🌟 KTail allows you to tail multiple pods in one view. It automatically detects updates and attaches to new pods. Configurable highlighters show how often regular expressions matched and let you quickly navigate in the results.
- Manifesto 🌟 allows you to create an application structure to facilitate easy deployment to kubernetes. Jsonnet is used to create the underlying application structure, manifesto manipulates this structure to produce manifests.
- SigNoz: Open source Application Performance Monitoring (APM) & Observability tool 🌟 SigNoz helps developers monitor their applications & troubleshoot problems, an open-source alternative to DataDog, NewRelic, etc.
- port-map-operator LoadBalancer Service type implementation for home clusters via Port Control Protocol.
@@ -9348,20 +9348,20 @@
- OpenShiftKubeAudit An auditing program to detect incompatibilities in Kubernetes manifests brought over to OpenShift. This auditing tool currently only supports Kubernetes manifests, but we plan to expand it to include Helm charts and Go code, as well. The tool is in very early stages, but is looking for community input to help add use cases.
- Kubernetes Kpt in The Wild: What it is and how to use it 🌟 Kubernetes Kpt is tooling by Google that facilitates a structured approach to defining, managing, and distributing kubernetes templates between teams and orgs.
- RollingUpgrade Reliable, extensible rolling-upgrades of Autoscaling groups in Kubernetes
-- Kerbi 🌟 Kerbi (Kubernetes Emdedded Ruby Interpolator) is yet another templating engine for generating Kubernetes resource manifests. It enables multi-strategy, multi-source templating, giving you the freedom to design highly specialized templating pipelines.
-- Kourier Purpose-built Knative Ingress implementation using just Envoy with no additional CRDs. Kourier is an Ingress for Knative Serving. Kourier is a lightweight alternative for the Istio ingress as its deployment consists only of an Envoy proxy and a control plane for it.
-- space-cloud: Develop, Deploy and Secure Serverless Apps on Kubernetes. Open source Firebase + Heroku to develop, scale and secure serverless apps on Kubernetes - space-cloud.io Space Cloud is a Kubernetes based serverless platform that provides instant, realtime APIs on any database, with event triggers and unified APIs for your custom business logic.
-- community.suse.com: Comparing Modern-Day Container Image Builders: Jib, Buildpacks and Docker 🌟
+- Kerbi 🌟 Kerbi (Kubernetes Emdedded Ruby Interpolator) is yet another templating engine for generating Kubernetes resource manifests. It enables multi-strategy, multi-source templating, giving you the freedom to design highly specialized templating pipelines.
+- Kourier Purpose-built Knative Ingress implementation using just Envoy with no additional CRDs. Kourier is an Ingress for Knative Serving. Kourier is a lightweight alternative for the Istio ingress as its deployment consists only of an Envoy proxy and a control plane for it.
+- space-cloud: Develop, Deploy and Secure Serverless Apps on Kubernetes. Open source Firebase + Heroku to develop, scale and secure serverless apps on Kubernetes - space-cloud.io Space Cloud is a Kubernetes based serverless platform that provides instant, realtime APIs on any database, with event triggers and unified APIs for your custom business logic.
+- community.suse.com: Comparing Modern-Day Container Image Builders: Jib, Buildpacks and Docker 🌟
- Teleport 🌟 Certificate authority and access plane for SSH, Kubernetes, web applications, and databases
-- weaveworks: kured - Kubernetes Reboot Daemon 🌟 - weave.works: One year kured - your Kubernetes Reboot Daemon Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS. Many rely on Kured, which helps perform safe automatic node reboots when indicated by the package management of the underlying OS, to help make OS security better.
+- weaveworks: kured - Kubernetes Reboot Daemon 🌟 - weave.works: One year kured - your Kubernetes Reboot Daemon Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS. Many rely on Kured, which helps perform safe automatic node reboots when indicated by the package management of the underlying OS, to help make OS security better.
- k8s-cluster-simulator Kubernetes cluster simulator for evaluating schedulers.
- kubelogin 🌟 kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)
- kube-oidc-proxy Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.
-- tremolosecurity.com: Updating kube-oidc-proxy Kubernetes offers multiple ways to authenticate users to the API server. The best way to go, when available, is to use OpenID Connect (OIDC). We’ve talked about why you shouldn’t use certificates for kubernetes authentication, but most cloud providers won’t let you configure the API server flags needed to integrate managed clusters into an OIDC identity provider.
+- tremolosecurity.com: Updating kube-oidc-proxy Kubernetes offers multiple ways to authenticate users to the API server. The best way to go, when available, is to use OpenID Connect (OIDC). We’ve talked about why you shouldn’t use certificates for kubernetes authentication, but most cloud providers won’t let you configure the API server flags needed to integrate managed clusters into an OIDC identity provider.
- KubeSurvival 🌟 Significantly reduce Kubernetes costs by finding the cheapest machine types that can run your workloads
-- K8s Vault Webhook 🌟 - github: k8s-vault-webhook A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers
+- K8s Vault Webhook 🌟 - github: k8s-vault-webhook A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers
- cf-for-k8s The open source deployment manifest for Cloud Foundry on Kubernetes. cf-for-k8s blends the popular CF developer API with Kubernetes, Istio, and other open source technologies. The project aims to improve developer productivity for organizations using Kubernetes
- tekline 🌟 tekline is a tekton delegated-pipeline to enable a bring-your-own pipeline configuration.
- nerdctl 🌟 Docker-compatible CLI for containerd
@@ -9379,7 +9379,7 @@
- github.com: NFS Ganesha server and external provisioner NFS Ganesha Server and Volume Provisioner. nfs-ganesha-server-and-external-provisioner is an out-of-tree dynamic provisioner for Kubernetes 1.14+. You can use it to quickly & easily deploy shared storage that works almost anywhere.
- Armada kubectl plugin 🌟 Command line tools to manage kustomize packaged apps deployment. Armada is a Kubectl plugin that adds templating capacity and manage deployment to Kustomize apps. Templating uses go template to allow you to generate kustomize apps with templates inside. Armada allows you to git clone a packaged kustomize base and call it with the help of a config file.
- Minnaker Minnaker is a simple way to install Spinnaker inside a VM. Spinnaker on Lightweight Kubernetes (K3s)
-- kVDI A Kubernetes-native Virtual Desktop Infrastructure
+- kVDI A Kubernetes-native Virtual Desktop Infrastructure
- Kubesurveyor 🌟 Good enough Kubernetes namespace visualization tool. No provisioning to a cluster required, only Kubernetes API is scrapped.
- NVIDIA k8s-device-plugin NVIDIA device plugin for Kubernetes. The NVIDIA device plugin for Kubernetes is a Daemonset that allows you to automatically: Expose GPUs on each nodes of your cluster, Keep track of the health of your GPUs, Run GPU enabled containers.
- kubectl-tmux-exec A kubectl plugin to control multiple pods simultaneously using Tmux
@@ -9391,19 +9391,19 @@
- salesforce/Sloop - Kubernetes History Visualization 🌟 Sloop monitors Kubernetes, recording histories of events and resource state changes and providing visualizations to aid in debugging past events.
- Kspan - Turning Kubernetes Events into spans 🌟 Most Kubernetes components produce Events when something interesting happens. This program turns those Events into OpenTelemetry Spans, joining them up by causality and grouping them together into Traces.
- csi-rclone: CSI rclone mount plugin CSI driver for rclone. This project implements Container Storage Interface (CSI) plugin that allows using rclone mount as storage backend. Rclone mount points and parameters can be configured using Secret or PersistentVolume volumeAttibutes.
-- stackrox.io: Top 9 Open Source DevSecOps Tools for Kubernetes in 2021 🌟 Anchore, Checkov, Clair, Falco, Kube-bench, Kube-hunter, KubeLinter, Open Policy Agent (OPA), Terrascan
-- Kdo: deployless development on Kubernetes 🌟 Kdo is a command line tool that enables developers to run, develop and test code changes in a realistic deployed setting without having to deal with the complexity of Kubernetes deployment and configuration.
+- stackrox.io: Top 9 Open Source DevSecOps Tools for Kubernetes in 2021 🌟 Anchore, Checkov, Clair, Falco, Kube-bench, Kube-hunter, KubeLinter, Open Policy Agent (OPA), Terrascan
+- Kdo: deployless development on Kubernetes 🌟 Kdo is a command line tool that enables developers to run, develop and test code changes in a realistic deployed setting without having to deal with the complexity of Kubernetes deployment and configuration.
- chekr A inspection utility for the maintenance of Kubernetes clusters.
- KUR8 🌟 A visual overview of Kubernetes architecture and Prometheus metrics. KUR8 is an open-source Kubernetes analytics, monitoring, and visualizer web application that allows for querying, alerts, and creating custom charts and graphs that leverage Prothemeus and its time logged series database metrics.
-- mperezco/forklift-configmap-service Systemd service to run in VMs on KubeVirt to mount ConfigMaps
+- mperezco/forklift-configmap-service Systemd service to run in VMs on KubeVirt to mount ConfigMaps
- cdk8s Define Kubernetes native apps and abstractions using object-oriented programming
- Havener Think of it as a swiss army knife for Kubernetes tasks.
-- KFServing 🌟 Serverless Inferencing on Kubernetes. KFServing provides a Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks. It aims to solve production model serving use cases by providing performant, high abstraction interfaces for common ML frameworks like Tensorflow, XGBoost, ScikitLearn, PyTorch, and ONNX.
+- KFServing 🌟 Serverless Inferencing on Kubernetes. KFServing provides a Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks. It aims to solve production model serving use cases by providing performant, high abstraction interfaces for common ML frameworks like Tensorflow, XGBoost, ScikitLearn, PyTorch, and ONNX.
- rkubelog 🌟 Send k8s Logs to Papertrail and Loggly Without DaemonSets (for Nodeless Clusters) - dzone: ContainerD Kubernetes Syslog Forwarding Move from Logspout to Filebeat to support containerd logging architecture.
-- kubernetes-sigs: Trimaran: Load-aware scheduling plugins 🌟 Trimaran is a collection of load-aware scheduler plugins - thenewstack.io: IBM, Red Hat Bring Load-Aware Resource Management to Kubernetes
+- kubernetes-sigs: Trimaran: Load-aware scheduling plugins 🌟 Trimaran is a collection of load-aware scheduler plugins - thenewstack.io: IBM, Red Hat Bring Load-Aware Resource Management to Kubernetes
- AWS Controllers for Kubernetes (ACK) 🌟 AWS Controllers for Kubernetes (ACK) is a project enabling you to manage AWS services from Kubernetes
- connaisseur An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster
- VolSync 🌟 Asynchronous data replication for Kubernetes volumes. VolSync asynchronously replicates Kubernetes persistent volumes between clusters using either rsync or rclone. It also supports creating backups of persistent volumes via restic. VolSync, a new storage-agnostic utility for exporting and importing objects from one Kubernetes namespace to another, even across clusters!
@@ -9411,7 +9411,7 @@
- kube-scheduler-simulator Web-based Kubernetes scheduler simulator
- multus-cni 🌟 A CNI meta-plugin for multi-homed pods in Kubernetes. Multus CNI is a container network interface (CNI) plugin for Kubernetes that enables attaching multiple network interfaces to pods. Typically, in Kubernetes each pod only has one network interface (apart from a loopback) – with Multus you can create a multi-homed pod that has multiple interfaces. This is accomplished by Multus acting as a “meta-plugin”, a CNI plugin that can call multiple other CNI plugins.
- kim - The Kubernetes Image Manager
-- KUDO: The Kubernetes Universal Declarative Operator 🌟 KUDO is a toolkit that makes it easy to build Kubernetes Operators, in most cases just using YAML.
+- KUDO: The Kubernetes Universal Declarative Operator 🌟 KUDO is a toolkit that makes it easy to build Kubernetes Operators, in most cases just using YAML.
- K8sPurger 🌟 K8SPurger is a controller that finds all unused resources and show them in a nice format
- jenkins-x/gsm-controller gsm-controller is a Kubernetes controller that copies secrets from Google Secrets Manager into Kubernetes secrets. The controller watches Kubernetes secrets looking for an annotation, if the annotation is not found on the secret nothing more is done.
- sciuro Alertmanager to Kubernetes Node conditions bridge. Sciuro is a bridge between Alertmanager and Kubernetes to sync alerts as Node Conditions. It is designed to work in tandem with other controllers that observe Node Conditions such as draino or the cluster-api.
@@ -9439,21 +9439,21 @@
- kubernetes-sigs/nfs-subdir-external-provisioner: Kubernetes NFS Subdir External Provisioner Dynamic sub-dir volume provisioner on a remote NFS server. NFS subdir external provisioner is an automatic provisioner that use your existing NFS server to support dynamic provisioning of Kubernetes Persistent Volumes via Persistent Volume Claims
- ori-edge/k8s_gateway A CoreDNS plugin to resolve all types of external Kubernetes resources. k8s_gateway is a CoreDNS plugin that resolves load balancer and external IPs from outside Kubernetes clusters and supports all types of Kubernetes external resources - Ingress, Service of type LoadBalancer.
- viaduct-ai/kustomize-sops KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
-- vadosware.io: Using Makefiles And Envsubst As An Alternative To Helm And Ksonnet (deprecated)
+- vadosware.io: Using Makefiles And Envsubst As An Alternative To Helm And Ksonnet (deprecated)
- uw-labs.github.io: Kubernetes Semaphore: A modular and nonintrusive framework for cross cluster communication
- zakkg3/ClusterSecret: Kubernetes ClusterSecret operator ClusterSecret operator makes sure all the matching namespaces have the secret available. New namespaces, if they match the pattern, will also have the secret. Any change on the ClusterSecret will update all related secrets. Deleting the ClusterSecret deletes “child” secrets (all cloned secrets) too.
- tektoncd/chains Tekton Chains is a Kubernetes Custom Resource Definition (CRD) controller that allows you to manage your supply chain security in Tekton.
- gopaddle-io/configurator Synchronize and Version Control ConfigMaps & Secrets across Deployment Rollouts.
- biosimulations/deployment Kubernetes Configuration for BioSimulations platform.
- chrislusf/seaweedfs SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, local tiering, cloud tiering. Filer supports Cloud Drive, cross-DC active-active replication, Kubernetes, POSIX FUSE mount, S3 API, Hadoop, WebDAV, encryption, Erasure Coding.
-- kubernetes-sigs/kui A hybrid command-line/UI development experience for cloud-native development
+- kubernetes-sigs/kui A hybrid command-line/UI development experience for cloud-native development
- DaspawnW/vault-crd Vault CRD for sharing Vault Secrets with Kubernetes. Vault-CRD is a custom resource definition for holding secrets that are stored in HashiCorp Vault and kept up to date with Kubernetes secrets
- stakater/Reloader 🌟 A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig
- dignajar/another-ldap Another LDAP is a form-based authentication for Active Directory / LDAP server. Provides Authentication and Authorization for your applications running in Kubernetes.
-- ddosify/ddosify High-performance load testing tool, written in Golang.
+- ddosify/ddosify High-performance load testing tool, written in Golang.
- anchore/syft CLI tool and library for generating a Software Bill of Materials from container images and filesystems. Exceptional for vulnerability detection when used with a scanner tool like Grype.
- aws/aws-node-termination-handler 🌟 Gracefully handle EC2 instance shutdown within Kubernetes
-- aelsabbahy/goss Quick and Easy server testing/validation
+- aelsabbahy/goss Quick and Easy server testing/validation
- chr-fritz/csi-sshfs Kubernetes CSI Plugin for SSHFS. It allows to mount directories using a ssh connection.
- ctrox/csi-s3 A Container Storage Interface for S3. This is a Container Storage Interface (CSI) for S3 (or S3 compatible) storage. This can dynamically allocate buckets and mount them via a fuse mount into any container.
- codesenberg/bombardier 🌟 Fast cross-platform HTTP benchmarking tool written in Go
@@ -9461,7 +9461,7 @@
- kui.tools Kui: CLI-driven Graphics for Kubernetes. Tired of working with Kubernetes in cli mode only? Try kui - a hybrid tool that allows you to interact with any Kubernetes cluster easily with more advanced features available only in GUI.
- bloomberg/goldpinger 🌟 Debugging tool for Kubernetes which tests and displays connectivity between nodes in the cluster. Goldpinger makes calls between its instances to monitor your networking. It runs as a DaemonSet on Kubernetes and produces Prometheus metrics that can be scraped, visualised and alerted on.
- haxsaw/hikaru 🌟 Move smoothly between Kubernetes YAML and Python for creating/updating/componentizing configurations. Hikaru is a tool that provides you the ability to easily shift between YAML, Python objects/source, and JSON representations of your Kubernetes config files. It provides assistance in authoring these files in Python, opens up options in how you can assemble and customise the files, and provides some programmatic tools for inspecting large, complex files to enable automation of policy and security compliance. Additionally, Hikaru allows you to use its K8s model objects to interact with Kubernetes, directing it to create, modify, and delete resources.
-- kei6u/kubectl-secret-data A kubectl plugin for finding decoded secret data with productive search flags.
+- kei6u/kubectl-secret-data A kubectl plugin for finding decoded secret data with productive search flags.
- ofek/csi-gcs Kubernetes CSI driver for Google Cloud Storage. An easy-to-use, cross-platform, and highly optimized Kubernetes CSI driver for mounting Google Cloud Storage buckets.
- target/pod-reaper Rule based pod killing kubernetes controller. Pod-Reaper was designed to kill pods that meet specific conditions. See the “Implemented Rules” section below for details on specific rules.
- utilitywarehouse/kube-applier kube-applier enables automated deployment and declarative configuration for your Kubernetes cluster. kube-applier is Kubernetes deployment tool strongly following gitOps principals. It enables continuous deployment of Kubernetes objects by applying declarative configuration files from a Git repository to a Kubernetes cluster.
@@ -9469,7 +9469,7 @@
- Trendyol/kink KinK is a helper CLI that facilitates to manage KinD clusters as Kubernetes pods. Designed to ease clusters up for fast testing with batteries included in mind.
-- vbouchaud/k8s-ldap-auth Kubernetes webhook token authentication plugin implementation using ldap.
+- vbouchaud/k8s-ldap-auth Kubernetes webhook token authentication plugin implementation using ldap.
- wangjia184/pod-inspector A tool to inspect pods in kubernetes. Unlike other dashboardes for Kubernetes(Lens / Rancher / etc), Kubernetes Pod Inspector allows to check the file system and processes within running Linux pods without using kubectl. This is useful when we want to check the files within volumes mounted by pods
- witchery-project/witchery build distroless images with alpine tools
- knight42/kubectl-blame: kubectl-blame: git-like blame for kubectl Show who edited resource fields. A useful opensource tool that comes as a plugin to show who modified attributes in kubernetes resource fields.
@@ -9484,7 +9484,7 @@
- theketchio/ketch 🌟 Ketch is an application delivery framework that facilitates the deployment and management of applications on Kubernetes using a simple command line interface.
- joyrex2001/kubedock Kubedock is a minimal implementation of the docker api that will orchestrate containers on a Kubernetes cluster, rather than running containers locally.
- corneliusweig/konfig konfig helps to merge, split or import kubeconfig files
-- armosec/regolibrary ARMO rego library for detecting miss-configurations in Kubernetes manifests
+- armosec/regolibrary ARMO rego library for detecting miss-configurations in Kubernetes manifests
- groundnuty/k8s-wait-for 🌟 A simple script that allows to wait for a k8s service, job or pods to enter a desired state
- nabsul/k8s-ecr-login-renew: Renew Kubernetes Docker secrets for AWS ECR Renews Docker login credentials for an AWS ECR container registry.
- particledecay/kconf Manage multiple kubeconfigs easily
@@ -9498,22 +9498,22 @@
- Recovers from failure
-- https://pinniped.dev 🌟 - vmware-tanzu/pinniped Pinniped is the easy, secure way to log in to your Kubernetes clusters.
+- https://pinniped.dev 🌟 - vmware-tanzu/pinniped Pinniped is the easy, secure way to log in to your Kubernetes clusters.
- keisku/kubectl-explore A better kubectl explain with the fuzzy finder. This plugin fuzzy-find the field explanation from supported API resources. It implements different explanations for particular API version. kubectl-explore is a kubectl plugin to fuzzy-find and explain the field supported API resources like “pod.spec”, “cronJob.spec.jobTemplate”, etc.
- box/kube-exec-controller An admission controller service and kubectl plugin to handle container drift in K8s clusters. kube-exec-controller is an admission controller for handling container drift (caused by kubectl exec, attach, cp, or other interactive requests) inside a Kubernetes cluster. This project also includes a kubectl plugin for checking such Pods.
- abahmed/kwatch 👀 monitor & detect crashes in your Kubernetes(K8s) cluster instantly. kwatch helps you monitor all changes in your Kubernetes cluster, detects crashes in your running apps in real-time, and publishes notifications to your channels (Slack, Discord, etc.) instantly.
- cuber-cloud/cuber-gem: CUBER An automation tool that simplify the deployment of your apps on Kubernetes.
-- kubeops/config-syncer: Config Syncer (previously Kubed) Kubernetes Config Syncer (previously kubed). Config Syncer keeps ConfigMaps and Secrets synchronized across namespaces and/or clusters
+- kubeops/config-syncer: Config Syncer (previously Kubed) Kubernetes Config Syncer (previously kubed). Config Syncer keeps ConfigMaps and Secrets synchronized across namespaces and/or clusters
- eldadru/ksniff 🌟 Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
- openclarity/kubeclarity KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
- NimbleArchitect/kubectl-ice 🌟 Cleanly list all containers in kubernetes pods including init containers and view running kubernetes information about those multi-container pods to assist in troubleshooting and information gathering. kubectl-ice is a kubectl plugin that lets you see the configuration of all pod’s containers. You can inspect volumes, images, ports and executable configurations, along with current CPU and memory metrics at the container level.
-- vmware-tanzu/k-bench 🌟 Workload Benchmark for Kubernetes. K-Bench is a framework to benchmark the control and data plane aspects of a Kubernetes infrastructure. It provides a configurable way to prescriptively create and manipulate Kubernetes resources at scale and collect the metrics.
+- vmware-tanzu/k-bench 🌟 Workload Benchmark for Kubernetes. K-Bench is a framework to benchmark the control and data plane aspects of a Kubernetes infrastructure. It provides a configurable way to prescriptively create and manipulate Kubernetes resources at scale and collect the metrics.
- k8tz/k8tz: Kubernetes Timezone Controller Kubernetes admission controller and a CLI tool to inject timezones into Pods and CronJobs
- patrickdappollonio/tabloid: tabloid – your tabulated data’s best friend tabloid is a simple command line tool to parse and filter column-based CLI outputs from commands like kubectl or docker
- ReallyLiri/kubescout: Kube-Scout Scout for alarming issues across your Kubernetes clusters. kubescout is a command-line tool designed to issue alerts in real-time for:
@@ -9525,10 +9525,10 @@
- etc
-- govirtuo/kube-ns-suspender 🌟 A k8s controller that scales up and down namespaces on-demand with an embedded friendly UI and a Prometheus exporter. Inspired by kube-downscaler.Kube-ns-suspender watches namespaces and “suspends” them by scaling to 0 some of the resources. Once a namespace is suspended, it will not be restarted automatically. This allows to “reactivate” namespaces only when required and reduces costs
+- govirtuo/kube-ns-suspender 🌟 A k8s controller that scales up and down namespaces on-demand with an embedded friendly UI and a Prometheus exporter. Inspired by kube-downscaler.Kube-ns-suspender watches namespaces and “suspends” them by scaling to 0 some of the resources. Once a namespace is suspended, it will not be restarted automatically. This allows to “reactivate” namespaces only when required and reduces costs
- codeberg.org/hjacobs/kube-downscaler: Kubernetes Downscaler 🌟 Scale down / “pause” Kubernetes workload (Deployments, StatefulSets, and/or HorizontalPodAutoscalers and CronJobs too !) during non-work hours.
- deepfence/PacketStreamer ⭐⭐ Distributed tcpdump for cloud native environments ⭐⭐ PacketStreamer is a high-performance remote packet capture and collection tool. It is used by Deepfence’s ThreatStryker security observability platform to gather network traffic on demand from cloud workloads for forensic analysis.
-- kris-nova/kaar kaar is the Kubernetes Application Archive. kaar will:
+- kris-nova/kaar kaar is the Kubernetes Application Archive. kaar will:
- Recursively iterate through every file in the path and search for valid Kubernetes YAML
- Identify all container images referenced from the YAML
- Archive the container images
@@ -9540,7 +9540,7 @@
- crazy-max/diun Diun is a CLI application written in Go and delivered as a single executable (and a Docker image) to receive notifications when a Docker image is updated on a Docker registry.
- omrikiei/ktunnel ⭐ A cli that exposes your local resources to kubernetes. A CLI tool that establishes a reverse tunnel between a kubernetes cluster and your local machine.
- dev.to: Pixie: an X-ray Machine for Kubernetes Traffic Pixie is one of a handful of observability tools that offer eBPF or kernel-level observability. In this tutorial, you will learn how to see all of your applications’ metrics, events, logs, and traces using Pixie with Kubernetes.
-- plural.sh: Deploy open-source software on Kubernetes in record time ⭐ An open-source platform to build, maintain, and scale infrastructure on Kubernetes. Batteries included.
+- plural.sh: Deploy open-source software on Kubernetes in record time ⭐ An open-source platform to build, maintain, and scale infrastructure on Kubernetes. Batteries included.
@@ -9555,7 +9555,7 @@
- pymag09/kubecui kubeui makes kubectl more user friendly. This is still kubectl but enhanced with fzf. However, kubectl slows you down - requires heavy keyboard typing. In order to alleviate interaction with kubernetes API and describe the fields associated with each supported API resource directly in the Terminal, kubectl was complemented by fzf.
- awesome-it/adeploy adeploy is a deployment tool for Kubernetes that supports the rendering and deploying of lightweight Jinja templated Kubernetes manifests and complex Helm charts
- stakater/Forecastle Forecastle is a control panel which dynamically discovers and provides a launchpad to access applications deployed on Kubernetes
-- acorn-io/acorn Acorn is a simple application deployment framework for Kubernetes:
+- acorn-io/acorn Acorn is a simple application deployment framework for Kubernetes:
- One artifact across dev, test, and production
- Simple CLI and powerful API
- Runs on any Kubernetes cluster
@@ -9594,9 +9594,9 @@
- github.com/JovianX/Service-Hub Service Hub is a tool to create and manage a Self-Service portal for your applications using Kubernetes and Helm
- medium.com/@markcallen_devops: Setup Kubernetes Admin on Linux with Brew
- github.com/ahmetb/kubectl-foreach: kubectl foreach ⭐ kubectl-foreach is a kubectl plugin that runs a kubectl command in one or more contexts (clusters) in parallel (similar to GNU parallel/xargs)
-- github.com/kubernetes-sigs/etcdadm ⭐ etcdadm is a command-line tool for operating an etcd cluster. It makes it easy to create a new cluster, add a member to, or remove a member from an existing cluster. Its user experience is inspired by kubeadm.
-- infoq.com: Kwok, a Tool to Spin up Kubernetes Nodes in a Second
-- github.com/jetpack-io/launchpad ⭐ Launchpad is a command-line tool that lets you easily create applications on Kubernetes. In practice, Launchpad works similar to Heroku or Vercel, except everything is on Kubernetes.
+- github.com/kubernetes-sigs/etcdadm ⭐ etcdadm is a command-line tool for operating an etcd cluster. It makes it easy to create a new cluster, add a member to, or remove a member from an existing cluster. Its user experience is inspired by kubeadm.
+- infoq.com: Kwok, a Tool to Spin up Kubernetes Nodes in a Second
+- github.com/jetpack-io/launchpad ⭐ Launchpad is a command-line tool that lets you easily create applications on Kubernetes. In practice, Launchpad works similar to Heroku or Vercel, except everything is on Kubernetes.
- github.com/OvidiuBorlean/kubectl-sockperf Kubectl Sockperf plugin - Latency Measurement in Kubernetes
- github.com/oslabs-beta/Ekkremis This repository contains the code for Ekkremis: a Prometheus-based alert manager to resolve kubernetes pods pending issues
- github.com/jonmosco/kube-ps1 ⭐ Kubernetes prompt for bash and zsh. kube-ps1 is a script that lets you add the current Kubernetes context and namespace configured on kubectl to your Bash/Zsh prompt strings (i.e. the
$PS1)
@@ -9606,7 +9606,7 @@
- oslabs-beta/Palaemon Palaemon is an open-source developer tool for monitoring health and resource metrics of Kubernetes clusters and analyzing Out of Memory (OOMKill) errors
- openobserve/debug-container A container with common utilities for debugging your cluster
- platformengineering.org/tools/capsule ⭐ Capsule is an open source framework that enables Platform Engineers to build a secure multi-tenant Internal Developer Platform on top of any Kubernetes infrastructure.
-- Ksctl: Cloud Agnostic Kubernetes Management tool ksctl is a simple multi-environment Kubernetes management CLI tool
+- Ksctl: Cloud Agnostic Kubernetes Management tool ksctl is a simple multi-environment Kubernetes management CLI tool
- github.com/ajayk/drifter Drifter scans your cluster to find configuration drifts on Kubernetes resources or Helm charts
- github.com/nebuly-ai/nos Module to Automatically maximize the utilization of GPU resources in a Kubernetes cluster through real-time dynamic partitioning and
elastic quotas - Effortless optimization at its finest!
@@ -9629,10 +9629,10 @@ elastic quotas - Effortless optimization at its finest!
- granted.dev A CLI application which provides the world’s best developer UX for finding and accessing cloud roles to multiple cloud accounts, fast!
-- devtron.ai Adopt Kubernetes in Weeks With Our K8s Acceleration Platform. Old software delivery platforms are holding you back and slowing you down. Rapidly adopt K8s without creating cognitive overload for your developers.
-- github.com/kubefirst/kubefirst The Kubefirst CLI creates instant GitOps platforms that integrate some of the best tools in cloud native from scratch in minutes. The Kubefirst CLI is a cloud provisioning tool that creates a kubernetes cluster with automated Infrastructure as Code, GitOps asset management and application delivery, secrets management, and more.
+- devtron.ai Adopt Kubernetes in Weeks With Our K8s Acceleration Platform. Old software delivery platforms are holding you back and slowing you down. Rapidly adopt K8s without creating cognitive overload for your developers.
+- github.com/kubefirst/kubefirst The Kubefirst CLI creates instant GitOps platforms that integrate some of the best tools in cloud native from scratch in minutes. The Kubefirst CLI is a cloud provisioning tool that creates a kubernetes cluster with automated Infrastructure as Code, GitOps asset management and application delivery, secrets management, and more.
- github.com/Trolley-MGMT/trolleymgmt Trolley is a multi cloud Kubernetes management system. A simplified UI which allows the user to Deploy, Edit and Delete clusters and deployments within them on AWS, Azure and GCP.
-- github.com/akuity/kargo - kargo.akuity.io Application lifecycle orchestration. Kargo is a next-generation continuous delivery and application lifecycle orchestration platform for Kubernetes. It builds upon GitOps principles and integrates with existing technologies, like Argo CD, to streamline and automate the progressive rollout of changes across the many stages of an application’s lifecycle.
+- github.com/akuity/kargo - kargo.akuity.io Application lifecycle orchestration. Kargo is a next-generation continuous delivery and application lifecycle orchestration platform for Kubernetes. It builds upon GitOps principles and integrates with existing technologies, like Argo CD, to streamline and automate the progressive rollout of changes across the many stages of an application’s lifecycle.
- github.com/Wilfred/difftastic a structural diff that understands syntax
- github.com/kubernetes/git-sync ⭐ A sidecar app which clones a git repo and keeps it in sync with the upstream. git-sync is a simple command that pulls a git repository into a local directory. It is a perfect “sidecar” container in Kubernetes - it can periodically pull files down from a repository so that an application can consume them.
- github.com/kubepug/kubepug: Deprecations AKA KubePug - Pre UpGrade (Checker) ⭐ KubePug/Deprecations is intended to be a kubectl plugin, which:
@@ -9668,7 +9668,7 @@ elastic quotas - Effortless optimization at its finest!
kcp
-- https://github.com/kcp-dev/
+- https://github.com/kcp-dev
- kcp: a prototype of a Kubernetes API server that is not a Kubernetes cluster - a place to create, update, and maintain Kube-like APIs with controllers above or without clusters Kubernetes is mainly known as a container orchestration platform today, but we believe it can be even more. With the power of CustomResourceDefinitions, Kubernetes provides a flexible platform for declarative APIs of all types, and the reconciliation pattern common to Kubernetes controllers is a powerful tool in building robust, expressive systems. At the same time, a diverse and creative community of tools and services has sprung up around Kubernetes APIs. Imagine a declarative Kubernetes-style API for anything, supported by an ecosystem of Kubernetes-aware tooling, separate from Kubernetes-the-container-orchestrator. That’s kcp.
- cloudnativesimplified.substack.com: kcp: Kubernetes-like control plane kcp is a control plane for workloads on many clusters. In this article, you will explore how to use it to manage multiple tenants:
- In a single cluster with workspaces (isolated namespaces)
@@ -9679,7 +9679,7 @@ elastic quotas - Effortless optimization at its finest!
Clusternet
- github.com/clusternet Managing your Kubernetes clusters (including public, private, edge, etc) as easily as visiting the Internet
-- https://clusternet.io/
+- https://clusternet.io
- Clusternet (Cluster Internet) is a tool that helps you manage thousands of Kubernetes clusters
- It can also help deploy and manage applications across several clusters from a single set of APIs in a single hosting cluster
@@ -9691,12 +9691,12 @@ elastic quotas - Effortless optimization at its finest!
How Kruize Optimizes OpenShift Workloads - (Related to openshift topic)
-
-
open-cluster-management.io Make working with many Kubernetes clusters super easy regardless of where they are deployed. Open Cluster Management is a community-driven project focused on multicluster and multicloud scenarios for Kubernetes apps. Open APIs are evolving within this project for cluster registration, work distribution, dynamic placement of policies and workloads, and much more.
+open-cluster-management.io Make working with many Kubernetes clusters super easy regardless of where they are deployed. Open Cluster Management is a community-driven project focused on multicluster and multicloud scenarios for Kubernetes apps. Open APIs are evolving within this project for cluster registration, work distribution, dynamic placement of policies and workloads, and much more.
Penetration Testing Tools
-- Web-Check - Web-Check is a free and open-source tool that allows you to analyze the security of your website. It checks for various vulnerabilities and provides recommendations for improvement.
+- Web-Check - Web-Check is a free and open-source tool that allows you to analyze the security of your website. It checks for various vulnerabilities and provides recommendations for improvement.
-
action-tmate: Debug GitHub Actions via SSH - (Related to cicd topic)
@@ -9719,11 +9719,11 @@ elastic quotas - Effortless optimization at its finest!
Porter
-- Porter Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command - github.com/getporter/porter
+- Porter Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command - github.com/getporter/porter
Datree. Quality Checks for Kubernetes YAMLs
-- Datree.io Datree prevents kubernetes misconfigurations from reaching production. Datree is a CLI solution that supports kubernetes owners in their roles, by preventing developers from making errors in k8s configurations.
+- Datree.io Datree prevents kubernetes misconfigurations from reaching production. Datree is a CLI solution that supports kubernetes owners in their roles, by preventing developers from making errors in k8s configurations.
- dev.to: CI With Datree Learn all about Datree, the leader in Kubernetes static code analysis; Helm chart analysis; and how to ensure that all manifest configurations are working properly in a Continuous Integration (CI) build process. youtube: CI and Building Code With Datree
- dev.to: Automating quality checks for Kubernetes YAMLs
@@ -9732,21 +9732,21 @@ elastic quotas - Effortless optimization at its finest!
- Kaniko 🌟 Kaniko is a tool to build container images from a Dockerfile. Unlike Docker, Kaniko doesn’t require the Docker daemon. With the help of Kaniko, you won’t be needing to run docker containers with privileged mode.
- medium: Multibranch and HA Pipeline in Jenkins with Kaniko on GKE
- developers.redhat.com: Perform a kaniko build on a Red Hat OpenShift cluster and push the image to a registry
-- devopscube.com: How To Build Docker Image In Kubernetes Pod 🌟
-- learnsteps.com: Kaniko and how you can build images on Kubernetes using kaniko?
+- devopscube.com: How To Build Docker Image In Kubernetes Pod 🌟
+- learnsteps.com: Kaniko and how you can build images on Kubernetes using kaniko?
- blog.rewanthtammana.com: Hardening Kaniko build process with Linux capabilities Build images inside Kubernetes/containers? Wide privileges in default configuration? How to secure Kaniko? Can we take things a notch higher?
- medium.com/@Mohamed-ElEmam: Build Docker Images in Kubernetes POD Without Docker -Kaniko
- medium.com/@aqsarahman71: Introduction to Kaniko
Shipwright Framework for Building Container Images on Kubernetes
-- shipwright.io
-- cd.foundation: CD Foundation Welcomes Shipwright, Framework for Building Container Images on Kubernetes, As New Incubating Project
+- shipwright.io
+- cd.foundation: CD Foundation Welcomes Shipwright, Framework for Building Container Images on Kubernetes, As New Incubating Project
BuildKit CLI for kubectl
-- BuildKit CLI for kubectl (by vmware-tanzu) 🌟 BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster.
-- container-registry.com: Lifting Developers’ Productivity 🌟 With BuildKit CLI for kubectl a drop in replacement for docker build
+- BuildKit CLI for kubectl (by vmware-tanzu) 🌟 BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster.
+- container-registry.com: Lifting Developers’ Productivity 🌟 With BuildKit CLI for kubectl a drop in replacement for docker build
Buildpacks vs Dockerfiles
@@ -9754,22 +9754,22 @@ elastic quotas - Effortless optimization at its finest!
Kubevela
-- kubevela.io 🌟 KubeVela is a modern application platform that makes deploying and managing applications across today’s hybrid, multi-cloud environments easier and faster. KubeVela is runtime agnostic, natively extensible, yet most importantly, application-centric .
-- blog.logrocket.com: Intro to KubeVela: A better way to ship applications KubeVela makes deploying applications to Kubernetes much easier. Rather than knowing about service, deployment, pods, and horizontal pod scaling, you can specify a much lighter configuration.
+- kubevela.io 🌟 KubeVela is a modern application platform that makes deploying and managing applications across today’s hybrid, multi-cloud environments easier and faster. KubeVela is runtime agnostic, natively extensible, yet most importantly, application-centric .
+- blog.logrocket.com: Intro to KubeVela: A better way to ship applications KubeVela makes deploying applications to Kubernetes much easier. Rather than knowing about service, deployment, pods, and horizontal pod scaling, you can specify a much lighter configuration.
Pixie. Instantly troubleshoot applications on Kubernetes
- px.dev: Pixie Open source Kubernetes observability for developers. Auto-instrumented. Scriptable. Kubernetes native.
-- docs.pixielabs.ai: Pixie Instantly debug your applications on Kubernetes
-- github.com: Pixie - Instant Kubernetes-Native Application Observability
-- open source PxL scripts
+- docs.pixielabs.ai: Pixie Instantly debug your applications on Kubernetes
+- github.com: Pixie - Instant Kubernetes-Native Application Observability
+- open source PxL scripts
Dekorate. Generate k8s manifests for java apps
-- dekorate.io 🌟🌟🌟 - https://github.com/dekorateio/dekorate
+- dekorate.io 🌟🌟🌟 - https://github.com/dekorateio/dekorate
- Dekorate is a collection of Java compile-time generators and decorators for Kubernetes manifests. You can generate a manifest by adding a dependency to the classpath of your project. You can also customize it with an annotation or application property
- One-stop jar to Kubernetes manifest generation that works for all jvm languages regardless of the build tool. It makes generating Kubernetes manifests as easy as adding a dependency to the classpath!
-- developers.redhat.com: Using Dekorate to generate Kubernetes manifests for Java applications
+- developers.redhat.com: Using Dekorate to generate Kubernetes manifests for Java applications
Kubesploit
@@ -9778,12 +9778,12 @@ elastic quotas - Effortless optimization at its finest!
Kubeshop
-- Kubeshop 🌟 First in the World Open-Source Accelerator/Incubator focusing on building project for Developers in the Kubernetes space
-- venturebeat.com: Kubeshop wants to be a Kubernetes product pipeline
+- Kubeshop 🌟 First in the World Open-Source Accelerator/Incubator focusing on building project for Developers in the Kubernetes space
+- venturebeat.com: Kubeshop wants to be a Kubernetes product pipeline
Meshery
-- Meshery is an open-source cloud-native manager that enables the design and management of all Kubernetes-based infrastructure and applications.
+- Meshery is an open-source cloud-native manager that enables the design and management of all Kubernetes-based infrastructure and applications.
- Exploring Kubernetes Pods with Meshery - A hands-on lab in Meshery Playground, an interactive live cluster environment.
Monokle
@@ -9800,7 +9800,7 @@ elastic quotas - Effortless optimization at its finest!
- k8studio — Your friendly, full-featured desktop IDE for Kubernetes clusters and manifests!
- medium.com: K8Studio 3.x Release — K8Studio helps you create, validate, debug, and manage Kubernetes manifests and live clusters with a powerful UI and built-in AI Copilot.
-- youtube: From Code to Cluster — Modern Kubernetes Workflows with K8Studio
+- youtube: From Code to Cluster — Modern Kubernetes Workflows with K8Studio
- Visualize your clusters with CloudMaps / Heatmaps
- Work faster with Grid View and real-time filtering
- Manage multi-cluster setups with custom layouts
@@ -9830,19 +9830,19 @@ elastic quotas - Effortless optimization at its finest!
Kustomizer
-- kustomizer Kustomize build, apply, prune command-line utility. Kustomizer is a command-line utility for applying kustomizations on Kubernetes clusters. Kustomizer garbage collector keeps track of the applied resources and prunes the Kubernetes objects that were previously applied on the cluster but are missing from the current revision.
+- kustomizer Kustomize build, apply, prune command-line utility. Kustomizer is a command-line utility for applying kustomizations on Kubernetes clusters. Kustomizer garbage collector keeps track of the applied resources and prunes the Kubernetes objects that were previously applied on the cluster but are missing from the current revision.
MetalLB
- medium.com/@charled.breteche: Kind, Cilium, MetalLB, and still no kube-proxy In this article I will show you how to add MetalLB into the mix to enable services of type LoadBalancer to work in your local cluster.
-- patrick.easte.rs: Forging an optimal MetalLB configuration MetalLB discovers services needing load balancers, allocates IP addresses, and advertises them. There are 2 primary modes for announcing load balancers: Layer 2 and 3 (BGP). Each mode has its pros and cons and this article compares them.
-- adaltas.com: Ingresses and Load Balancers in Kubernetes with MetalLB and nginx-ingress This tutorial will teach you how to use MetalLB and nginx-ingress to load-balance requests in a bare-metal Kubernetes cluster
+- patrick.easte.rs: Forging an optimal MetalLB configuration MetalLB discovers services needing load balancers, allocates IP addresses, and advertises them. There are 2 primary modes for announcing load balancers: Layer 2 and 3 (BGP). Each mode has its pros and cons and this article compares them.
+- adaltas.com: Ingresses and Load Balancers in Kubernetes with MetalLB and nginx-ingress This tutorial will teach you how to use MetalLB and nginx-ingress to load-balance requests in a bare-metal Kubernetes cluster
- itnext.io: Configuring routing for MetalLB in L2 mode In this article, you will discover how to configure source-based and policy-based routing for the external network on your cluster using MetalLB
Kubermatic Kubernetes Platform
- Kubermatic Kubernetes Platform 🌟 is an open source project to centrally manage the global automation of thousands of Kubernetes clusters across multicloud, on-prem and edge with unparalleled density and resilience.
-- thenewstack.io: Kubermatic Kubernetes Platform Beats Complexity Through Automation
+- thenewstack.io: Kubermatic Kubernetes Platform Beats Complexity Through Automation
Kubermatic Kubeone
@@ -9867,7 +9867,7 @@ elastic quotas - Effortless optimization at its finest!
KubExplorer
-- Pscheidl/kubexplorer Detects orphan configmaps and secrets in a Kubernetes cluster
+- Pscheidl/kubexplorer Detects orphan configmaps and secrets in a Kubernetes cluster
Kubescape
@@ -9875,15 +9875,15 @@ elastic quotas - Effortless optimization at its finest!
- Kubescape is a tool that provides risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.
-- armosec.io: Use Kubescape to check if your Kubernetes clusters are exposed to the latest K8s Symlink vulnerability (CVE-2021-25741)
+- armosec.io: Use Kubescape to check if your Kubernetes clusters are exposed to the latest K8s Symlink vulnerability (CVE-2021-25741)
- medium.com/@sheraznadeem1: Kubescape & Kubernetes Hardening- Demystified
- blog.devgenius.io: Scanning Kubernetes YAML Files for Security 🌟
-- infracloud.io: Securing Kubernetes Cluster using Kubescape and kube-bench In this article, you will discuss how you can secure a Kubernetes cluster using Kubescape and kube-bench
+- infracloud.io: Securing Kubernetes Cluster using Kubescape and kube-bench In this article, you will discuss how you can secure a Kubernetes cluster using Kubescape and kube-bench
Kubectl Connections
-
-
A Complete Guide to Kubectl exec 🌟 - This article provides a comprehensive guide to using kubectl exec, a crucial command for gaining shell access to containers within a Kubernetes cluster. It covers the necessity of shell access for debugging and configuration, introduces kubectl exec, details its components and parameters, compares it with docker exec and ssh, offers practical examples, discusses security implications, and provides troubleshooting tips.
+A Complete Guide to Kubectl exec 🌟 - This article provides a comprehensive guide to using kubectl exec, a crucial command for gaining shell access to containers within a Kubernetes cluster. It covers the necessity of shell access for debugging and configuration, introduces kubectl exec, details its components and parameters, compares it with docker exec and ssh, offers practical examples, discusses security implications, and provides troubleshooting tips.
-
@@ -9900,7 +9900,7 @@ elastic quotas - Effortless optimization at its finest!
VMware Tanzu Octant
-- vmware-tanzu/octant Highly extensible platform for developers to better understand the complexity of Kubernetes clusters. Octant is a tool for developers to understand how applications run on a Kubernetes cluster. It aims to be part of the developer’s toolkit for gaining insight and approaching complexity found in Kubernetes. Octant offers a combination of introspective tooling, cluster navigation, and object management along with a plugin system to further extend its capabilities.
+- vmware-tanzu/octant Highly extensible platform for developers to better understand the complexity of Kubernetes clusters. Octant is a tool for developers to understand how applications run on a Kubernetes cluster. It aims to be part of the developer’s toolkit for gaining insight and approaching complexity found in Kubernetes. Octant offers a combination of introspective tooling, cluster navigation, and object management along with a plugin system to further extend its capabilities.
Qovery Engine
@@ -9932,12 +9932,12 @@ elastic quotas - Effortless optimization at its finest!
AWS Karpenter kubernetes Autoscaler
-- Karpenter Just-in-time Nodes for Any Kubernetes Cluster. Karpenter simplifies Kubernetes infrastructure with the right nodes at the right time. Karpenter automatically launches just the right compute resources to handle your cluster’s applications. It is designed to let you take full advantage of the cloud with fast and simple compute provisioning for Kubernetes clusters.
-- techcrunch.com: AWS launches Karpenter, an open source autoscaler for Kubernetes clusters
+- Karpenter Just-in-time Nodes for Any Kubernetes Cluster. Karpenter simplifies Kubernetes infrastructure with the right nodes at the right time. Karpenter automatically launches just the right compute resources to handle your cluster’s applications. It is designed to let you take full advantage of the cloud with fast and simple compute provisioning for Kubernetes clusters.
+- techcrunch.com: AWS launches Karpenter, an open source autoscaler for Kubernetes clusters
- itnext.io: Karpenter: Open-Source, High-Performance Kubernetes Cluster Autoscaler
- blog.kloia.com: Karpenter Cluster Autoscaler
-- infoq.com: AWS Releases Multi-Cloud Kubernetes Autoscaler Karpenter
-- aws.amazon.com: Using Amazon EC2 Spot Instances with Karpenter Karpenter is a dynamic, high-performance cluster auto-scaling solution for the Kubernetes platform. In this blog post, we will look at how to use Karpenter with EC2 Spot Instances and handle Spot Instance interruptions.
+- infoq.com: AWS Releases Multi-Cloud Kubernetes Autoscaler Karpenter
+- aws.amazon.com: Using Amazon EC2 Spot Instances with Karpenter Karpenter is a dynamic, high-performance cluster auto-scaling solution for the Kubernetes platform. In this blog post, we will look at how to use Karpenter with EC2 Spot Instances and handle Spot Instance interruptions.
- makendran.hashnode.dev: Just-in-time Worker Nodes with Karpenter Karpenter is an open source project licensed under the Apache 2.0 license and it is a node-based scaling solution created for K8S. In an AWS EKS cluster, you cannot manage nodes directly. Instead, you have to use additional orchestration mechanisms such as node groups. Unless you use Karpenter — an open-source, flexible, high-performance Kubernetes cluster autoscaler.
- awstip.com: This Code Works! — Autoscaling An Amazon EKS Cluster with Karpenter — Part ⅓ In this three-part series, you will learn how to use Karpenter:
- Introduction and Karpenter vs Kubernetes Cluster Autoscaler
@@ -9955,7 +9955,7 @@ elastic quotas - Effortless optimization at its finest!
Kuby (easy deployments of Ruby Rails App)
-- Kuby Deploy Your Rails App the Easy Way. Kuby is a convention-over-configuration approach to deploying Rails apps. It makes the power of Docker and Kubernetes accessible to the average Rails developer without requiring a devops black belt.
+- Kuby Deploy Your Rails App the Easy Way. Kuby is a convention-over-configuration approach to deploying Rails apps. It makes the power of Docker and Kubernetes accessible to the average Rails developer without requiring a devops black belt.
- evilmartians.com: Kubing Rails: stressless Kubernetes deployments with Kuby
Direktiv
@@ -9975,20 +9975,20 @@ elastic quotas - Effortless optimization at its finest!
Mesh-kridik
- (chen-keinan/mesh-kridik)[https://github.com/chen-keinan/mesh-kridik] mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and is leveraged by OPA (Open Policy Agent) to enforce security rules.
-- kitploit.com: Mesh-Kridik
+- kitploit.com: Mesh-Kridik
kubewatch
-- bitnami-labs/kubewatch Watch k8s events and trigger Handlers. kubewatch is a Kubernetes watcher that currently publishes notification to available collaboration hubs/notification channels. Run it in your k8s cluster, and you will get event notifications through webhooks.
+- bitnami-labs/kubewatch Watch k8s events and trigger Handlers. kubewatch is a Kubernetes watcher that currently publishes notification to available collaboration hubs/notification channels. Run it in your k8s cluster, and you will get event notifications through webhooks.
Botkube
-- botkube.io BotKube is a messaging bot for monitoring and debugging Kubernetes clusters.
+- botkube.io BotKube is a messaging bot for monitoring and debugging Kubernetes clusters.
Robusta
-- Robusta Robusta is an open source platform for webhooks and automations. It contains a library of 50+ builtin actions.
-- home.robusta.dev: Why everyone should track Kubernetes changes and top four ways to do so Robusta is an event-triggered automations engine. Using Robusta you can subscribe to changes in a cluster (or multiple clusters) and publish that information to useful locations.
+- Robusta Robusta is an open source platform for webhooks and automations. It contains a library of 50+ builtin actions.
+- home.robusta.dev: Why everyone should track Kubernetes changes and top four ways to do so Robusta is an event-triggered automations engine. Using Robusta you can subscribe to changes in a cluster (or multiple clusters) and publish that information to useful locations.
- robusta-dev/krr Prometheus-based Kubernetes Resource Recommendations. Robusta KRR (Kubernetes Resource Recommender) is a CLI tool for optimizing resource allocation in Kubernetes clusters. It gathers pod usage data from Prometheus and recommends requests and limits for CPU and memory. This reduces costs and improves performance.
- blog.devops.dev: How to use the Kubernetes Resource Recommender tool in a GKE Cluster 🌟
@@ -10005,9 +10005,9 @@ elastic quotas - Effortless optimization at its finest!
- https://testkube.io 🌟
- kubeshop/testkube Kubernetes-native framework for test definition and execution
-- thenewstack.io: TestKube: A New Approach to Cloud Native Testing
-- thenewstack.io: Testkube: A Cloud Native Testing Framework for Kubernetes
-- piotrminkowski.com: Testing Java Apps on Kubernetes with Testkube
+- thenewstack.io: TestKube: A New Approach to Cloud Native Testing
+- thenewstack.io: Testkube: A Cloud Native Testing Framework for Kubernetes
+- piotrminkowski.com: Testing Java Apps on Kubernetes with Testkube
KuberLogic
@@ -10029,8 +10029,8 @@ elastic quotas - Effortless optimization at its finest!
Tackle
-- https://www.konveyor.io/tackle
-- redhat.com: How to streamline application portfolio modernization with Tackle Tackle is an open source tool that helps organizations migrate and modernize their application portfolio to leverage Kubernetes without risk of vendor lock-in.
+- https://konveyor.io/tackle
+- redhat.com: How to streamline application portfolio modernization with Tackle Tackle is an open source tool that helps organizations migrate and modernize their application portfolio to leverage Kubernetes without risk of vendor lock-in.
Azure Placement Policy Scheduler Plugins
@@ -10074,8 +10074,8 @@ elastic quotas - Effortless optimization at its finest!
Kpng. Kubernetes Proxy NG
-- kubernetes-sigs/kpng Reworking kube-proxy’s architecture
-- kubernetes.io: Use KPNG to Write Specialized kube-proxiers The post will show you how to create a specialized service kube-proxy style network proxier using Kubernetes Proxy NG kpng without interfering with the existing kube-proxy
+- kubernetes-sigs/kpng Reworking kube-proxy’s architecture
+- kubernetes.io: Use KPNG to Write Specialized kube-proxiers The post will show you how to create a specialized service kube-proxy style network proxier using Kubernetes Proxy NG kpng without interfering with the existing kube-proxy
Auto-portforward (apf)
@@ -10106,7 +10106,7 @@ elastic quotas - Effortless optimization at its finest!
The Hierarchical Namespace Controller (HNC)
-- kubernetes-sigs/hierarchical-namespaces: The Hierarchical Namespace Controller (HNC) Home of the Hierarchical Namespace Controller (HNC). Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy.
+- kubernetes-sigs/hierarchical-namespaces: The Hierarchical Namespace Controller (HNC) Home of the Hierarchical Namespace Controller (HNC). Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy.
Kratix
@@ -10118,7 +10118,7 @@ elastic quotas - Effortless optimization at its finest!
gRPC-Gateway
- grpc-ecosystem/grpc-gateway: gRPC-Gateway gRPC to JSON proxy generator following the gRPC HTTP spec
-- blog.logrocket.com: An all-in-one guide to gRPC-Gateway gRPC-Gateway is a plugin that generates a reverse proxy server for gRPC services that convert Restful/JSON into gRPC and vice versa.
+- blog.logrocket.com: An all-in-one guide to gRPC-Gateway gRPC-Gateway is a plugin that generates a reverse proxy server for gRPC services that convert Restful/JSON into gRPC and vice versa.
KubeOrbit. Test your app on kubernetes
@@ -10126,13 +10126,13 @@ elastic quotas - Effortless optimization at its finest!
Mizu API Traffic Viewer for Kubernetes
-- up9inc/mizu API traffic viewer for Kubernetes enabling you to view all API communication between microservices to help your debug and troubleshoot regressions. Think TCPDump and Wireshark re-invented for Kubernetes.
+- up9inc/mizu API traffic viewer for Kubernetes enabling you to view all API communication between microservices to help your debug and troubleshoot regressions. Think TCPDump and Wireshark re-invented for Kubernetes.
vcluster
- vcluster.com Virtual Kubernetes Clusters that run inside regular namespaces. Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It’s cheaper than creating separate full-blown clusters and it offers better multi-tenancy and isolation than regular namespaces.
-- thenewstack.io: Locking Down Kubernetes Containers with vcluster
-- salaboy.com: Building platforms on top of Kubernetes: VCluster and Crossplane In this tutorial, you’ll learn how to:
+- thenewstack.io: Locking Down Kubernetes Containers with vcluster
+- salaboy.com: Building platforms on top of Kubernetes: VCluster and Crossplane In this tutorial, you’ll learn how to:
- Create an isolated cluster with vcluster
- Package apps with Helm
- Submit a request for a “new environment” that will automatically create a new cluster and install the Helm chart using Crossplane
@@ -10141,7 +10141,7 @@ elastic quotas - Effortless optimization at its finest!
Kateyes
-- kateyes.co.uk Explore Kubernetes, visually! Kateyes is an application that provides a visual representation of the relationships between Kubernetes objects, from an application perspective.
+- kateyes.co.uk Explore Kubernetes, visually! Kateyes is an application that provides a visual representation of the relationships between Kubernetes objects, from an application perspective.
- blog.devops.dev: Kateyes — Visual Kubernetes Explorer Kubernetes is hard and so is exploring a Kubernetes cluster!
Keepass Secret
@@ -10155,14 +10155,14 @@ elastic quotas - Effortless optimization at its finest!
Komodor Workflows
-- komodor.com: Komodor Workflows: Automated Troubleshooting at the Speed of WHOOSH!
+- komodor.com: Komodor Workflows: Automated Troubleshooting at the Speed of WHOOSH!
Azure Eraser
-- github.com/Azure/eraser 🌟 🧹 Cleaning up images from Kubernetes nodes. Eraser is a tool that helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster
+- github.com/Azure/eraser 🌟 🧹 Cleaning up images from Kubernetes nodes. Eraser is a tool that helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster
-
+
Data Pipeline Workflow Schedulers
@@ -10207,7 +10207,7 @@ elastic quotas - Effortless optimization at its finest!
- K9s - Kubernetes CLI To Manage Your Clusters In Style! K9s provides a terminal UI to interact with your Kubernetes clusters. The aim of this project is to make it easier to navigate, observe and manage your applications in the wild. K9s continually watches Kubernetes for changes and offers subsequent commands to interact with your observed resources.
- medium.com/@fwiles: k9s EKS Context Error
- tonylixu.medium.com: K8s Tools — K9s, Terminal Based UI to Manage Your Cluster Introduction to K9s CLI, a K8s management tool
-- kubetools.io: Why K9s Should Be Your Go-To Tool for Kubernetes Management
+- kubetools.io: Why K9s Should Be Your Go-To Tool for Kubernetes Management
- medium.com/@gavinklfong: 8 tips to incredibly boost the efficiency of command execution on Kubernetes using k9s k9s —awesome text based graphical tool with powerful hotkey design
Pluto
@@ -10229,7 +10229,7 @@ elastic quotas - Effortless optimization at its finest!
Infrastructure as Code using Kubernetes. Config Connector
-- cloud.google.com/config-connector Config Connector is an open source Kubernetes addon that allows you to manage Google Cloud resources through Kubernetes.
+- cloud.google.com/config-connector Config Connector is an open source Kubernetes addon that allows you to manage Google Cloud resources through Kubernetes.
- medium.com/globant: Infrastructure as Code using Kubernetes
- Config Connector (KCC) is a solution to maintain Cloud Resources as Infrastructure as Code. It is built as an Open Source initiative and runs on Kubernetes clusters. As such, it leverages YAML files to maintain and operate such resources.
- Config Connector has two versions: an Add-On for Google Kubernetes Engine (GKE) clusters and a manual installation for other Kubernetes distributions.
@@ -10242,7 +10242,7 @@ elastic quotas - Effortless optimization at its finest!
Observability Monitoring Tools
-- github.com/oslabs-beta/oslabs KubernOcular is a free, open-source tool which harnesses the power of Prometheus and the Kubernetes-Client Node API to give developers an insightful and holistic view of Kubernetes clusters.
+- github.com/oslabs-beta/oslabs KubernOcular is a free, open-source tool which harnesses the power of Prometheus and the Kubernetes-Client Node API to give developers an insightful and holistic view of Kubernetes clusters.
- vladimirvivien/ktop A top-like tool for your Kubernetes clusters
- github.com/oslabs-beta/ClusterWatch ClusterWatch provides a visualization of the Kubernetes cluster architecture with detailed descriptions and stats. It also offers real-time metrics data, presented via Grafana charts, and built-in support for Prometheus and alerts.
@@ -10265,8 +10265,8 @@ elastic quotas - Effortless optimization at its finest!
AI Tools
-- kubetools.io: KoPylot: An AI-Powered Kubernetes Assistant for DevOps & Developers
-- chat.openai.com: Kube Debugger: A Kubernetes error debugger offering diagnostic and resolution guidance. You can copy and paste your Kubernetes error into the prompt, and the Kube debugger will give you step-by-step instructions to troubleshoot. This GPT will reduce the amount of time you spend troubleshooting Kubernetes errors. It requires the ChatGPT plus subscription.
+- kubetools.io: KoPylot: An AI-Powered Kubernetes Assistant for DevOps & Developers
+- chat.openai.com: Kube Debugger: A Kubernetes error debugger offering diagnostic and resolution guidance. You can copy and paste your Kubernetes error into the prompt, and the Kube debugger will give you step-by-step instructions to troubleshoot. This GPT will reduce the amount of time you spend troubleshooting Kubernetes errors. It requires the ChatGPT plus subscription.
Tweets
@@ -10317,14 +10317,14 @@ elastic quotas - Effortless optimization at its finest!
-
odigos - Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
-- Grafana OnCall OSS 🌟 - Grafana OnCall OSS es un sistema de gestión de guardias de código abierto para mejorar la colaboración y resolver incidentes más rápido, ahora en modo de mantenimiento.
-- Kubernetes: Un tour por los comandos básicos 🌟 - Este video de YouTube ofrece un recorrido por los comandos esenciales de Kubernetes, ideal para iniciarse en la herramienta.
+- Grafana OnCall OSS 🌟 - Grafana OnCall OSS es un sistema de gestión de guardias de código abierto para mejorar la colaboración y resolver incidentes más rápido, ahora en modo de mantenimiento.
+- Kubernetes: Un tour por los comandos básicos 🌟 - Este video de YouTube ofrece un recorrido por los comandos esenciales de Kubernetes, ideal para iniciarse en la herramienta.
- RBAC Wizard: Herramienta para visualizar y analizar la configuración RBAC de Kubernetes 🌟 - RBAC Wizard es una herramienta que ayuda a visualizar y analizar las configuraciones RBAC de tu clúster de Kubernetes, facilitando la gestión de permisos.
- Bank Vaults: Un Cuchillo Suizo para HashiCorp Vault en Kubernetes 🌟 - Bank Vaults es una herramienta CLI multifuncional para inicializar, desbloquear y configurar HashiCorp Vault, facilitando su integración y gestión en entornos Kubernetes.
- K3s vs Talos Linux 🌟 - Comparativa técnica entre K3s y Talos Linux, dos opciones para desplegar Kubernetes.
- Atomic ConfigMap Updates in Kubernetes: How Symlinks and Kubelet Make It Happen 🌟 - Este artículo explica cómo las actualizaciones atómicas de ConfigMap en Kubernetes son posibles gracias a la interacción entre los symlinks y el Kubelet, permitiendo cambios seguros y eficientes.
- Atomic ConfigMap Updates in Kubernetes: How Symlinks and Kubelet Make It Happen 🌟 - Este artículo explica cómo las actualizaciones atómicas de ConfigMap en Kubernetes son posibles gracias a la interacción entre los symlinks y el Kubelet, permitiendo cambios seguros y eficientes.
-- ASCIIFlow 🌟 - Herramienta para crear diagramas en ASCII en el navegador, útil para visualizar arquitecturas y flujos.
+- ASCIIFlow 🌟 - Herramienta para crear diagramas en ASCII en el navegador, útil para visualizar arquitecturas y flujos.
- Kubernetes Services and Load Balancing Explained - (Related to kubernetes-networking topic)
diff --git a/kubernetes-troubleshooting.html b/kubernetes-troubleshooting.html
index cc9aee23..d694ace9 100644
--- a/kubernetes-troubleshooting.html
+++ b/kubernetes-troubleshooting.html
@@ -7972,22 +7972,22 @@
Introduction
-- learnk8s.io: A visual guide on troubleshooting Kubernetes deployments 🌟
+- learnk8s.io: A visual guide on troubleshooting Kubernetes deployments 🌟
- medium: 5 tips for troubleshooting apps on Kubernetes
- managedkube.com: Troubleshooting a Kubernetes ingress
-- veducate.co.uk: How to fix in Kubernetes – Deleting a PVC stuck in status “Terminating”
-- thenewstack.io: 5 Best Practices to Back up Kubernetes
-- tennexas.com: Kubernetes Troubleshooting Examples
+- veducate.co.uk: How to fix in Kubernetes – Deleting a PVC stuck in status “Terminating”
+- thenewstack.io: 5 Best Practices to Back up Kubernetes
+- tennexas.com: Kubernetes Troubleshooting Examples
- levelup.gitconnected.com: 5 tips for troubleshooting apps on Kubernetes
- medium: Common Kubernetes Errors Made by Beginners [2021] 🌟
-- cloud.redhat.com: Troubleshooting Sandboxed Containers Operator
-- andydote.co.uk: The Problem with CPUs and Kubernetes
+- cloud.redhat.com: Troubleshooting Sandboxed Containers Operator
+- andydote.co.uk: The Problem with CPUs and Kubernetes
- medium: Better Debugging Environment for your Micro-Services
-- thenewstack.io: 6 Kubernetes Best Practices to Empower Devs to Troubleshoot
+- thenewstack.io: 6 Kubernetes Best Practices to Empower Devs to Troubleshoot
- youtube: 3 Ways to Detect Evil “Latest” Image Tags in Kubernetes - Kubevious The “latest” image tag is a disaster waiting to happen. In this video, you will learn how to detect usage of the latest images using 3 different methods.
-- thenewstack.io: Living with Kubernetes: Debug Clusters in 8 Commands 🌟
+- thenewstack.io: Living with Kubernetes: Debug Clusters in 8 Commands 🌟
- dzone.com: The Three Pillars of Kubernetes Troubleshooting 🌟 [ARCHIVED] Diving into how the three pillars of understanding, managing and preventing for Kubernetes troubleshooting, and how it helps to conceive of what’s needed to be able to properly troubleshoot real-world Kubernetes stacks that are the hallmark of complex, distributed systems.
-- freecodecamp.org: How to Simplify Kubernetes Troubleshooting
+- freecodecamp.org: How to Simplify Kubernetes Troubleshooting
- itnext.io: Distroless Container Debugging on K8s/OpenShift
- When people focusing more on the security of containers, distroless based images are frequently used to reduce the attack surface. In these images, the package manager, the non-dependent modules or libraries, even the shells are stripped off, only the app and its required dependencies are kept. For the statically linked executable, produced by golang for example, we can even use “scratch” as the base.
- The potential exploit of vulnerability is therefore greatly reduced. But, on the other hand, it is difficult to troubleshoot the application if even the shell is not available, leaving only the logs from the app.
@@ -7996,7 +7996,7 @@
- speakerdeck.com/mhausenblas (redhat): Troubleshooting Kubernetes apps
- medium.com/@andrewachraf: Detect crashes in your Kubernetes cluster using kwatch and Slack 🌟 Monitor all changes in your Kubernetes(K8s) cluster & detects crashes in your running apps in real time
-- research.nccgroup.com: Detection Engineering for Kubernetes clusters In this article you will learn how to detect anomalies in your cluster using Kubernetes Audit logs and Anomalies Detection Engineering.
+- research.nccgroup.com: Detection Engineering for Kubernetes clusters In this article you will learn how to detect anomalies in your cluster using Kubernetes Audit logs and Anomalies Detection Engineering.
- pauldally.medium.com: Kubernetes — Debugging NetworkPolicy (Part 1)
@@ -8007,8 +8007,8 @@
- tratnayake.dev: Oncall Adventures - When your Prometheus-Server mounted to GCE Persistent Disk on K8s is Full In this article, you will follow Thilina’s journey on debugging a failing Prometheus server on Kubernetes. The story starts with a wake-up call at 3.30 am 😅
-- sysdig.com: Understanding Kubernetes pod pending problems
-- blog.alexellis.io: How to Troubleshoot Applications on Kubernetes 🌟 In this article, you will learn a practical framework to troubleshoot applications deployed on Kubernetes:
+- sysdig.com: Understanding Kubernetes pod pending problems
+- blog.alexellis.io: How to Troubleshoot Applications on Kubernetes 🌟 In this article, you will learn a practical framework to troubleshoot applications deployed on Kubernetes:
- Is it there?
- Why isn’t it working?
- It starts, but doesn’t work
@@ -8023,7 +8023,7 @@
- martinheinz.dev: Backup-and-Restore of Containers with Kubernetes Checkpointing API Kubernetes v1.25 introduced Container Checkpointing API as an alpha feature. This provides a way to backup-and-restore containers running in Pods, without ever stopping them. This feature is primarily aimed at forensic analysis, but general backup-and-restore is something any Kubernetes user can take advantage of. So, let’s take a look at this brand-new feature and see how we can enable it in our clusters and leverage it for backup-and-restore or forensic analysis.
- madeeshafernando.medium.com: Capturing Heap Dumps of stateless Kubernetes pods before container termination and export to AWS S3
- faun.pub: Troubleshooting Kubernetes nodes storage space shortage on Aliyun (Alibaba Cloud) In this article, you will follow Stephen’s journey to identifying the root cause for cluster nodes running out of space on the Aliyun cloud
-- thenewstack.io: What David Flanagan Learned Fixing Kubernetes Clusters David Flanagan has fixed 50+ Kubernetes clusters as part of his YouTube series, ‘Klustered.’ He shared what he learned at Civo Navigate.
+- thenewstack.io: What David Flanagan Learned Fixing Kubernetes Clusters David Flanagan has fixed 50+ Kubernetes clusters as part of his YouTube series, ‘Klustered.’ He shared what he learned at Civo Navigate.
- github.com/metaleapca: metaleap-k8s-troubleshooting.pdf 🌟🌟🌟
- nicolasbarlatier.hashnode.dev: .NET Core Tip 2: How to troubleshoot Memory Leaks within a .NET Console application running in a Linux Docker Container in Kubernetes In this step-by-step guide, you will learn how to troubleshoot a memory leak in a .Net Core application running within a Kubernetes cluster.
- blog.devgenius.io: All You Need to Know about Debugging Kubernetes Cronjob Walkthrough tools & configs & knowledge used in Kubernetes cronjob/deployment debug. In this article, you will create and deploy a (broken) CronJob. Then you will debug it and in the process learn about environment variables, RBAC, pod resource configuration, logging, and more
@@ -8032,8 +8032,8 @@
- learnitguide.net: How To Troubleshoot Kubernetes Pods
- learnitguide.net: How to Check Memory Usage of a Pod in Kubernetes?
- alexsniffin.medium.com: Debugging Remotely with Go in Kubernetes In this tutorial, you will learn how to debug an application deployed in Kubernetes remotely using VS Code and Delve
-- thenewstack.io: Kubernetes Troubleshooting Primer A quick methodology for overcoming common error messages with examples of commands to help — useful for both the administrator and developer alike.
-- devzero.io: Kubernetes Debugging Tips
+- thenewstack.io: Kubernetes Troubleshooting Primer A quick methodology for overcoming common error messages with examples of commands to help — useful for both the administrator and developer alike.
+- devzero.io: Kubernetes Debugging Tips
- vik-y.medium.com: An easier way to auto-remediate memory leaks on Kubernetes!
- medium.com/@yusufkaratoprak: Advanced Troubleshooting Techniques in Kubernetes Pods
@@ -8043,10 +8043,10 @@
CPU Limits in Kubernetes: Deep Dive into Pod Throttling and Kernel Interactions 🌟 - This article provides an in-depth explanation of how CPU limits in Kubernetes function, detailing the underlying mechanisms involving the Linux Kernel and cgroups v2. It addresses the common issue of pods being throttled even when idle, exploring the complex interactions between Kubernetes, container runtimes, and the host operating system to shed light on performance impacts.
-
-
+
- groundcover.com: Failure Is an Option: How to Stay on Top of K8s Container Events Gain a deep understanding of how Kubernetes tracks container and Pod status, how it reports error information and how you can collect all of the above in an efficient way
-- decisivedevops.com: Kubernetes Events — News feed of your cluster Understand Kubernetes Events and learn to use kubectl events to monitor and troubleshoot your cluster’s issues effectively.
+- decisivedevops.com: Kubernetes Events — News feed of your cluster Understand Kubernetes Events and learn to use kubectl events to monitor and troubleshoot your cluster’s issues effectively.
Kubernetes Network Troubleshooting
@@ -8055,12 +8055,12 @@
Exit Codes in Containers and Kubernetes
-- komodor.com: Exit Codes In Containers & Kubernetes – The Complete Guide 🌟 In this article, you will learn everything there is to know about exit codes used by container engines to indicate reasons for container termination.
+- komodor.com: Exit Codes In Containers & Kubernetes – The Complete Guide 🌟 In this article, you will learn everything there is to know about exit codes used by container engines to indicate reasons for container termination.
ImagePullBackOff
-
-
10 Real-World Kubernetes Troubleshooting Scenarios and Solutions 🌟 - This article provides practical, hands-on solutions for common Kubernetes production issues. It details 10 real-world scenarios, including ImagePullBackOff due to private registry authentication failure, and offers exact kubectl commands and steps for diagnosis and resolution. It also touches upon cloud-managed Kubernetes solutions and IAM roles for registry authentication.
+10 Real-World Kubernetes Troubleshooting Scenarios and Solutions 🌟 - This article provides practical, hands-on solutions for common Kubernetes production issues. It details 10 real-world scenarios, including ImagePullBackOff due to private registry authentication failure, and offers exact kubectl commands and steps for diagnosis and resolution. It also touches upon cloud-managed Kubernetes solutions and IAM roles for registry authentication.
-
blog.ediri.io: Kubernetes: ImagePullBackOff! How to keep your calm and fix this like a pro!
@@ -8069,10 +8069,10 @@
CrashLoopBackOff
- medium.com: Kubernetes Tip: How To Disambiguate A Pod Crash To Application Or To Kubernetes Platform? (CrashLoopBackOff)
-- devtron.ai: Troubleshoot: Pod Crashloopbackoff
-- erkanerol.github.io: I wish pods were fully restartable Why are Pod not fully restartable in Kubernetes? Why is Kubernetes not restarting the Pod in CrashLoopBackOff?
+- devtron.ai: Troubleshoot: Pod Crashloopbackoff
+- erkanerol.github.io: I wish pods were fully restartable Why are Pod not fully restartable in Kubernetes? Why is Kubernetes not restarting the Pod in CrashLoopBackOff?
- pauldally.medium.com: Why Leaving Pods in CrashLoopBackOff Can Have a Bigger Impact Than You Might Think
-- sysdig.com: What is Kubernetes CrashLoopBackOff? And how to fix it 🌟 CrashLoopBackOff is a Kubernetes state representing a restart loop that is happening in a Pod: a container in the Pod is started but crashes and is then restarted over and over again. Learn what it is and how to fix it in this article
+- sysdig.com: What is Kubernetes CrashLoopBackOff? And how to fix it 🌟 CrashLoopBackOff is a Kubernetes state representing a restart loop that is happening in a Pod: a container in the Pod is started but crashes and is then restarted over and over again. Learn what it is and how to fix it in this article
- komodor.com: Kubernetes CrashLoopBackOff Error: What It Is and How to Fix It
Failed to Create Pod Sandbox
@@ -8085,14 +8085,14 @@
OOM Kills
-
-
OOMKilled in Kubernetes: Understanding and Preventing Hidden Memory Leaks 🌟 - This article explains the ‘OOMKilled’ status in Kubernetes, detailing how the Linux kernel’s Out-Of-Memory (OOM) Killer terminates pods when memory limits are exceeded. It covers common triggers such as incorrect resource limits, application memory leaks, traffic spikes, and resource competition among containers. The content also delves into the OOM Killer’s scoring mechanism and provides insights into identifying and resolving these issues to prevent production environment disruptions.
+OOMKilled in Kubernetes: Understanding and Preventing Hidden Memory Leaks 🌟 - This article explains the ‘OOMKilled’ status in Kubernetes, detailing how the Linux kernel’s Out-Of-Memory (OOM) Killer terminates pods when memory limits are exceeded. It covers common triggers such as incorrect resource limits, application memory leaks, traffic spikes, and resource competition among containers. The content also delves into the OOM Killer’s scoring mechanism and provides insights into identifying and resolving these issues to prevent production environment disruptions.
-
medium.com/@reefland: Tracking Down “Invisible” OOM Kills in Kubernetes An “Invisible” OOM Kill happens when a child process in a container is killed, not the init process. It is “invisible” to Kubernetes and not detected. What is OOM? well.. not a good thing.
- baykara.medium.com: A Gentle Inspection of OOMKilled in Kubernetes Quality of Service in Kubernetes
-- cloudyuga.guru: How does Kubernetes assign QoS class to pods through OOM score? This article discusses how to handle OOMKilled errors and how to configure Pod QoS to avoid them
-- sysdig.com: Kubernetes OOM and CPU Throttling Troubleshooting Memory and CPU problems. Do you know how memory and CPU usage can affect your cloud applications? In this article, you will discuss Out of Memory (OOM) and Throttling in Kubernetes.
+- cloudyuga.guru: How does Kubernetes assign QoS class to pods through OOM score? This article discusses how to handle OOMKilled errors and how to configure Pod QoS to avoid them
+- sysdig.com: Kubernetes OOM and CPU Throttling Troubleshooting Memory and CPU problems. Do you know how memory and CPU usage can affect your cloud applications? In this article, you will discuss Out of Memory (OOM) and Throttling in Kubernetes.
- medium.com/@bm54cloud: Stressing a Kubernetes Pod to Induce an OOMKilled Error Learn about memory requests and limits, and what happens when those limits are exceeded
- itnext.io: Kubernetes Silent Pod Killer Tracking down invisible OOM Kills in Kubernetes
- This article delves into the issue of “Invisible OOM Kills” in Kubernetes, where child processes getting OOM Killed go unnoticed.
@@ -8111,7 +8111,7 @@
Evited Pods
-- sysdig.com: Understanding Kubernetes Evicted Pods What does it mean that Kubernetes Pods are evicted? They are terminated, usually due to a lack of resources. But why does this happen?
+- sysdig.com: Understanding Kubernetes Evicted Pods What does it mean that Kubernetes Pods are evicted? They are terminated, usually due to a lack of resources. But why does this happen?
Stuck Namespace
@@ -8129,7 +8129,7 @@
Debugging Techniques and Strategies. Debugging with ephemeral containers
- The Hidden CPU Throttling Crisis in Kubernetes Clusters 🌟 - This article explains how Kubernetes CPU throttling, governed by the Linux kernel’s CFS scheduler with a 100ms time slice, can silently degrade application performance even when resource usage appears low. It highlights the disconnect between Kubernetes limits and typical monitoring timescales, leading to unexpected slowdowns and impacting user experience.
-- Kubernetes Troubleshooting: A Step-by-Step Guide 🌟 - A comprehensive, step-by-step guide to effectively troubleshoot issues within a Kubernetes environment. This resource likely covers common problems, diagnostic tools, and methodologies for resolving them.
+- Kubernetes Troubleshooting: A Step-by-Step Guide 🌟 - A comprehensive, step-by-step guide to effectively troubleshoot issues within a Kubernetes environment. This resource likely covers common problems, diagnostic tools, and methodologies for resolving them.
- Awesome Chaos Engineering - (Related to chaos-engineering topic)
-
Kubernetes Troubleshooting Guide: Common Pitfalls and Solutions 🌟 - A comprehensive guide to common Kubernetes troubleshooting scenarios, offering practical advice and solutions for developers and operators facing issues with pods, deployments, services, and networking.
@@ -8137,34 +8137,34 @@
-
-- loft.sh: Using Kubernetes Ephemeral Containers for Troubleshooting
-- How to quarantine pods
+- loft.sh: Using Kubernetes Ephemeral Containers for Troubleshooting
+- How to quarantine pods
- KDBG: Small Kubernetes debugging container KDBG (Kubernetes Debuger) is a small docker container based on lastest Alpine Linux image, used for debugging Kubernetes clusters from inside a pod.
-- inspektor-gadget Collection of gadgets for debugging and introspecting Kubernetes applications using BPF
+- inspektor-gadget Collection of gadgets for debugging and introspecting Kubernetes applications using BPF
-- learnk8s.io: A visual guide on troubleshooting Kubernetes deployments
+- learnk8s.io: A visual guide on troubleshooting Kubernetes deployments
- StatusBay is a tool that provides the missing visibility into the K8S deployment process. The main goal is to ease the experience of troubleshooting and debugging services in K8S and provide confidence while making changes.
- medium: Better Debugging Environment for your Micro-Services
-- codefresh.io: Using Telepresence 2 for Kubernetes debugging and local development
+- codefresh.io: Using Telepresence 2 for Kubernetes debugging and local development
- towardsdatascience.com: The Easiest Way to Debug Kubernetes Workloads The fastest and easiest way to debug and troubleshoot any application running on Kubernetes
- tetrate.io: How to debug microservices in Kubernetes with proxy, sidecar or service mesh?
-- rookout.com: The Definitive Guide To Kubernetes Application Debugging
-- thorsten-hans.com: Debugging apps in Kubernetes with Bridge Bridge to Kubernetes simplifies and streamlines the process of debugging applications running in Kubernetes. Debug any language using the tools you prefer and love.
+- rookout.com: The Definitive Guide To Kubernetes Application Debugging
+- thorsten-hans.com: Debugging apps in Kubernetes with Bridge Bridge to Kubernetes simplifies and streamlines the process of debugging applications running in Kubernetes. Debug any language using the tools you prefer and love.
- marketplace.visualstudio.com: Bridge to Kubernetes (VSCode)
- marketplace.visualstudio.com: Bridge to Kubernetes (Visual Studio) Bridge to Kubernetes for Visual Studio 2019
-- thenewstack.io: Living with Kubernetes: 12 Commands to Debug Your Workloads 🌟 Kubernetes can’t fix broken code. But if your container won’t start or the app gets intermittent errors, here’s how you can start debugging it. Most of the commands presented in the article will use kubectl or plugins which you can install via krew.
+- thenewstack.io: Living with Kubernetes: 12 Commands to Debug Your Workloads 🌟 Kubernetes can’t fix broken code. But if your container won’t start or the app gets intermittent errors, here’s how you can start debugging it. Most of the commands presented in the article will use kubectl or plugins which you can install via krew.
- opensource.googleblog.com: Introducing Ephemeral Containers Ephemeral containers are a new type of container that are part of the Kubernetes core API. An Ephemeral Container may be added to an existing Pod for administrative actions like debugging, it runs until it exits, and it won’t be restarted. An ephemeral container runs within the Pod’s existing resource allocation and shares common container namespaces.
-- linkedin.com: Kubernetes Ephemeral Containers | Bibin Wilson Ephemeral Containers is one of the k8s beta features. The following command will add the debug-image container to the running frontend pod and take an exec session for debugging:
kubectl debug -it pods/frontend --image=debug-image
+- linkedin.com: Kubernetes Ephemeral Containers | Bibin Wilson Ephemeral Containers is one of the k8s beta features. The following command will add the debug-image container to the running frontend pod and take an exec session for debugging:
kubectl debug -it pods/frontend --image=debug-image
- sumanthkumarc.medium.com: Debugging namespace deletion issue in Kubernetes
- medium.com/linux-shots: Debug Kubernetes Pods Using Ephemeral Container
- medium.com/@blgreco72: Debugging Kubernetes Services Locally 🌟 There are various approaches for debugging Microservices hosted within Kubernetes. The approach used here does not alter the Kubernetes cluster in anyway to support developing Microservices, running external to the cluster, within the developer’s IDE. This is accomplished by mapping ports on the developer’s workstation to services that are normally only accessible from containers running within the cluster.
- zendesk.engineering: Debugging containerd
- heka-ai.medium.com: Introduction to Debugging: locally and live on Kubernetes with VSCode 🌟 In this article, you’ll learn how to debug your code in real-time on a Pod running on Kubernetes using VS Code
-- iximiuz.com: Kubernetes Ephemeral Containers and kubectl debug Command 🌟 Learn how to use Ephemeral Containers to debug Kubernetes workloads with and without the kubectl debug command
+- iximiuz.com: Kubernetes Ephemeral Containers and kubectl debug Command 🌟 Learn how to use Ephemeral Containers to debug Kubernetes workloads with and without the kubectl debug command
- eminaktas.medium.com: Debug Containerd in Production In this article, you will learn how you can debug containerd with VSCode in a remote production environment.
- medium.com/@alex.ivenin: Exploring ephemeral containers in kubernetes 🌟 Ephemeral containers, a feature that was introduced in Kubernetes 1.16 as an alpha release, advanced to beta status in version 1.23, and has finally graduated to stable status in Kubernetes 1.25. This capability provides an easy and safe way to debug running containers in a pod, without requiring full access to the underlying node.
- labs.iximiuz.com: How to work with container images using ctr ctr is a command-line client shipped as part of the containerd project. If you have containerd running on a machine, chances are the ctr binary is also present there.
@@ -8173,11 +8173,11 @@
Troubleshooting Tools
-- The Definitive Guide to Importing Your Cloud Resources into IaC - (Related to iac topic)
-- RKE2 Standalone Disaster Recovery Guide - (Related to kubernetes-backup-migrations topic)
+- The Definitive Guide to Importing Your Cloud Resources into IaC - (Related to iac topic)
+- RKE2 Standalone Disaster Recovery Guide - (Related to kubernetes-backup-migrations topic)
- KubeUI: A Desktop Kubernetes Client - (Related to kubernetes-tools topic)
-
-
A Complete Guide to Kubectl exec - (Related to kubernetes-tools topic)
+A Complete Guide to Kubectl exec - (Related to kubernetes-tools topic)
-
github.com/replicatedhq/troubleshoot Troubleshoot is a framework for collecting and analyzing diagnostic information about a Kubernetes cluster. The framework is customizable and allows third-party application developers to create troubleshoot specs that can be run by cluster operators.
@@ -8187,7 +8187,7 @@
Komodor
- komodor.com Turn troubleshooting chaos into clarity. Komodor is an observability tool that gives you insight into what’s happening with your clusters and workloads. It integrates tools that we all use, like Datadog, Okta, LaunchDarkly, and PagerDuty.
-- komodor.com: Kubernetes Troubleshooting: The Complete Guide 🌟
+- komodor.com: Kubernetes Troubleshooting: The Complete Guide 🌟
Palaemon
@@ -8205,7 +8205,7 @@
Kubeshark
-- kubetools.io: Kubeshark – API Traffic Analyzer for Kubernetes
+- kubetools.io: Kubeshark – API Traffic Analyzer for Kubernetes
Slides
@@ -8218,7 +8218,7 @@
Click to expand!
-
+
Tweets
diff --git a/kubernetes-tutorials.html b/kubernetes-tutorials.html
index b03b8a12..ee961687 100644
--- a/kubernetes-tutorials.html
+++ b/kubernetes-tutorials.html
@@ -7769,31 +7769,31 @@
Introduction
-
-
AKS Labs - Introduction 🌟 - This resource provides an introduction to AKS Labs, a series of workshops designed for hands-on learning of Azure Kubernetes Service (AKS). It covers deploying, scaling, and managing containerized applications on AKS, with featured workshops on getting started, automated cluster deployment, and Istio Service Mesh implementation.
+AKS Labs - Introduction 🌟 - This resource provides an introduction to AKS Labs, a series of workshops designed for hands-on learning of Azure Kubernetes Service (AKS). It covers deploying, scaling, and managing containerized applications on AKS, with featured workshops on getting started, automated cluster deployment, and Istio Service Mesh implementation.
-
-
kubernetes.io: Kubernetes Tutorials Official documentation from Kubernetes. One can go through this official documentation and can learn much more about Kubernetes.
+kubernetes.io: Kubernetes Tutorials Official documentation from Kubernetes. One can go through this official documentation and can learn much more about Kubernetes.
-- devopscube.com: Kubernetes Tutorials For Beginners: Getting Started Guide
-- Intoduction to Kubernetes (slides, beginners and advanced)
+- devopscube.com: Kubernetes Tutorials For Beginners: Getting Started Guide
+- Intoduction to Kubernetes (slides, beginners and advanced)
- medium.com: Kubernetes 101: Pods, Nodes, Containers, and Clusters
- medium.com: Learn Kubernetes in Under 3 Hours: A Detailed Guide to Orchestrating Containers
-- kubernetestutorials.com: Install and Deploy Kubernetes on CentOs 7
+- kubernetestutorials.com: Install and Deploy Kubernetes on CentOs 7
- medium.com: Simplifying orchestration with Kubernetes
- aquasec.com: 70 Best Kubernetes Tutorials Valuable Kubernetes tutorials from multiple sources, classified into the following categories: Kubernetes AWS and Azure tutorials, networking tutorials, clustering and federation tutorials and more.
-- cloud.google.com: kubernetes comic Learn about kubernetes and how you can use it for continuous integration and delivery.
+- cloud.google.com: kubernetes comic Learn about kubernetes and how you can use it for continuous integration and delivery.
- magalix.com: Kubernetes 101 - Concepts and Why It Matters
- Dzone refcard: Getting Started with Kubernetes
- magalix.com: The Best Kubernetes Tutorials
- 35 Advanced Tutorials to Learn Kubernetes
-- freecodecamp.org: The Kubernetes Handbook 🌟
+- freecodecamp.org: The Kubernetes Handbook 🌟
- youtube: Kubernetes Pods and ReplicaSets explained
- medium: DraftKings Kubernetes Workshop: Hands-on Learning in K8s (with Video Walkthrough)
-- 100 Days Of Kubernetes: 100daysofkubernetes.io 100 Days of Kubernetes is the challenge in which we aim to learn something new related to Kubernetes each day across 100 Days!!!
+- 100 Days Of Kubernetes: 100daysofkubernetes.io 100 Days of Kubernetes is the challenge in which we aim to learn something new related to Kubernetes each day across 100 Days!!!
- youtube playlist: Thetips4you - Kubernetes Tutorial for Beginners HPA, Deployments, YAML, Jenkins, etc.
- youtube playlist: DevNation Lessons: Kubernetes Fundamentals
- amazee.io: Master the Fundamentals of K8s: Kubernetes 101 video series with Jeff Geerling
@@ -7828,9 +7828,9 @@
- javarevisited.blogspot.com: Top 5 Online Courses to Learn Kubernetes in 2022 - Best of Lot
- youtube: Kubernetes for Sysadmins – Kelsey Hightower at PuppetConf 2016 🌟🌟🌟This is the most famous Kubernetes talk of all time, where kelseyhightower explains the Kubernetes scheduler using Tetris.
-
-
educative.io/courses/the-kubernetes-course: Learn Kubernetes: A Deep Dive 🌟🌟🌟 Kubernetes helps deploy and manage containerized applications at scale. It abstracts the underlying infrastructure so it doesn’t matter if you’re deploying your applications to Amazon Web Services, Microsoft Azure, or your own on-premises datacenter. Ready to get started?
+educative.io/courses/the-kubernetes-course: Learn Kubernetes: A Deep Dive 🌟🌟🌟 Kubernetes helps deploy and manage containerized applications at scale. It abstracts the underlying infrastructure so it doesn’t matter if you’re deploying your applications to Amazon Web Services, Microsoft Azure, or your own on-premises datacenter. Ready to get started?
-- educative.io/courses/the-kubernetes-course: Pods Its true that K8s runs containerized apps. But, you can:t run container directly on K8s cluster – containers always run inside of Pods. Pods: Intro to Pods in Kubernetes:
+- educative.io/courses/the-kubernetes-course: Pods Its true that K8s runs containerized apps. But, you can:t run container directly on K8s cluster – containers always run inside of Pods. Pods: Intro to Pods in Kubernetes:
- Pods & containers
- Pod anatomy
- Pods as unit of scaling
@@ -7842,7 +7842,7 @@
-
blog.getambassador.io: How to Learn Kubernetes: Prerequisites, Paths, and Resources 🌟
-- devopscube.com: How to Learn Kubernetes (Complete Roadmap) 🌟🌟🌟 A roadmap to learn Kubernetes from scratch (Beginner to Advanced level)
+- devopscube.com: How to Learn Kubernetes (Complete Roadmap) 🌟🌟🌟 A roadmap to learn Kubernetes from scratch (Beginner to Advanced level)
@@ -7854,10 +7854,10 @@
Red Hat Training & Certification Community - The Red Hat Customer Portal’s community section, previously the Red Hat Learning Community, offers resources for learning and certification related to Red Hat products, including OpenShift and Kubernetes. It provides access to training materials, e-books, and videos to supplement learning journeys.
-
-
katacoda.com Interactive Learning and Training Platform for Software Engineers
+katacoda.com Interactive Learning and Training Platform for Software Engineers
-- kubernetesbyexample.com
-- Play with Kubernetes A simple, interactive and fun playground to learn Kubernetes
+- kubernetesbyexample.com
+- Play with Kubernetes A simple, interactive and fun playground to learn Kubernetes
- udemy.com: Learn DevOps: The Complete Kubernetes Course
@@ -7868,31 +7868,31 @@
- javarevisited.blogspot.com: Top 5 Free Courses to Learn Kubernetes for Developers and DevOps Engineers
- kodekloud.com
-- training.linuxfoundation.org: Introduction to Kubernetes (LFS158x) Want to learn Kubernetes? Get an in-depth primer on this powerful system for managing containerized applications in this free course.
+- training.linuxfoundation.org: Introduction to Kubernetes (LFS158x) Want to learn Kubernetes? Get an in-depth primer on this powerful system for managing containerized applications in this free course.
- civo.com/academy 🌟🌟🌟 Learn Kubernetes with Civo Academy. Learn everything you need to know to get started with Kubernetes. Learn Kubernetes for free. We’ve created over 50 video guides and tutorials that will help you navigate Kubernetes: from understanding the basic need for and function of containers, to launching and scaling your first clusters.
- medium.com/javarevisited: 8 Best Free Kubernetes Courses for Beginners in 2022 Learn Kubernetes using these free online training courses and add an in-demand skill to your colorful resume.
-- udemy.com: Just enough kubernetes to be dangerous (free)
-- udemy.com: Learn Devops Kubernetes deployment by kops and terraform (free) Comprehensive Nginx deployment to Kubernetes on AWS by using kops and terraform
-- edx.org: Introduction to Kubernetes (free)
-- udemy.com: Containers 101 (free) Building and deploying containerize applications with Kubernetes, Docker and Helm
+- udemy.com: Just enough kubernetes to be dangerous (free)
+- udemy.com: Learn Devops Kubernetes deployment by kops and terraform (free) Comprehensive Nginx deployment to Kubernetes on AWS by using kops and terraform
+- edx.org: Introduction to Kubernetes (free)
+- udemy.com: Containers 101 (free) Building and deploying containerize applications with Kubernetes, Docker and Helm
-- devopswithkubernetes.com Introductory course to Kubernetes with K3s and GKE
+- devopswithkubernetes.com Introductory course to Kubernetes with K3s and GKE
K8s Diagrams
Kubernetes Networking
-- Implementing Istio From Start To Finish - (Related to istio topic)
+- Implementing Istio From Start To Finish - (Related to istio topic)
Kubernetes Troubleshooting
-- Kubernetes Troubleshooting: A Step-by-Step Guide - (Related to kubernetes-troubleshooting topic)
+- Kubernetes Troubleshooting: A Step-by-Step Guide - (Related to kubernetes-troubleshooting topic)
- Kubernetes Troubleshooting Guide: Common Pitfalls and Solutions - (Related to kubernetes-troubleshooting topic)
-
Kubernetes Services and Load Balancing Explained - (Related to kubernetes-networking topic)
-
-
cloudogu/k8s-diagrams A collection of diagrams explaining kubernetes by cloudogu, written in PlantUML.
+cloudogu/k8s-diagrams A collection of diagrams explaining kubernetes by cloudogu, written in PlantUML.
Learning Tools
@@ -7900,10 +7900,10 @@
- Build Your Own X 🌟 - A repository offering step-by-step guides to recreate various technologies from scratch, promoting deep understanding through practical implementation. It covers a wide range of domains including AI, databases, operating systems, and networking.
- Quiz Grader - (Related to ai topic)
- DevOps Roadmap for 2026 - (Related to devops topic)
-- What is Podman and How Does it Compare to Docker? - (Related to container-managers topic)
-- Back of the Napkin Guide to Updating Jenkins - (Related to jenkins topic)
+- What is Podman and How Does it Compare to Docker? - (Related to container-managers topic)
+- Back of the Napkin Guide to Updating Jenkins - (Related to jenkins topic)
- Automating Kubernetes Deployments with Helm Charts - (Related to helm topic)
-- useHooks - React Hooks Library - (Related to javascript topic)
+- useHooks - React Hooks Library - (Related to javascript topic)
Neptune
@@ -7916,7 +7916,7 @@
Videos
- Open Source Friday: Spec Kit - What it is, the problems it solves, and how clear specs make collaboration work - A YouTube video discussing Spec Kit, explaining its purpose, the challenges it addresses, and how clear specifications facilitate effective collaboration in software development.
-- Openshift Baremetal - Installer’s Bake-off: Agent vs Assisted vs IPI - Comparativa técnica de los métodos de instalación de OpenShift en baremetal: Agent, Assisted e IPI, para ayudarte a elegir el más adecuado.
+- Openshift Baremetal - Installer’s Bake-off: Agent vs Assisted vs IPI - Comparativa técnica de los métodos de instalación de OpenShift en baremetal: Agent, Assisted e IPI, para ayudarte a elegir el más adecuado.
Click to expand!
@@ -7939,7 +7939,7 @@
-- Kubernetes para principiantes - La guía definitiva para principiantes absolutos 🌟 - Una playlist de YouTube que ofrece una guía definitiva y completa sobre Kubernetes para principiantes absolutos, cubriendo conceptos fundamentales y prácticos.
+- Kubernetes para principiantes - La guía definitiva para principiantes absolutos 🌟 - Una playlist de YouTube que ofrece una guía definitiva y completa sobre Kubernetes para principiantes absolutos, cubriendo conceptos fundamentales y prácticos.
diff --git a/kubernetes.html b/kubernetes.html
index a25ae13e..5b33caec 100644
--- a/kubernetes.html
+++ b/kubernetes.html
@@ -9056,7 +9056,7 @@
- Memes
-
+
Must know Kubernetes concepts
@@ -9078,80 +9078,80 @@
- cloud.google.com: What is Kubernetes? 🌟
- Kubernetes Glossary 🌟
-- “Kubernetes magic is in enterprise standardization, not app portability” (Kelsey Hightower) 🌟
-- twitter.com/kubernetesio
+- “Kubernetes magic is in enterprise standardization, not app portability” (Kelsey Hightower) 🌟
+- twitter.com/kubernetesio
- techbeacon.com: 25 Kubernetes experts you should follow on Twitter
- enterprisersproject.com: Kubernetes: Everything you need to know (2020) 🌟
-- padok.fr: Kubernetes’ Architecture: Understanding the components and structure of clusters 🌟
+- padok.fr: Kubernetes’ Architecture: Understanding the components and structure of clusters 🌟
- opensource.com: Explaining Kubernetes in 10 minutes using an analogy
- medium: A Practical Step-by-Step Guide to Understanding Kubernetes Deploy a distributed application and understand key underlying concepts.
- medium: Kubernetes, a practical introduction
- itnext.io: Kubernetes is Hard! 🌟 But, where there’s Kubernetes, there’s a way!
- medium: Starting with kubernetes
-- thenewstack.io: Kubernetes Is the New Standard for Computing, Including the Edge
-- thenewstack.io: How does kubernetes work?
-- cloudsavvyit.com: How Does Kubernetes Work?
+- thenewstack.io: Kubernetes Is the New Standard for Computing, Including the Edge
+- thenewstack.io: How does kubernetes work?
+- cloudsavvyit.com: How Does Kubernetes Work?
- elmanytas.es: Kubernetes para impostores III
- enterprisersproject.com: How to explain Kubernetes in plain English How do you explain Kubernetes and orchestration to non-technical people? Listen to the experts
-- maximilianmichels.com: Kubernetes in a Nutshell: 10 Things You Need to Know
-- brennerm.github.io: Kubernetes Overview Diagrams 🌟
-- thenewstack.io: Kubernetes Lifecycle Management! So Important! (Day 0, Day 1, Day 2) 🌟
+- maximilianmichels.com: Kubernetes in a Nutshell: 10 Things You Need to Know
+- brennerm.github.io: Kubernetes Overview Diagrams 🌟
+- thenewstack.io: Kubernetes Lifecycle Management! So Important! (Day 0, Day 1, Day 2) 🌟
- opensource.com: A beginner’s guide to Kubernetes container orchestration Understanding the building blocks of container orchestration makes it easier to get started with Kubernetes.
- luminousmen.com: Kubernetes 101
-- css-tricks.com: Kubernetes Explained Simply: Containers, Pods and Images
-- auth0.com: Kubernetes Tutorial - Step by Step Introduction to Basic Concepts Learn about the basic Kubernetes concepts while deploying a sample application on a real cluster.
-- thenewstack.io: Why developers should learn kubernetes
-- thenewstack.io: This Week in Programming: Kubernetes from Day One? 🌟
-- nextplatform.com: KUBERNETES EXPANDS FROM CONTAINERS TO INFRASTRUCTURE MANAGEMENT 🌟 More and more in the middleware layer, not in the hardware
-- thenewstack.io: Monolithic Development Practices Kill Powerful Kubernetes Benefits 🌟🌟 “It’s not about the economy of data, it’s about speed and nimbleness of data. The benefits of using Kubernetes and microservices is incredible — just make sure you know how to fully wield its power!”
+- css-tricks.com: Kubernetes Explained Simply: Containers, Pods and Images
+- auth0.com: Kubernetes Tutorial - Step by Step Introduction to Basic Concepts Learn about the basic Kubernetes concepts while deploying a sample application on a real cluster.
+- thenewstack.io: Why developers should learn kubernetes
+- thenewstack.io: This Week in Programming: Kubernetes from Day One? 🌟
+- nextplatform.com: KUBERNETES EXPANDS FROM CONTAINERS TO INFRASTRUCTURE MANAGEMENT 🌟 More and more in the middleware layer, not in the hardware
+- thenewstack.io: Monolithic Development Practices Kill Powerful Kubernetes Benefits 🌟🌟 “It’s not about the economy of data, it’s about speed and nimbleness of data. The benefits of using Kubernetes and microservices is incredible — just make sure you know how to fully wield its power!”
- dev.to: Getting Started Tutorial for Learning Kubernetes 🌟
-- tech.showmax.com: Developers’ basic guide to kubernetes
+- tech.showmax.com: Developers’ basic guide to kubernetes
- dev.to: How to start with Kubernetes for begginer
-- blogs.mulesoft.com - K8s: 8 questions about Kubernetes
-- devcentral.f5.com: What is Kubernetes?
-- docs.google.com: Kubernetes For Everyone 🌟🌟 A consolidated document on Kubernetes by: Pavan Belagatti
+- blogs.mulesoft.com - K8s: 8 questions about Kubernetes
+- devcentral.f5.com: What is Kubernetes?
+- docs.google.com: Kubernetes For Everyone 🌟🌟 A consolidated document on Kubernetes by: Pavan Belagatti
- hackernoon.com: The Ultimate Beginners Guide To Kubernetes and Container Orchestration
-- k21academy.com: Kubernetes Architecture. An Introduction to Kubernetes Components
+- k21academy.com: Kubernetes Architecture. An Introduction to Kubernetes Components
- dzone: Introduction To Kubernetes 🌟 An orchestration tool takes care of provisioning and deployment, allocation of resources, load balancing, and many other important aspects of any system.
-- weave.works: Kubernetes components that make up its architecture 🌟 Great intro
+- weave.works: Kubernetes components that make up its architecture 🌟 Great intro
- dzone refcard: Advanced kubernetes 🌟
-- redhat.com: Kubernetes basics for sysadmins Learn when Kubernetes can be effectively used and how the containers it manages might be better than virtual machines.
-- redhat.com: Kubernetes Components - A sysadmin’s guide to basic Kubernetes components 🌟 Kubernetes control plane nodes and worker nodes, their features, and how they interact.
-- learnsteps.com: How Kubernetes works on reconciler pattern 🌟
-- devopsunlocked.com: Kubernetes: Learning Material
-- cncf.io: Kubernetes 101: An Introduction 🌟
+- redhat.com: Kubernetes basics for sysadmins Learn when Kubernetes can be effectively used and how the containers it manages might be better than virtual machines.
+- redhat.com: Kubernetes Components - A sysadmin’s guide to basic Kubernetes components 🌟 Kubernetes control plane nodes and worker nodes, their features, and how they interact.
+- learnsteps.com: How Kubernetes works on reconciler pattern 🌟
+- devopsunlocked.com: Kubernetes: Learning Material
+- cncf.io: Kubernetes 101: An Introduction 🌟
- millionvisit.blogspot.com: Kubernetes for Developers #1: Kubernetes Architecture and Features 🌟
-- redhat.com: Start learning Kubernetes from your local machine
+- redhat.com: Start learning Kubernetes from your local machine
- medium: Pratyush Mathur - Kubernetes Architecture
- medium: Kubernetes Fundamentals For Absolute Beginners: Architecture & Components
-- learnsteps.com: What is a control plane? Basics on Kubernetes
-- infoworld.com: No one wants to manage Kubernetes anymore 🌟 The availability of solid and varied managed kubernetes options has seen more and more companies shy away from managing their own clusters.
-- eximiaco.tech: when to choose Kubernetes? 🌟
-- thenewstack.io: Living with Kubernetes: Cluster Upgrades 🌟
-- thenewstack.io: 5 Things Developers Need to Know About Kubernetes Management
+- learnsteps.com: What is a control plane? Basics on Kubernetes
+- infoworld.com: No one wants to manage Kubernetes anymore 🌟 The availability of solid and varied managed kubernetes options has seen more and more companies shy away from managing their own clusters.
+- eximiaco.tech: when to choose Kubernetes? 🌟
+- thenewstack.io: Living with Kubernetes: Cluster Upgrades 🌟
+- thenewstack.io: 5 Things Developers Need to Know About Kubernetes Management
- How to handle environment variables with Kubernetes? 🌟
-- weave.works: The Definitive Guide to Kubernetes in Production 🌟🌟
+- weave.works: The Definitive Guide to Kubernetes in Production 🌟🌟
- vmblog.com: The Rise of Modern Day Kubernetes Operations
-- thenewstack.io: What Workloads Do Businesses Run on Kubernetes?
+- thenewstack.io: What Workloads Do Businesses Run on Kubernetes?
- itnext.io: The subtleties of ensuring zero downtime during pod lifecycle events in Kubernetes
-- tutorialworks.com: The differences between Docker, containerd, CRI-O and runc Since Docker kicked off this explosion in containers, there’s been a growing family of tools and standards to help govern how to use this technology.
-- searchitoperations.techtarget.com: Ensure Kubernetes high availability with master node planning Kubernetes ensures high availability in its worker nodes, but for a mission-critical workload, IT teams should take these extra steps for redundancy in the master node components.
-- thenewstack.io: The New Stack’s Top Kubernetes Stories of 2021
-- ostechnix.com: Kubernetes Features Explained In Detail
-- learnsteps.com: Kubernetes: What to learn from a long term perspective
+- tutorialworks.com: The differences between Docker, containerd, CRI-O and runc Since Docker kicked off this explosion in containers, there’s been a growing family of tools and standards to help govern how to use this technology.
+- searchitoperations.techtarget.com: Ensure Kubernetes high availability with master node planning Kubernetes ensures high availability in its worker nodes, but for a mission-critical workload, IT teams should take these extra steps for redundancy in the master node components.
+- thenewstack.io: The New Stack’s Top Kubernetes Stories of 2021
+- ostechnix.com: Kubernetes Features Explained In Detail
+- learnsteps.com: Kubernetes: What to learn from a long term perspective
- medium: Do I need to learn Kubernetes?
- divya-mohan0209.medium.com: Getting started with K8s in 2022 And a list of resources structured to help you learn!
-- docs.google.com: Kubernetes For Everyone
+- docs.google.com: Kubernetes For Everyone
- medium.com/paypal-tech: Scaling Kubernetes to Over 4k Nodes and 200k Pods Learn the challenges PayPal had to face when they started scaling the cluster to over 4000 nodes and 200k pods.
-- learnsteps.com: What is kubelet and what it does: Basics on Kubernetes
+- learnsteps.com: What is kubelet and what it does: Basics on Kubernetes
- pauldally.medium.com: Kubernetes Application High-Availability — Part 1 (The Very-Basic Basics)
-- buttondown.email: Two reasons Kubernetes is so complex
+- buttondown.email: Two reasons Kubernetes is so complex
- opensource.com: A guide to Kubernetes architecture Learn how the different components of Kubernetes architecture fit together so you can be better equipped to diagnose problems, maintain a healthy cluster, and optimize your own workflow.
- medium.com/@olivier.gaumond: Why am I able to bind a privileged port in my container without the NET_BIND_SERVICE capability?
-- kubesphere.io: Kubernetes High Availability Essential Practices Simply Explained
+- kubesphere.io: Kubernetes High Availability Essential Practices Simply Explained
- ecem.dev: Kubernetes Basics, Core Components & Yaml Files
- medium.com/netcracker: Version Control of Configuration Files Using Kubernetes
- If your applications have configuration files, following situation must be familiar to you: you develop an application, and then you create a configuration file and document it. After a while, you need to add some settings as the old ones do not meet all the requirements and, in general, it is better to change the structure.
@@ -9160,24 +9160,24 @@
- blog.devgenius.io: Choosing an Optimal Kubernetes Worker Node Size for Your Startup 🌟
-- blog.scaleway.com: How to deploy and distribute the workload on a multi-cloud Kubernetes environment 🌟 This article will guide you through the best practices to deploy and distribute the workload on a multi-cloud Kubernetes environment
+- blog.scaleway.com: How to deploy and distribute the workload on a multi-cloud Kubernetes environment 🌟 This article will guide you through the best practices to deploy and distribute the workload on a multi-cloud Kubernetes environment
- cloudtechtwitter.com: KubeApiServer components 🌟 Kube API Server is the only component that as a user we will directly interact with.
- medium.com/@portainerio: Kubernetes, the ultimate enabler of automation
-- marcusnoble.co.uk: Managing Kubernetes without losing your cool 🌟 In this article, you will find 10 tips for working with Kubernetes clusters all day long.
+- marcusnoble.co.uk: Managing Kubernetes without losing your cool 🌟 In this article, you will find 10 tips for working with Kubernetes clusters all day long.
- cloudtechtwitter.com: Introduction to Kubernetes 🌟🌟🌟
- medium.com/@kajan26: The Myth of scalability in Kubernetes
- medium.com/@raymon_dut: What’s the relationShip between Pod, Deployment, ReplicaSet, and Service in Kubernetes? 🌟 In this article, you will work out the relationships between Pod, Deployment, ReplicaSet, and Service in Kubernetes by using kubectl and inspecting a live deployment.
-- cloudnatively.com: The State of Stateful apps on Kubernetes 🌟
-- iximiuz.com: How Kubernetes Reinvented Virtual Machines (in a good sense) 🌟🌟 Wonder why the history of Ops took us from imperative, state-full, pets centric prod on VMs, to declarative, ephemeral, and disposable Ops on Containers?
+- cloudnatively.com: The State of Stateful apps on Kubernetes 🌟
+- iximiuz.com: How Kubernetes Reinvented Virtual Machines (in a good sense) 🌟🌟 Wonder why the history of Ops took us from imperative, state-full, pets centric prod on VMs, to declarative, ephemeral, and disposable Ops on Containers?
- How Virtual Machines are used to deploy services
- How Containers try to improve shortcomings of VMs
- What new problems Containers introduce
- How Kubernetes is just one but a clever way to cook Containers
-- spiceworks.com: How to Get Started With Kubernetes the Right Way: DevOps Experts Weigh In 🌟 Kubernetes deployments need meticulous planning and resource allocation like any other software infrastructure solution. Here, experts discuss the best strategies to deploy Kubernetes seamlessly.
+- spiceworks.com: How to Get Started With Kubernetes the Right Way: DevOps Experts Weigh In 🌟 Kubernetes deployments need meticulous planning and resource allocation like any other software infrastructure solution. Here, experts discuss the best strategies to deploy Kubernetes seamlessly.
- dev.to: What Problem Is Kubernetes Actually Trying To Solve? 🌟
-- “It’s funny: everyone thinks CPU requests are only used for scheduling (WRONG) and memory requests determine who gets OOMKilled (WRONG) but it’s actually the opposite! At runtime, memory requests do nothing, but CPU requests DO” 🌟
+- “It’s funny: everyone thinks CPU requests are only used for scheduling (WRONG) and memory requests determine who gets OOMKilled (WRONG) but it’s actually the opposite! At runtime, memory requests do nothing, but CPU requests DO” 🌟
- developers.redhat.com: Kubernetes 101 for developers: Names, ports, YAML files, and more Kubernetes 101 for developers:
- Running multiple containers
- Port management
@@ -9189,13 +9189,13 @@
- medium.com/@litombeg: Kubernetes High-Level Architecture
-- Top 5 kubernetes challenges and their solutions
+- Top 5 kubernetes challenges and their solutions
- jaffarshaik.medium.com: Kubernetes Architecture and components 🌟
- syedasadrazadevops.medium.com: Deep Dive Into Kubernetes: Who to run pod, node container in Kubernetes (K8s)
- dzone.com: Kubernetes Architecture Diagram 🌟🌟🌟 This article will explain each Kubernetes architecture example step, the entire structure, what it’s used for, and how to use it.
- levelup.gitconnected.com: 5 Tricks to take your Kubernetes skills to the next level Whether you like Python, Java, or another language — you’ll probably need Kubernetes anyway.
-- thenewstack.io: Don’t Pause Your Kubernetes Adoption ― PaaS It Instead! Adopting a PaaS abstraction can fast-track Kubernetes for software engineering teams of all sizes and shapes.
-- iximiuz.ck.page: Ivan on Containers, Kubernetes, and Backend Development
+- thenewstack.io: Don’t Pause Your Kubernetes Adoption ― PaaS It Instead! Adopting a PaaS abstraction can fast-track Kubernetes for software engineering teams of all sizes and shapes.
+- iximiuz.ck.page: Ivan on Containers, Kubernetes, and Backend Development
- blog.devgenius.io: Kubernetes(k8) High-level overview
- waltercode.medium.com: Understanding Kubernetes
- anirudhdaya.hashnode.dev: Kubernetes Explained- Part 1
@@ -9211,26 +9211,26 @@
- ajay-yadav.medium.com: Internals of Kubernetes
- enterprisersproject.com: A 15-minute primer on Kubernetes Brush up on your Kubernetes knowledge in less than 15 minutes with our new downloadable white paper
- spacelift.io: What Is Kubernetes Architecture? – Components Overview Kubernetes is a distributed system. It horizontally scales containers across multiple physical hosts termed Nodes. This produces fault-tolerant deployments.
-- blog.frankel.ch: Back to basics: accessing Kubernetes pods
+- blog.frankel.ch: Back to basics: accessing Kubernetes pods
- faun.pub: Kubernetes Architecture Explained — Under 5 Minutes
-- okteto.com: What is Kubernetes Architecture?
-- blogs.opentext.com: Understanding Kubernetes within containers
+- okteto.com: What is Kubernetes Architecture?
+- blogs.opentext.com: Understanding Kubernetes within containers
- techtarget.com: How many Kubernetes nodes should be in a cluster? 🌟🌟🌟 There’s no one-size-fits-all answer in terms of how many nodes should make up a Kubernetes cluster. Instead, that number varies based on specific workload requirements.
- blog.acethecloud.com: The Kubernetes Handbook: A Comprehensive guide of 100 Q&A 🌟
- medium.com/@madhankannan7: Kubernetes in Production: Key Considerations
- medium.com/@harsh.manvar111: Don’t confuse the difference between stateless and stateful 🌟 Why not use Kubernetes Statefulset for stateless applications?
-- geeksforgeeks.org: Kubernetes – Concept of Containers
+- geeksforgeeks.org: Kubernetes – Concept of Containers
- dev.to: Why Developers Should Learn Docker and Kubernetes in 2023 🌟
- dev.to: Build my own Kubernetes journey (10 Part Series) | Jonatan Ezron
-- thenewstack.io: Why Kubernetes Has Emerged as the ‘OS’ of the Cloud Increased usage of Kubernetes, the Google-created open source system orchestrator isn’t seen in all sectors of IT infrastructure, but it sure is taking charge of cloud native app deployments.
-- aws.amazon.com: Kubernetes as a platform vs. Kubernetes as an API 🌟🌟
-- symbiosis.host: Benchmarking cluster creation time for 8 managed Kubernetes providers You might find this report interesting if you care about Kubernetes cluster creation time. This benchmark compares 8 providers of managed Kubernetes to determine how long they take to initialize. Are you planning to run CI tests in a production-like environment? Perhaps you are running short-lived workloads in separate clusters? If so, you might care about cluster boot times. We ran a benchmark across 8 different providers of managed Kubernetes to determine how long they take to initialize. We compared the providers by creating a cluster with a single node and measuring the time from creation until the node was in a ready state.
+- thenewstack.io: Why Kubernetes Has Emerged as the ‘OS’ of the Cloud Increased usage of Kubernetes, the Google-created open source system orchestrator isn’t seen in all sectors of IT infrastructure, but it sure is taking charge of cloud native app deployments.
+- aws.amazon.com: Kubernetes as a platform vs. Kubernetes as an API 🌟🌟
+- symbiosis.host: Benchmarking cluster creation time for 8 managed Kubernetes providers You might find this report interesting if you care about Kubernetes cluster creation time. This benchmark compares 8 providers of managed Kubernetes to determine how long they take to initialize. Are you planning to run CI tests in a production-like environment? Perhaps you are running short-lived workloads in separate clusters? If so, you might care about cluster boot times. We ran a benchmark across 8 different providers of managed Kubernetes to determine how long they take to initialize. We compared the providers by creating a cluster with a single node and measuring the time from creation until the node was in a ready state.
- medium.com/@deepeshjaiswal6734: An Introduction to Kubernetes Architecture && Kubernetes Object deep dive-1 🌟
- dev.to: Kubernetes 101, part I, the fundamentals | Leandro Proença
-- cncf.io: THE ILLUSTRATED CHILDREN’S GUIDE TO KUBERNETES 🌟
+- cncf.io: THE ILLUSTRATED CHILDREN’S GUIDE TO KUBERNETES 🌟
- dev.to/leandronsp: Kubernetes 101, part I, the fundamentals
- yuminlee2.medium.com: Kubernetes: Understanding Kubernetes Architecture through a Restaurant Chef’s Analogy
- medium.com/jamf-engineering: How three lines of configuration solved our gRPC scaling issues in Kubernetes 🌟 It all started with a question I asked our senior software engineer: “Forget the speed of communication. Is it really better for you to develop communication in gRPC instead of REST?” The answer I didn’t want to get came immediately: “Absolutely yes.”
-- thenewstack.io: A Platform for Kubernetes Kubernetes community can greatly benefit from internal developer platforms to simplify its adoption and day-to-day usage.
+- thenewstack.io: A Platform for Kubernetes Kubernetes community can greatly benefit from internal developer platforms to simplify its adoption and day-to-day usage.
- blog.devgenius.io: DevOps in K8s — Deployment Rolling Update DevOps in K8s bootcamp series
- medium.com/@walissonscd: Creating a Kubernetes Pod with Multiple Containers and a Shared Volume 🌟
-- devopscube.com: Kubernetes Daemonset: A Comprehensive Guide
+- devopscube.com: Kubernetes Daemonset: A Comprehensive Guide
- medium.com/@rphilogene: Turning Kubernetes into a Developer-Friendly Product
-- linkedin.com: DAY 01: Kubernetes : Understanding Architecture, Components, Installation and Configuration
+- linkedin.com: DAY 01: Kubernetes : Understanding Architecture, Components, Installation and Configuration
- medium.com/@vvsevel: A Guide to Kubernetes Application Resource Tuning — part 1 This 3-part series aims at providing a good understanding of container resource sizing in Kubernetes. It also includes a case study with 50m VMs and guides you through the thought process of selecting the right requests and limits for memory and CPU.
- medium.com/@vinothiniraju: Streamlining Kubernetes Deployment with Ready-Built Developer Platform
- faun.pub: Kubernetes Nginx Deployments: Simplified Management and Increased Scalability
-- semaphoreci.com: Understanding ReplicaSet vs. StatefulSet vs. DaemonSet vs. Deployments Explore the differences between them, so that you can understand how exactly we use each set, how they differ from each other, and the purpose that each serves.
+- semaphoreci.com: Understanding ReplicaSet vs. StatefulSet vs. DaemonSet vs. Deployments Explore the differences between them, so that you can understand how exactly we use each set, how they differ from each other, and the purpose that each serves.
- medium.com/@a.j.abbott24: Kubernetes: Multi Environment Config Management
- medium.com/@extio: Understanding Kubernetes Annotations: Enhancing Flexibility and Extensibility
- aws.plainenglish.io: $ kubectl get kubernetes -o architecture
-- freecodecamp.org: How to Deploy an Application to a Kubernetes Cluster
+- freecodecamp.org: How to Deploy an Application to a Kubernetes Cluster
- medium.com/@kylelzk: Kubernetes Theory - Understanding Kubernetes Components: A Deep Dive
- medium.com/@bijit211987: Kubernetes Roadmap Kubernetes has quickly become the de facto standard for container orchestration and management. As more organizations adopt Kubernetes, there is a growing need for Kubernetes skills and expertise. This comprehensive roadmap will take you from Kubernetes fundamentals all the way to advanced management, security, and governance.
- serokell.io/blog/kubernetes-guide: A Guide to Kubernetes Modern cloud native computing heavily relies on the use of containers and the adoption of Kubernetes. Despite being a relatively new technology, it is deployed by many global enterprises to manage business-critical applications in their production environments. The popularity of Kubernetes is driven by a growing range of features, such as enhanced security, better management of microservices, improved observability, and more efficient scaling and resource use. In this article, we take a look at the essence of technology, its architecture, and its real-world applications.
Kubernetes Jobs Market
-- OOMKilled in Kubernetes: Understanding and Preventing Hidden Memory Leaks - (Related to kubernetes-troubleshooting topic)
-- Reduce Latency with Azure Proximity Placement Groups - (Related to azure topic)
+- OOMKilled in Kubernetes: Understanding and Preventing Hidden Memory Leaks - (Related to kubernetes-troubleshooting topic)
+- Reduce Latency with Azure Proximity Placement Groups - (Related to azure topic)
-
From Zero to Hero with Identity and Access Control in Azure Kubernetes Service - (Related to kubernetes-security topic)
@@ -9284,22 +9284,22 @@
- Terraform and Ansible lead IaC.
-- kube.careers: Kubernetes jobs market trends for 2022 Q2
+- kube.careers: Kubernetes jobs market trends for 2022 Q2
- What’s the average salary for a Kubernetes engineer?
- What are the skill sets required for a Kubernetes job?
- How much technical experience do you need in the current job market?
-- kube.careers: Kubernetes jobs market trends for 2022 Q3
-- kube.careers: Kubernetes jobs market trends for 2022 Q4 What’s the average salary for a Kubernetes engineer? It’s €82,554 in Europe & $133,918 in North America. How necessary are certifications? Not as much as you think. A lot more questions answered in our yearly report for 2022
-- infoworld.com: How to beat the Kubernetes skills shortage While Kubernetes container management is key to digital transformation, Kubernetes talent is in short supply. Follow these 4 strategies of successful companies to fill the gap.
+- kube.careers: Kubernetes jobs market trends for 2022 Q3
+- kube.careers: Kubernetes jobs market trends for 2022 Q4 What’s the average salary for a Kubernetes engineer? It’s €82,554 in Europe & $133,918 in North America. How necessary are certifications? Not as much as you think. A lot more questions answered in our yearly report for 2022
+- infoworld.com: How to beat the Kubernetes skills shortage While Kubernetes container management is key to digital transformation, Kubernetes talent is in short supply. Follow these 4 strategies of successful companies to fill the gap.
- medium.com/@dfrancisczok: Introduction to Kubernetes — other Kubernetes components and abstract concepts | Dave Frank
- levelup.gitconnected.com: Kubernetes 101: Understanding the Basics of Container Orchestration Kubernetes is a container orchestration system that helps you to automates the process of deploying, scaling, and managing containerized apps across multiple hosts
- medium.com/@walissonscd: Understanding Your Kubernetes Cluster
Certified Kubernetes Offerings
The State of Cloud-Native Development
@@ -9307,8 +9307,8 @@
Kubernetes Failure Stories
-- k8s.af 🌟
-- thenewstack.io: Kubernetes Horror Stories
+- k8s.af 🌟
+- thenewstack.io: Kubernetes Horror Stories
- techbeacon.com: Why teams fail with Kubernetes—and what to do about it
Kubernetes Maturity Model
@@ -9343,7 +9343,7 @@
Limitless Kubernetes Scaling for AI and Data-intensive Workloads: The AKS Fleet Strategy 🌟 - This blog post introduces the AKS Fleet Manager strategy as a solution for scaling Kubernetes beyond the limits of a single cluster, particularly for AI and data-intensive workloads. It highlights the challenges of scaling within a single cluster (control plane bottlenecks, resource limits) and proposes managing tens or hundreds of clusters using AKS Fleet Manager, powered by the KubeFleet project, to achieve ‘limitless’ scalability.
-
-
+
Kubernetes Installation Methods
@@ -9359,49 +9359,49 @@
Kubernetes Knowledge Hubs
-- Application Gateway for Containers: Istio Integration - (Related to istio topic)
-- Export Terraform Code from the Azure Portal - (Related to terraform topic)
+- Application Gateway for Containers: Istio Integration - (Related to istio topic)
+- Export Terraform Code from the Azure Portal - (Related to terraform topic)
-
-
Kubernetes Troubleshooting: A Step-by-Step Guide - (Related to kubernetes-troubleshooting topic)
+Kubernetes Troubleshooting: A Step-by-Step Guide - (Related to kubernetes-troubleshooting topic)
-
-
+
- reddit.com/r/kubernetes
-- Kubernetes README: kubernetesreadme.com What to Read to Learn More About Kubernetes
-- dev-k8sref-io.web.app Kubernetes Reference - k8sref.io
-- learnk8s.io: Kubernetes Research. Research documents on node instance types, managed services, ingress controllers, CNIs, etc. A research hub to collect all knowledge around Kubernetes. Those are in-depth reports and comparisons designed to drive your decisions. Should you use GKE, AKS, EKS? How many nodes? What instance type?
+- Kubernetes README: kubernetesreadme.com What to Read to Learn More About Kubernetes
+- dev-k8sref-io.web.app Kubernetes Reference - k8sref.io
+- learnk8s.io: Kubernetes Research. Research documents on node instance types, managed services, ingress controllers, CNIs, etc. A research hub to collect all knowledge around Kubernetes. Those are in-depth reports and comparisons designed to drive your decisions. Should you use GKE, AKS, EKS? How many nodes? What instance type?
- jamiehannaford/what-happens-when-k8s 🤔 What happens when I type kubectl run?
Kubernetes Podcasts
-- kubernetespodcast.com
-- weave.works: Podcast: Kubernetes has won the enterprise
-- kubelist.com/podcast: The Kubelist Podcast Exploring the ever evolving ecosystem of Kubernetes, SIGS, and the CNCF through interviews with the developers and project managers responsible for sandbox, incubating and graduated projects and technologies. Hosted by Replicated CTO, Marc Campbell and Shipyard CEO, Benjie De Groot.
+- kubernetespodcast.com
+- weave.works: Podcast: Kubernetes has won the enterprise
+- kubelist.com/podcast: The Kubelist Podcast Exploring the ever evolving ecosystem of Kubernetes, SIGS, and the CNCF through interviews with the developers and project managers responsible for sandbox, incubating and graduated projects and technologies. Hosted by Replicated CTO, Marc Campbell and Shipyard CEO, Benjie De Groot.
Kubernetes Blogs
- nativecloud.dev
-- learnk8s.io/blog
-- kubermatic.com
-- containerjournal.com
-- cloudowski.com
+- learnk8s.io/blog
+- kubermatic.com
+- containerjournal.com
+- cloudowski.com
- dev.to/t/kubernetes
-- kubernetes-on-aws.readthedocs.io
+- kubernetes-on-aws.readthedocs.io
- opensource.com/tags/kubernetes
- itnext.io/tagged/kubernetes
-- thenewstack.io/category/kubernetes
-- k21academy.com/category/docker-kubernetes
+- thenewstack.io/category/kubernetes
+- k21academy.com/category/docker-kubernetes
- weave.works/blog/category/kubernetes
- learnsteps.com/tag/basics-on-kubernetes
- devopscube.com
- thecloudblog.net
- rcarrata.com
-- blog.palark.com
+- blog.palark.com
Spanish Kubernetes Blogs
Kubernetes Open Source Container Orchestation
@@ -9409,40 +9409,40 @@
- containerd - An open and reliable container runtime - (Related to container-managers topic)
- Google Agents CLI - (Related to ai topic)
- Kubeterm: Graphical Management Tool for Kubernetes - (Related to kubernetes-tools topic)
-- ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API 🌟 - This resource describes ClusterClass, an experimental feature within the Cluster API project that aims to reduce boilerplate and enable flexible customization of Kubernetes clusters. It provides a powerful abstraction for streamlining cluster lifecycle management while maintaining the underlying API. The documentation covers its background, authoring, changing, publishing, and operational aspects, including quick start guides for creating clusters using ClusterClass templates.
-- The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece - (Related to iac topic)
+- ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API 🌟 - This resource describes ClusterClass, an experimental feature within the Cluster API project that aims to reduce boilerplate and enable flexible customization of Kubernetes clusters. It provides a powerful abstraction for streamlining cluster lifecycle management while maintaining the underlying API. The documentation covers its background, authoring, changing, publishing, and operational aspects, including quick start guides for creating clusters using ClusterClass templates.
+- The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece - (Related to iac topic)
- Announcing Private Preview: ArgoCD through Microsoft GitOps - (Related to gitops topic)
- FreeLens - (Related to kubernetes-tools topic)
-- RunsOn: Self-hosted GitHub Actions Runners in AWS - (Related to cicd topic)
+- RunsOn: Self-hosted GitHub Actions Runners in AWS - (Related to cicd topic)
-
-
Dependabot Version Updates in Azure DevOps - (Related to cicd topic)
+Dependabot Version Updates in Azure DevOps - (Related to cicd topic)
-
-
kubedex.com Discover, Compare and Share Kubernetes Applications
+kubedex.com Discover, Compare and Share Kubernetes Applications
- medium.com: A Year Of Running Kubernetes at MYOB, And The Importance Of Empathy
-- labs.mwrinfosecurity.com: Attacking Kubernetes through Kubelet
+- labs.mwrinfosecurity.com: Attacking Kubernetes through Kubelet
- itnext.io: Successful & Short Kubernetes Stories For DevOps Architects
-- platform9.com: Kubernetes CI/CD Pipelines at Scale
-- 4 trends for Kubernetes cloud-native teams to watch in 2020
+- platform9.com: Kubernetes CI/CD Pipelines at Scale
+- 4 trends for Kubernetes cloud-native teams to watch in 2020
- 5 open source projects that make Kubernetes even better: Prometheus, Operator framework, Knative, Tekton, Kubeflow 🌟 Open source projects bring many additional capabilities to Kubernetes, such as performance monitoring, developer tools, serverless capabilities, and CI/CD workflows. Check out these five widely used options
-- 4 trends for Kubernetes cloud-native teams to watch in 2020 Today’s software architectural landscape seems to change like the weather. Stay ahead of the curve with these cloud-related trends, including GitOps and service meshes.
-- Creating a Kubernetes cloud provider, doesn’t required boiling the ocean
+- 4 trends for Kubernetes cloud-native teams to watch in 2020 Today’s software architectural landscape seems to change like the weather. Stay ahead of the curve with these cloud-related trends, including GitOps and service meshes.
+- Creating a Kubernetes cloud provider, doesn’t required boiling the ocean
- opensource.com: 5 ways to boost your Kubernetes knowledge
- blog.container-solutions.com: 7 Cloud Native Trends to Watch in 2020
-- snyk.io: Shipping Kubernetes-native applications with confidence
+- snyk.io: Shipping Kubernetes-native applications with confidence
- medium: Delivering value on Kubernetes
-- blocksandfiles.com: Kubernetes is in a bit of state about state Kubernetes is “four to five years away” from being a stable distribution capable of running stateful apps, according to Redis Labs chief product officer Alvin Richards.
+- blocksandfiles.com: Kubernetes is in a bit of state about state Kubernetes is “four to five years away” from being a stable distribution capable of running stateful apps, according to Redis Labs chief product officer Alvin Richards.
- medium: Then he asked me “Is Kubernetes right for us?”
-- loft.sh: Kubernetes: Virtual Clusters For CI/CD & Testing
+- loft.sh: Kubernetes: Virtual Clusters For CI/CD & Testing
- lambda.grofers.com: Learnings From Two Years of Kubernetes in Production
- medium: 3 Years of Kubernetes in Production–Here’s What We Learned
-- revistacloudcomputing.com: Los mejores proveedores de Kubernetes
-- containerjournal.com: Overcoming Kubernetes Infrastructure Challenges
+- revistacloudcomputing.com: Los mejores proveedores de Kubernetes
+- containerjournal.com: Overcoming Kubernetes Infrastructure Challenges
- medium: Installing cf-for-k8s on a Kubernetes Cluster Running on Digital Ocean If you want to install Cloud Foundry on Kubernetes on Digital Ocean, you might find this article relevant.
- itnext.io: Lessons learned from managing a Kubernetes cluster for side projects (GKE)
-- projectcalico.org: Using Kubernetes to orchestrate VMs
-- lastweekinaws.com: Is ECS deprecated? Has Kubernetes won?
+- projectcalico.org: Using Kubernetes to orchestrate VMs
+- lastweekinaws.com: Is ECS deprecated? Has Kubernetes won?
- opensource.com: 8 Kubernetes insights for 2021 Review the top five Kubernetes articles of 2020, then preview three tools you should learn about in 2021.
- srcco.de: Zalando - Many Kubernetes Clusters instead of 1 huge cluster Running 80+ Kubernetes clusters in production? Yes, Zalando runs 100+ Kubernetes clusters on AWS.
- Each cluster runs in its own AWS account.
@@ -9457,27 +9457,27 @@
-- platform9.com: The Gorilla Guide to Kubernetes in the Enterprise Discover key capabilities for Kubernetes at scale.
+- platform9.com: The Gorilla Guide to Kubernetes in the Enterprise Discover key capabilities for Kubernetes at scale.
- A complete Enterprise Kubernetes infrastructure needs proper DNS, load balancing, Ingress, stateful services, K8’s role-based access control (RBAC), integration with LDAP and authentication systems, and more. Once Kubernetes is deployed, day-2 operational challenges and life-cycle management comes into play: monitoring, alerting, troubleshooting, upgrades, security patching, compliance checking and much more.
- The Gorilla guide to Kubernetes in the Enterprise is your resource to ensure the success of your Enterprise Kubernetes projects by thinking through critical decisions around deployment options, day-2 operational considerations, use cases, and choosing your Kubernetes implementation solutions.
- magalix.com: Influencing Kubernetes Scheduler Decisions To ensure maximum possible performance and availability given the infrastructure at hand, the scheduler uses complex algorithms to ensure the most efficient Pod placement. In this article, we discuss how the scheduler selects the best node to host the Pod and how we can influence its decision.
- medium: Making Sense of Taints and Tolerations in Kubernetes
-- devopscube.com: 10 Key Considerations for Kubernetes Cluster Design & Setup 🌟
-- blog.pixielabs.ai: Building Kubernetes Native SaaS applications: iterating quickly by deploying in-cluster data planes
+- devopscube.com: 10 Key Considerations for Kubernetes Cluster Design & Setup 🌟
+- blog.pixielabs.ai: Building Kubernetes Native SaaS applications: iterating quickly by deploying in-cluster data planes
- itnext.io: CKS Exam Series #9 RBAC v2 Kubernetes CKS Example Exam Question Series
-- infoq.com: Experts Discuss Top Kubernetes Trends and Production Challenges
-- blog.appstack.one: How to run Ghost blog inside Kubernetes
-- learnk8s.io: Scaling Celery workers with RabbitMQ on Kubernetes In this article, you will explore how to use Kubernetes and KEDA to scale Celery workers based on the number of messages in a RabbitMQ queue.
+- infoq.com: Experts Discuss Top Kubernetes Trends and Production Challenges
+- blog.appstack.one: How to run Ghost blog inside Kubernetes
+- learnk8s.io: Scaling Celery workers with RabbitMQ on Kubernetes In this article, you will explore how to use Kubernetes and KEDA to scale Celery workers based on the number of messages in a RabbitMQ queue.
- Learn how to set up a metrics pipeline
- How you can drive autoscaling based on metrics from RabbitMQ.
- Why KEDA might be an alternative to prometheus+adapters
-- superuser.openstack.org: Run Your Kubernetes Cluster on OpenStack in Production
-- andrewlock.net: Series: Deploying ASP.NET Core applications to Kubernetes
-- andrewlock.net: Deploying ASP.NET Core applications to Kubernetes - Part 6 - Adding health checks with Liveness, Readiness, and Startup probes
+- superuser.openstack.org: Run Your Kubernetes Cluster on OpenStack in Production
+- andrewlock.net: Series: Deploying ASP.NET Core applications to Kubernetes
- infoq.com: The Evolution of Distributed Systems on Kubernetes What Comes After Microservices:
@@ -9488,7 +9488,7 @@
- They jointly represent a multi-runtime microservice. Maybe that’s a more suitable model because it has better properties.
- You get all the benefits of microservice. You still have all your domain, all the bounded contexts in one place.
- You have all the infrastructure and distributed application needs in a separate container, and you combine them at runtime.
-- Probably, the closest thing that’s getting to that right now is Dapr.
+- Probably, the closest thing that’s getting to that right now is Dapr.
- medium: Graceful shutdown of fpm and nginx in Kubernetes
@@ -9496,36 +9496,36 @@
- betterprogramming.pub: How to Implement Your Distributed Filesystem With GlusterFS And Kubernetes Learn the advantages of using GlusterFS and how can it help in achieving a highly-scalable, distributed filesystem.
- medium: Scaling Kubernetes with Assurance at Pinterest
- blog.deckhouse.io: How we enjoyed upgrading a bunch of Kubernetes clusters from v1.16 to v1.19
-- openshift.com: Topology Aware Scheduling in Kubernetes Part 1: The High Level Business Case
-- openshift.com: Topology Awareness in Kubernetes Part 2: Don’t we already have a Topology Manager?
+- openshift.com: Topology Aware Scheduling in Kubernetes Part 1: The High Level Business Case
- Kubernetes setup with CRI-O Runtime Example to build Kubernetes Clusters using CRI-O runtime instead of Docker
-- blog.min.io: Kubernetes, Consistency and Commoditization - The Way of the Cloud
+- blog.min.io: Kubernetes, Consistency and Commoditization - The Way of the Cloud
- hjrocha.medium.com: Add a Custom Host to Kubernetes
-- rancher.com: The Three Pillars of Kubernetes Container Orchestration 🌟
-- qwinix.io: What Is Kubernetes? K8s Uses, Benefits, & More
-- thenewstack.io: Governance, Risk and Compliance with Kubernetes
+- rancher.com: The Three Pillars of Kubernetes Container Orchestration 🌟
+- qwinix.io: What Is Kubernetes? K8s Uses, Benefits, & More
+- thenewstack.io: Governance, Risk and Compliance with Kubernetes
- zhimin-wen.medium.com: Custom Notifications with Alert Manager’s Webhook Receiver in Kubernetes
-- harness.io: Introducing Recommendations API: Find Potential Cost Savings Programmatically
+- harness.io: Introducing Recommendations API: Find Potential Cost Savings Programmatically
- blog.harbur.io: Demystifying stateful apps on Kubernetes by deploying an etcd cluster In this tutorial you will learn how to deploy an etcd cluster in Kubernetes
- blog.kintone.io: Rebooting a LOT of Kubernetes nodes in a declarative way
-- infoworld.com: How Kubernetes works If you want to understand containers, microservices architecture, modern application development, and cloud native computing, you need to understand Kubernetes.
-- infoq.com: Cloud Native and Kubernetes Observability: Expert Panel
-- kubernetes.io: Don’t Panic: Kubernetes and Docker
-- thenewstack.io: Exploring the New Kubernetes Maturity Model
+- infoworld.com: How Kubernetes works If you want to understand containers, microservices architecture, modern application development, and cloud native computing, you need to understand Kubernetes.
+- infoq.com: Cloud Native and Kubernetes Observability: Expert Panel
+- kubernetes.io: Don’t Panic: Kubernetes and Docker
+- thenewstack.io: Exploring the New Kubernetes Maturity Model
- blog.bandowski.eu: Tools that should be used in every Kubernetes cluster 🌟
-- ArgoCD for deploying your resources the GitOps way
-- MetalLB in case you need a load balancer when running Kubernetes on-prem and not in a cloud
+- ArgoCD for deploying your resources the GitOps way
+- MetalLB in case you need a load balancer when running Kubernetes on-prem and not in a cloud
- external-secrets to easily sync the secrets of your external secret manager with your Kubernetes cluster
-- cert-manager 🌟 to easily retrieve and/or generate new certificates on the fly
+- cert-manager 🌟 to easily retrieve and/or generate new certificates on the fly
- external-dns to manage your DNS entries automatically
-- redhat.com: Building containers by hand: The PID namespace The PID namespace is an important one when it comes to building isolated environments. Find out why and how to use it.
-- infoq.com: The Kubernetes Effect
-- dustinspecker.com: iptables: How Kubernetes Services Direct Traffic to Pods
-- dustinspecker.com: Scaling Kubernetes Pods using Prometheus Metrics 🌟 one of Kubernetes many features is auto-scaling workloads. Typically, Horizontal Pod Autoscalers scale pods based on CPU or memory usage. During other times we could better scale by using custom metrics that Prometheus is already scraping. Fortunately, Horizontal Pod Autoscalers can support using custom metrics. I’m a fan of the kube-prometheus 🌟 project, but it wasn’t apparent how to set up a Horizontal Pod Autoscaler using custom metrics. This post walks through:
+- redhat.com: Building containers by hand: The PID namespace The PID namespace is an important one when it comes to building isolated environments. Find out why and how to use it.
+- infoq.com: The Kubernetes Effect
+- dustinspecker.com: iptables: How Kubernetes Services Direct Traffic to Pods
+- dustinspecker.com: Scaling Kubernetes Pods using Prometheus Metrics 🌟 one of Kubernetes many features is auto-scaling workloads. Typically, Horizontal Pod Autoscalers scale pods based on CPU or memory usage. During other times we could better scale by using custom metrics that Prometheus is already scraping. Fortunately, Horizontal Pod Autoscalers can support using custom metrics. I’m a fan of the kube-prometheus 🌟 project, but it wasn’t apparent how to set up a Horizontal Pod Autoscaler using custom metrics. This post walks through:
- Deploying kube-prometheus (Prometheus operator, Prometheus adapter, Grafana, and more)
- Creating a custom metrics APIService
- Configuring Prometheus adapter to support our custom metrics
@@ -9537,61 +9537,61 @@
- itnext.io: Kubernetes: what are Endpoints
- medium.com: Using kubernetes custom resources to manage our ephemeral environments Building a Kubernetes operator with kubebuilder to manage ephemeral environments.
- medium: Running Apache Flink on Kubernetes
-- learnsteps.com: How exactly kube-proxy works: Basics on Kubernetes
+- learnsteps.com: How exactly kube-proxy works: Basics on Kubernetes
- medium.com: Connect services across Kubernetes clusters using Teleproxy Teleproxy is a shell script that lets you quickly replace a Kubernetes deployment by a single pod that forwards incoming traffic to another pod running in a destination Kubernetes cluster.
- medium: Kubernetes DNS for Services and Pods
- edgehog.blog: Getting Started with K8s: Core Concepts
-- siderolabs.com: Is Vanilla Kubernetes Really Too Heavy For The Raspberry Pi?
-- infoq.com: Kubernetes Workloads in the Serverless Era: Architecture, Platforms, and Trends
+- siderolabs.com: Is Vanilla Kubernetes Really Too Heavy For The Raspberry Pi?
+- infoq.com: Kubernetes Workloads in the Serverless Era: Architecture, Platforms, and Trends
- blog.kintone.io: Tolerating failures in container image registries This article will show you several ways to ensure your Kubernetes clusters can always pull images even while an upstream registry is failing.
-- blog.px.dev: How etcd works and 6 tips to keep in mind
-- containerjournal.com: Kubernetes’ True Superpower is its Control Plane
+- blog.px.dev: How etcd works and 6 tips to keep in mind
+- containerjournal.com: Kubernetes’ True Superpower is its Control Plane
- dev.to: A Deep Dive Into Kubernetes Schema Validation
-- tremolosecurity.com: Pipelines and Kubernetes Authentication The Right Way To Authenticate to Your Clusters From Your CI/CD Pipelines:
+- tremolosecurity.com: Pipelines and Kubernetes Authentication The Right Way To Authenticate to Your Clusters From Your CI/CD Pipelines:
- Don’t use ServiceAccount tokens outside of your cluster
- Create service accounts inside of your authentication identity provider, assign RBAC privileges
- Easy with Okta and OpenUnison
-- usepine.com: Improving cert-manager HTTP01 self-check speed This post describes how to improve cert-manager self-check speed, by pointing the cluster to Google nameservers, and disabling DNS caching
+- usepine.com: Improving cert-manager HTTP01 self-check speed This post describes how to improve cert-manager self-check speed, by pointing the cluster to Google nameservers, and disabling DNS caching
- datree.io: A Deep Dive Into Kubernetes Schema Validation 🌟 Great overview of different schema validation tools, incl. server-side ,dry-run“. But I think with tools like kind in CI it’s actually less of a burden to spin up K8s and do proper server-side validation (which catches all issues as mentioned in the post).
-- community.suse.com: Stupid Simple Kubernetes — Deployments, Services and Ingresses Explained
-- infracloud.io: Avoiding Kubernetes Cluster Outages with Synthetic Monitoring Synthetic monitoring consists of pre-defined checks to proactively monitor the critical elements in your infrastructure. These checks simulate the functionality of the elements. We can also simulate the communication between the elements to ensure end-to-end connectivity. Continuous monitoring of these checks also helps to measure overall performance in terms of availability and response times.
-- talos-systems.com: Is Vanilla Kubernetes Really Too Heavy For The Raspberry Pi?
+- community.suse.com: Stupid Simple Kubernetes — Deployments, Services and Ingresses Explained
+- infracloud.io: Avoiding Kubernetes Cluster Outages with Synthetic Monitoring Synthetic monitoring consists of pre-defined checks to proactively monitor the critical elements in your infrastructure. These checks simulate the functionality of the elements. We can also simulate the communication between the elements to ensure end-to-end connectivity. Continuous monitoring of these checks also helps to measure overall performance in terms of availability and response times.
+- talos-systems.com: Is Vanilla Kubernetes Really Too Heavy For The Raspberry Pi?
- blog.kintone.io: Tolerating failures in container image registries 🌟
-- thenucleargeeks.com: Taints and Tolerations in Kubernetes
+- thenucleargeeks.com: Taints and Tolerations in Kubernetes
- devopshubproject/cka-lab This repo contains set of practice questions which will help you to get ready for the cka exam.
- medium: Run Kubernetes Production Environment on EC2 Spot Instances With Zero Downtime: A Complete Guide
- shayn-71079.medium.com: Scaling Kubernetes Clusters The below figure presents a schematic diagram of how cluster auto-scaling is done in AWS EKS clusters.
- itnext.io: Kubernetes Essential Tools: 2021
-- thenewstack.io: Living with Kubernetes: Multicluster Management
-- tigera.io: Comparing kube-proxy modes: iptables or IPVS?
+- thenewstack.io: Living with Kubernetes: Multicluster Management
+- tigera.io: Comparing kube-proxy modes: iptables or IPVS?
- fairwinds.com: K8s Clinic: How to Run Kubernetes Securely and Efficiently 🌟
- With the adoption of containers, software packaging is increasingly shifting left, which means (depending on your organization) that developers are taking on responsibility for the containerization of applications. Developers may also be responsible for some parts of Kubernetes configuration. As that process shifts left, developers need support to make the right decisions for the organization in order to run Kubernetes securely and efficiently.
- Many companies are adopting cloud native technologies to deliver speed to market. For businesses seeking to compete in today’s marketplace, it’s important to ship new features and meet customer needs where they are — and increasingly those needs are being met through software.
-- weave.works: Production Ready Checklists for Kubernetes 🌟
-- containerjournal.com: The Rise of the KubeMaster 🌟
+- weave.works: Production Ready Checklists for Kubernetes 🌟
+- containerjournal.com: The Rise of the KubeMaster 🌟
- It wasn’t obvious while it was happening, probably because everyone was focused on dealing with a global pandemic, but your IT environment became more complex. Cloud technology continued to evolve, and while that was happening, cloud use grew. Hybrid cloud use, already growing before the pandemic, became much more established with a year-over-year annual growth rate of 17.8%, according to Quince Market Insights. And with more distinct technology advances from each of the major cloud service providers, multi-cloud use also became more established.
- This more complex environment encouraged the use of containers, and Kubernetes became the preferred means of managing them. Unfortunately, the great irony of Kubernetes is that the technology created to make the management of modern cloud applications easier is, itself, incredibly difficult to manage. Just to deploy and manage a single application in your own data center requires working familiarity with a Kubernetes distribution and working integrations with a number of supporting systems and enterprise software including code registries, CI/CD, secrets management, storage management, networking, logging and monitoring, service mesh, backup and disaster recovery (DR). That’s just for one environment. In a hybrid infrastructure, perhaps using one of the leading cloud service providers such as AWS, Azure or GCP, you could double this overhead.
- This rapid growth combined with immense complexity means not every Kubernetes implementation has been successful, and in the worst cases, misconfigurations have led to security breaches and significant application downtime. Overwhelmed teams with insufficient training only make the problem worse, putting these implementations farther behind as Kubernetes management becomes increasingly difficult. As such, I believe the time is now for a new role to emerge in the enterprise—Kubernetes Manager. This is a job function that more and more companies will need to hire as operating and managing Kubernetes becomes a significantly larger part of the engineering operation than ever before. Let me explain.
-- okteto.com: Run your Pull Request Preview Environments on Kubernetes
+- okteto.com: Run your Pull Request Preview Environments on Kubernetes
- allanjohn909.medium.com: Kubernetes Ingress with Traefik, CertManager, LetsEncrypt and HAProxy
- asishmm.medium.com: Discussion on Horizontal Pod Autoscaler with a demo on local k8s cluster
-- piotrminkowski.com: Kubernetes Multicluster with Kind and Submariner
+- piotrminkowski.com: Kubernetes Multicluster with Kind and Submariner
- civo.com: Get up and running with Kubeflow on Civo Kubernetes
-- blog.palark.com: Failure stories #2. How to destroy Elasticsearch while migrating it within Kubernetes
-- dbafromthecold.com: Adjusting pod eviction time in Kubernetes
-- doordash.engineering: Gradual Code Releases Using an In-House Kubernetes Canary Controller Gradual code releases with canary deployments and a custom Kubernetes controller
+- blog.palark.com: Failure stories #2. How to destroy Elasticsearch while migrating it within Kubernetes
+- dbafromthecold.com: Adjusting pod eviction time in Kubernetes
+- doordash.engineering: Gradual Code Releases Using an In-House Kubernetes Canary Controller Gradual code releases with canary deployments and a custom Kubernetes controller
- itnext.io: How to deploy a cross-cloud Kubernetes cluster with built-in disaster recovery 🌟
-- getambassador.io: Getting Started with Kubernetes for JavaScript Developers
-- blog.cloudflare.com: Automatic Remediation of Kubernetes Nodes
-- pulumi.com: Kubernetes Fundamentals Part One - Python instead of YAML 🌟
+- getambassador.io: Getting Started with Kubernetes for JavaScript Developers
+- blog.cloudflare.com: Automatic Remediation of Kubernetes Nodes
+- pulumi.com: Kubernetes Fundamentals Part One - Python instead of YAML 🌟
- ubuntu.com: How to test the latest Kubernetes 1.22 release candidate with MicroK8s
-- thenewstack.io: 10 Steps to a Successful Kubernetes Technical Transformation 🌟
+- thenewstack.io: 10 Steps to a Successful Kubernetes Technical Transformation 🌟
- medium: Kubernetes Scaling & Replicas 🌟 Whenever we talk about “Scaling”, we need to discuss the states of the application. There are two types: Stateful and Stateless Applications.
- Stateful: A stateful application can remember at least some of the things(from the past) about its state when it runs each time. For example: It stores our preferences, keeps track of window size and location, and remembers what files they have opened recently. Their Attributes are:
- persistence Storage
@@ -9609,86 +9609,86 @@
-- cncf.io: Advanced Kubernetes pod to node scheduling In this article, you’ll review some of the use cases for advanced pod scheduling in Kubernetes as well as best practices for implementing it in real-world situations.
+- cncf.io: Advanced Kubernetes pod to node scheduling In this article, you’ll review some of the use cases for advanced pod scheduling in Kubernetes as well as best practices for implementing it in real-world situations.
- medium: Create A Pod In Kubernetes Cluster Learn what is Pod and how to create a Pod in the Kubernetes cluster.
-- cloudsavvyit.com: How to Scale Docker Containers Across Servers Using Kubernetes
+- cloudsavvyit.com: How to Scale Docker Containers Across Servers Using Kubernetes
- Kubernetes. Label and Selector. Important Topic. Identify object in cluster. CKA Exam Tips
-- thenewstack.io: Cloud Foundry Summit: Kubernetes Must Do Better by Developers
+- thenewstack.io: Cloud Foundry Summit: Kubernetes Must Do Better by Developers
- itnext.io: How to create Kubernetes home lab on an old laptop with K3s
- itnext.io: How to deploy a single Kubernetes cluster across multiple clouds using k3s and WireGuard
- itnext.io: How to Add MySql & MongoDB to a Kubernetes .Net Core Microservice Architecture How to add a MySQL DB and a MongoDB replica set in K8S on Docker desktop using persistent volumes and access the databases from ASP.NET Core, C# and Angular
- itnext.io: Expose Open Policy Agent/Gatekeeper Constraint Violations for Kubernetes Applications with Prometheus and Grafana
-- thenewstack.io: How Airbnb and Twitter Cut Back on Microservice Complexities
+- thenewstack.io: How Airbnb and Twitter Cut Back on Microservice Complexities
- Some useful and promising Kubernetes projects to follow:
-- submarinerio multicluster direct networking
-- shipwrightio building container images
-- microcksio testing API and messaging
-- telepresenceio development tool
-- k0sproject new Kubernetes distro
+- submarinerio multicluster direct networking
+- shipwrightio building container images
+- microcksio testing API and messaging
+- telepresenceio development tool
+- k0sproject new Kubernetes distro
-- redkubes.com: DIY Kubernetes-based platform building – part 3
+- redkubes.com: DIY Kubernetes-based platform building – part 3
- hobby-kube/guide 🌟 Kubernetes clusters for the hobbyist. This guide answers the question of how to setup and operate a fully functional, secure Kubernetes cluster on a cloud provider such as Hetzner Cloud, DigitalOcean or Scaleway. It explains how to overcome the lack of external ingress controllers, fully isolated secure private networking and persistent distributed block storage.
- wecloudpro.com: Watchers in Kubernetes
-- learnk8s.io: Kubernetes wallpapers A collection of free Kubernetes wallpapers for your computer.
+- learnk8s.io: Kubernetes wallpapers A collection of free Kubernetes wallpapers for your computer.
- youtube: Tinder’s Move to Kubernetes - Chris O’Brien & Chris Thomas, Tinder
- medium: How to enable Kubernetes container RuntimeDefault seccomp profile for all workloads
-- doordash.engineering: Gradual Code Releases Using an In-House Kubernetes Canary Controller
-- infoq.com: Six Tips for Running Scalable Workloads on Kubernetes
-- Assess managed Kubernetes services for your workloads. Managed services from cloud providers can simplify Kubernetes deployment but create some snags in a multi-cloud model. Follow three steps to see if these services can benefit you.
+- doordash.engineering: Gradual Code Releases Using an In-House Kubernetes Canary Controller
+- infoq.com: Six Tips for Running Scalable Workloads on Kubernetes
+- Assess managed Kubernetes services for your workloads. Managed services from cloud providers can simplify Kubernetes deployment but create some snags in a multi-cloud model. Follow three steps to see if these services can benefit you.
- itnext.io: Evolution of PaaSes to Platform-as-Code in Kubernetes world
- medium: Wordpress High Availability on Kubernetes Wordpress is configured to support two separate ingress paths — a private for edits and a public for read-only traffic. By “read-only”, mean that Wordpress is only able to execute SELECTs on the DB. The HA MySQL cluster is accomplished using oracle’s mysql-operator. This makes it extremely easy to handle the master-slave replication for the DB side of things.
-- cloudfoundry.org: Deploy A Laravel Application To Kubernetes Using Cloud Foundry [ARCHIVED] This tutorial uses the Google Kubernetes Engine (GKE). However, the steps followed in this guide can be applied to Kubernetes clusters running on any cloud provider, as long as Cloud Foundry (cf-for-k8s) has been installed on it. Also, the series of install steps outlined here can function for any “composer” based PHP application such as Drupal, Symfony, etc.
-- thenewstack.io: The State of Kubernetes: Key Challenges and the Role of AI
-- learnsteps.com: Basics on Kubernetes: What exactly is a ReplicaSet
+- cloudfoundry.org: Deploy A Laravel Application To Kubernetes Using Cloud Foundry [ARCHIVED] This tutorial uses the Google Kubernetes Engine (GKE). However, the steps followed in this guide can be applied to Kubernetes clusters running on any cloud provider, as long as Cloud Foundry (cf-for-k8s) has been installed on it. Also, the series of install steps outlined here can function for any “composer” based PHP application such as Drupal, Symfony, etc.
+- thenewstack.io: The State of Kubernetes: Key Challenges and the Role of AI
+- learnsteps.com: Basics on Kubernetes: What exactly is a ReplicaSet
- ithands-on.com: Kubernetes 101 : Switching namespaces
-- juju.is: Kubernetes and cloud native operations report 2021 Data from 1200 respondents on hybrid and multi-cloud operations, Kubernetes, VMs, bare metal, goals, benefits, challenges, operators, advanced usage, edge, and more.
+- juju.is: Kubernetes and cloud native operations report 2021 Data from 1200 respondents on hybrid and multi-cloud operations, Kubernetes, VMs, bare metal, goals, benefits, challenges, operators, advanced usage, edge, and more.
- medium.com: Tinder’s move to Kubernetes
-- blog.palark.com: Best practices for deploying highly available apps in Kubernetes. Part 1
-- blog.palark.com: Best practices for deploying highly available apps in Kubernetes. Part 2
+- blog.palark.com: Best practices for deploying highly available apps in Kubernetes. Part 1
-- danielmangum.com: How Kubernetes validates custom resources
-- ronaknathani.com: How a Kubernetes Pod Gets an IP Address
+- danielmangum.com: How Kubernetes validates custom resources
+- ronaknathani.com: How a Kubernetes Pod Gets an IP Address
- opensource.com: How the Kubernetes ReplicationController works A ReplicationController is responsible for managing the pod lifecycle and ensuring that the specified number of pods required are running at any given time.
-- containerjournal.com: When is Kubernetes Service Ownership the Right Fit?
+- containerjournal.com: When is Kubernetes Service Ownership the Right Fit?
- Why is Kubernetes service ownership emerging as the way for software delivery and operations teams to establish full “ownership” of the services they support? Because ownership covers the lifespan of software from development to deployment to the sunsetting process. And this shift to full-spectrum accountability brings about dramatic improvements in the overall speed, reliability, security and cost of applications.
- Of course, it’s not always easy to determine which organizations need this level of ownership. When businesses grow, they typically discover that pushing the delivery of applications and services through a gate of operations is challenging at best, impossible at worst. Even so, the DevSecOps mindset is on the rise, which means teams are now seeking ways to make this type of shift into more meaningful and effective ownership. It is the shift that enables a deep fundamental change to occur within an organization.
- itnext.io: Kubernetes — Running Multiple Container Runtimes In this post, you’ll learn how to run multiple OCI container runtimes on Kubernetes. You will see how to configure containerd to run both runC and Kata Containers
-- iximiuz.com: Why and How to Use containerd from the Command Line
+- iximiuz.com: Why and How to Use containerd from the Command Line
- medium: Kubernetes for dummies: introduction. Part 1
-- iximiuz.com: Containers vs. Pods - Taking a Deeper Look All pod’s containers run on the cluster node, their lifecycle is synchronized, and mutual isolation is weakened to simplify the inter-container communication. A deep-dive into how containers work in a Pod.
+- iximiuz.com: Containers vs. Pods - Taking a Deeper Look All pod’s containers run on the cluster node, their lifecycle is synchronized, and mutual isolation is weakened to simplify the inter-container communication. A deep-dive into how containers work in a Pod.
- kubermatic.com: The Ultimate Checklist for Running Kubernetes in Production
-- vadosware.io: So you need to wait for some Kubernetes resources? There are at least two ways to wait for Kubernetes resources you probably care about: kubectl wait for Pods, initContainers for everything else
-- vxav.fr: Interacting with containerd runtime for kubernetes
+- vadosware.io: So you need to wait for some Kubernetes resources? There are at least two ways to wait for Kubernetes resources you probably care about: kubectl wait for Pods, initContainers for everything else
+- vxav.fr: Interacting with containerd runtime for kubernetes
- medium: Exploring Kubernetes Node Architecture
-- mayankshah.dev: Demystifying kube-proxy
-- arthurchiao.art: Cracking kubernetes node proxy (aka kube-proxy) This post analyzes the Kubernetes node proxy model, and provides 5 demo implementations (within couples of lines of code) of the model, each based on different tech-stacks (userspace/iptables/ipvs/tc-ebpf/sock-ebpf).
-- blog.brujordet.no: Using custom hardware in kubernetes
+- mayankshah.dev: Demystifying kube-proxy
+- arthurchiao.art: Cracking kubernetes node proxy (aka kube-proxy) This post analyzes the Kubernetes node proxy model, and provides 5 demo implementations (within couples of lines of code) of the model, each based on different tech-stacks (userspace/iptables/ipvs/tc-ebpf/sock-ebpf).
+- blog.brujordet.no: Using custom hardware in kubernetes
- technos.medium.com: Kubernetes Workflow for Absolute Beginners
- cloud.google.com: The past, present, and future of Kubernetes with Eric Brewer
-- kmitevski.com: Writing a Kubernetes Validating Webhook using Python
+- kmitevski.com: Writing a Kubernetes Validating Webhook using Python
- medium.com/@hinsulak: Multi-node lightweight Kubernetes setup
-- kubernetes.io: Kubernetes is Moving on From Dockershim: Commitments and Next Steps
-- blog.px.dev: Where are my container’s files? Inspecting container filesystems
+- kubernetes.io: Kubernetes is Moving on From Dockershim: Commitments and Next Steps
+- blog.px.dev: Where are my container’s files? Inspecting container filesystems
- medium.com/codex: How to Deploy WordPress On Kubernetes — Part 2 Learn how to deploy the WordPress on Kubernetes and connect with MySQL Pod.
-- freecodecamp.org: Learn Kubernetes and Start Containerizing Your Applications
-- komodor.com: Kubernetes Nodes – The Complete Guide K8s node is a machine that runs containerized workloads as part of a K8s cluster. Node can be physical machine or VM, and hosted on-prem or in the cloud..Cluster can have large number of nodes -upto 5,000 nodes
+- freecodecamp.org: Learn Kubernetes and Start Containerizing Your Applications
+- komodor.com: Kubernetes Nodes – The Complete Guide K8s node is a machine that runs containerized workloads as part of a K8s cluster. Node can be physical machine or VM, and hosted on-prem or in the cloud..Cluster can have large number of nodes -upto 5,000 nodes
- medium.com/techbeatly: Chain of events behind a running Pod What exactly happens behind the scenes when you create a pod/deployment?
-- thenewstack.io: What Does It Take to Manage Hundreds of Kubernetes Clusters?
+- thenewstack.io: What Does It Take to Manage Hundreds of Kubernetes Clusters?
- medium.com/pareture: Kubernetes Scaling, Capacity and Resource Planning in Complex Clusters
- blog.runx.dev: 3 Things I Hate About Kubernetes
- devopslearners.com: What is a Kubernetes Ephemeral Container?
- opensource.com: A visual map of a Kubernetes deployment Gain a better understanding of Kubernetes by looking at the 10 steps that take place when you create a pod or a deployment.
- devopslearners.com: Different Container Runtimes and Configurations in the same Kubernetes Cluster
- itnext.io: Measuring Patching Cadence on Kubernetes with GitOps
-- thenewstack.io: The Rush to Fix the Kubernetes Failover Problem
+- thenewstack.io: The Rush to Fix the Kubernetes Failover Problem
- vidhitakher.medium.com: Understanding the Kubernetes cluster components Component-wise deep-dive into Kubernetes cluster architecture
- medium.com/@kennethtcp: How to spread replica pods into nodes evenly by topologySpreadConstraints
- medium.com/@norlin.t: Build a managed Kubernetes cluster from scratch — part 1
@@ -9717,9 +9717,9 @@
- sunnykkc13.medium.com: Deep Dive into Kubernetes
- medium.com/@issy972: Balancing reliability, cost and performance with Kubernetes
- imoisharma.medium.com: How Leader election works in Kubernetes— By M. Sharma In this post, you’ll learn how you can use Kubernetes to easily perform leader elections in your distributed application
-- howtogeek.com: How to Clean Up Old Containers and Images in Your Kubernetes Cluster An active Kubernetes cluster can accumulate old containers and images. Ensuring discarded resources are removed when redundant helps to free up resources on your cluster’s nodes. Here’s how to approach garbage collection in Kubernetes
+- howtogeek.com: How to Clean Up Old Containers and Images in Your Kubernetes Cluster An active Kubernetes cluster can accumulate old containers and images. Ensuring discarded resources are removed when redundant helps to free up resources on your cluster’s nodes. Here’s how to approach garbage collection in Kubernetes
- medium.com/blablacar: Operating Node.js in Kubernetes at scale at BlaBlaCar In this case study, you will learn how BlaBlaCar uses CPU and memory metrics and other Kubernetes features to configure scaling for Node.js apps
-- infoworld.com: How to beat the Kubernetes skills shortage While Kubernetes container management is key to digital transformation, Kubernetes talent is in short supply. Follow these 4 strategies of successful companies to fill the gap.
+- infoworld.com: How to beat the Kubernetes skills shortage While Kubernetes container management is key to digital transformation, Kubernetes talent is in short supply. Follow these 4 strategies of successful companies to fill the gap.
- blog.kubesimplify.com: DIY: How To Build A Kubernetes Policy Engine With the help of Kubernetes Admission Controller, Go, cert-manager and ko!
- faun.pub: Git Clone using Init-container | Kubernetes
- itnext.io: K8s Tips: Accessing the API Server From a Pod Don’t let this happen unless it is really necessary
@@ -9740,11 +9740,11 @@
- medium.com/trendyol-tech: Kubernetes IO Problem Investigation During one of the load tests, the team at Trendyol ran into a latency issue between two APIs deployed in Kubernetes. In this case study, you will learn how the team narrowed down the issue to cAdvisor and IO operations.
- github.com/kairos-io/kairos: Kairos - Kubernetes-focused, Cloud Native Linux meta-distribution The immutable Linux meta-distribution for edge Kubernetes. With Kairos, you can build immutable, bootable Kubernetes and OS images for your edge devices as easily as writing a Dockerfile. Optional P2P mesh with distributed ledger automates node bootstrapping and coordination.
- medium.com/@GranulateIntel: The Fundamental Principles of Kubernetes Capacity Management
-- thenewstack.io: Optimizing Kubernetes for Peak Traffic and Avoiding Setbacks Machine learning and automation can help platform teams tame complexity and meet user demand with confidence.
+- thenewstack.io: Optimizing Kubernetes for Peak Traffic and Avoiding Setbacks Machine learning and automation can help platform teams tame complexity and meet user demand with confidence.
- tech.bigbasket.com: Atlas: Streamlining BigBasket’s 40+ lines of testing across 80+ Microservices in Non-Production Environments BigBasket’s non-prod setup is complex due to multiple environments and service versions (each service can run multiple versions of itself). Learn how the team solved this with a custom proxy, header-based routing, and automated Nginx config generation.
- hervekhg.medium.com: 3 years managing Kubernetes clusters, my 10 lessons
- medium.com/@.anders: Lessons From Our 8 Years Of Kubernetes In Production — Two Major Cluster Crashes, Ditching Self-Managed, Cutting Cluster Costs, Tooling, And More In this case study, you will find the (hard) lessons learned from running Kubernetes in production for eight years: two major cluster crashes, ditching self-managed offerings, cutting cluster costs, tooling, and more
-- trstringer.com: What Determines if a Kubernetes Node is Ready?
+- trstringer.com: What Determines if a Kubernetes Node is Ready?
- medium.com/@bgrant0607: Advantages of storing configuration in container registries rather than git 🌟
- medium.com/@jainal: Mastering Graceful Shutdown in Distributed Systems and Microservices This article discusses the importance of mastering graceful shutdown in distributed systems and microservices. It provides strategies for implementing graceful shutdown and explains its context in Kubernetes integration.
- rpadovani.com: How Kubernetes picks which pods to delete during scale-in Have you ever wondered how K8s choose which pods to delete when a deployment is scaled down? Given it is not documented, I dived in the source code to learn.
@@ -9755,14 +9755,14 @@
ArgoCon North America 2026 Call for Proposals - (Related to argo topic)
-
-
silverliningsinfo.com: KubeCon: Five biggest trends from the Kubernetes love fest in Amsterdam
+silverliningsinfo.com: KubeCon: Five biggest trends from the Kubernetes love fest in Amsterdam
kubeconfig
- medium: Mastering the KUBECONFIG file
-- rcarrata.github.io: Regenerating Kubeconfig for system:admin user in OpenShift clusters You missed your kubeconfig file of your OpenShift cluster? Your dog ate your kubeconfig file? No worries! Let’s regenerate it in a easy and automated way!
-- devopscube.com: Kubeconfig File Explained With Practical Examples 🌟
+- rcarrata.github.io: Regenerating Kubeconfig for system:admin user in OpenShift clusters You missed your kubeconfig file of your OpenShift cluster? Your dog ate your kubeconfig file? No worries! Let’s regenerate it in a easy and automated way!
+- devopscube.com: Kubeconfig File Explained With Practical Examples 🌟
- iamunnip.medium.com: Merging kubeconfig Files
Kubernetes Manifests
@@ -9774,41 +9774,41 @@
Docker and Kubernetes
-
-
Docker Hardened Images for Every Developer - (Related to docker topic)
+Docker Hardened Images for Every Developer - (Related to docker topic)
-
-- opensourcerers.org: How to go from Docker to Kubernetes the right way 🌟
-- loft.sh: Docker Compose to Kubernetes: Step-by-Step Migration 🌟
-- linuxtechi.com: How to Setup Private Docker Registry in Kubernetes (k8s)
+- opensourcerers.org: How to go from Docker to Kubernetes the right way 🌟
+- loft.sh: Docker Compose to Kubernetes: Step-by-Step Migration 🌟
+- linuxtechi.com: How to Setup Private Docker Registry in Kubernetes (k8s)
- itnexst.io: Docker and Kubernetes — root vs. privileged
-- containerjournal.com: Best of 2020: How Docker and Kubernetes Work Together
-- blog.sighup.io: How to run Kubernetes without Docker Sooner or later this moment had to come, and it finally has: Kubernetes is deprecating Docker as a Container Runtime Interface in favor of the other supported runtimes. Let’s try to explain why Docker seems really replaceable.
+- containerjournal.com: Best of 2020: How Docker and Kubernetes Work Together
+- blog.sighup.io: How to run Kubernetes without Docker Sooner or later this moment had to come, and it finally has: Kubernetes is deprecating Docker as a Container Runtime Interface in favor of the other supported runtimes. Let’s try to explain why Docker seems really replaceable.
- betterprogramming.pub: How to Migrate From Docker Compose to Kubernetes Move your services from docker-compose files to Kubernetes resources and deploy them
Kubernetes vs Docker
-- cloudify.co: Docker Vs. Kubernetes
-- kinsta.com: Kubernetes vs Docker: The Difference Explained If you’re trying to decide between Docker and #Kubernetes, you’re unlikely to reach a definitive answer. These two technologies are so fundamentally different that you can’t compare them directly.
+- cloudify.co: Docker Vs. Kubernetes
+- kinsta.com: Kubernetes vs Docker: The Difference Explained If you’re trying to decide between Docker and #Kubernetes, you’re unlikely to reach a definitive answer. These two technologies are so fundamentally different that you can’t compare them directly.
Kubernetes vs Docker Swarm
-- dynatrace.com: Kubernetes vs Docker: What’s the difference?
-- imaginarycloud.com: Docker VS Kubernetes? It should be Docker + Kubernetes
+- dynatrace.com: Kubernetes vs Docker: What’s the difference?
+- imaginarycloud.com: Docker VS Kubernetes? It should be Docker + Kubernetes
- decipherzone.com: Kubernetes vs Docker Swarm: A Container Orchestration Tools Comparison
Kubernetes Admission Controllers
-- sysdig.com: Kubernetes admission controllers in 5 minutes
+- sysdig.com: Kubernetes admission controllers in 5 minutes
- blog.rewanthtammana.com: Creating Malicious Admission Controllers
-- loft.sh: Kubernetes Admission Controllers: What They Are and Why They Matter
-- kubernetes.io: Using Admission Controllers to Detect Container Drift at Runtime
-- slack.engineering: A Simple Kubernetes Admission Webhook
-- blog.nillsf.com: How to run your own admission controller on Kubernetes
+- loft.sh: Kubernetes Admission Controllers: What They Are and Why They Matter
+- kubernetes.io: Using Admission Controllers to Detect Container Drift at Runtime
+- slack.engineering: A Simple Kubernetes Admission Webhook
+- blog.nillsf.com: How to run your own admission controller on Kubernetes
- medium.com/@visweswara: What are Kubernetes Admission Controllers?
- medium.com/@jonathan_37674: Kubernetes Admission Controller: The Definitive Guide What is Kubernetes Admission Controller? Kubernetes Admission Controller is an advanced plugin for gating and governing the configuration changes and workload deployment in a cluster.
-- pradeepl.com: Introduction to Kubernetes Admission Controllers Admission controllers are a key component of the admission process performed by the Kubernetes API server. They enable fine-grained control over the object creation, update, and deletion process.
+- pradeepl.com: Introduction to Kubernetes Admission Controllers Admission controllers are a key component of the admission process performed by the Kubernetes API server. They enable fine-grained control over the object creation, update, and deletion process.
Kubernetes Mutating Webhooks
@@ -9831,7 +9831,7 @@
Kubernetes Resources
-- Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - (Related to azure topic)
+- Automated Let’s Encrypt Certificates in Azure Key Vault with ACME Bot - (Related to azure topic)
- Controlling Process Resources with Linux Control Groups (cgroups) 🌟 - A practical tutorial demonstrating how to limit CPU and RAM consumption of processes using Linux Control Groups (cgroups). It covers manual manipulation of cgroupfs, as well as using higher-level tools like libcgroup and systemd. The techniques discussed are directly applicable to managing container and Pod resources in environments like Docker and Kubernetes.
- How to run Deepseek R1 LLMs on GPU Droplets - (Related to ai topic)
-
@@ -9841,7 +9841,7 @@
- enterprisersproject.com: Managing Kubernetes resources: 5 things to remember Kubernetes automates much of the work of managing containers at scale. But containerized applications commonly share pooled resources, so you need to allocate and manage them properly
-- stackify.com: The Advantages of Using Kubernetes and Docker Together
+- stackify.com: The Advantages of Using Kubernetes and Docker Together
- linuxadvise.com: Kubernetes Node Affinity
- linuxadvise.com: Kubernetes Daemon Sets
- magalix.com: Team Productivity: Resource Management 🌟 Resource Requests, Limits and Quota
@@ -9851,27 +9851,27 @@
- medium.com: kubernetes Pod Priority and Preemption
- itnext.io: K8s prevent queue worker Pod from being killed during deployment How to prevent a Kubernetes (like RabbitMQ) queue worker Pod from being killed during deployment while handling a message?
- medium: How to configure and manage Pod in Kubernetes Cluster (K8s) There are two types of Pods: Single container pod & Multi container pod.
-- howtoforge.com: How to create Multi-Container Pods in Kubernetes
+- howtoforge.com: How to create Multi-Container Pods in Kubernetes
- Discovering Running Pods By Using DNS and Headless Services in Kubernetes When retrieving all service’s connected pods is desired
- Kubernetes Tip: What Happens To Pods Running On Node That Become Unreachable?
- medium: Kubernetes Pod Redundancy Strategies
- medium: Discovering Running Pods By Using DNS and Headless Services in Kubernetes 🌟 When retrieving all service’s connected pods is desired.
-- iximiuz.com: Service proxy, pod, sidecar, oh my!
+- iximiuz.com: Service proxy, pod, sidecar, oh my!
- linuxadvise.com: Kubernetes Static Pods
- linuxadvise.com: Kubernetes Pod Security Policy
- medium: Discovering Running Pods By Using DNS and Headless Services in Kubernetes
- medium: Notes on Graceful Shutdown in Kubernetes 🌟
- didil.medium.com: Building a Kubernetes Mutating Admission Webhook A “magic” way to inject a file into Pod Containers
-- thenucleargeeks.com: Introduction to Kubernetes Pods
+- thenucleargeeks.com: Introduction to Kubernetes Pods
- speakerdeck.com: Kubernetes Pod internals with the fundamentals of Containers
-- kubernetes.io: PodSecurityPolicy Deprecation: Past, Present, and Future 🌟
-- dustinspecker.com: IPVS: How Kubernetes Services Direct Traffic to Pods
-- returngis.net: Organizar los pods en Kubernetes usando taints y tolerations
+- kubernetes.io: PodSecurityPolicy Deprecation: Past, Present, and Future 🌟
+- dustinspecker.com: IPVS: How Kubernetes Services Direct Traffic to Pods
+- returngis.net: Organizar los pods en Kubernetes usando taints y tolerations
- medium: How to Schedule Pods on Nodes in Kubernetes
- medium: Kubernetes: Evenly Distribution of Pods Across Cluster Nodes |Puru Tuladhar
- medium: Understanding PodSecurity in Kubernetes
- blog.searce.com: Single Pod Access Mode for Persistent Volumes on Kubernetes This article will explore a new feature introduced by Kubernetes v1.22, a fourth access mode used for CSI volumes.
-- thecloudblog.net: Kubernetes Container Lifecycle Events and Hooks
+- thecloudblog.net: Kubernetes Container Lifecycle Events and Hooks
- shramikawale.medium.com: PodsDisruptionBudget: Why you will need in Kubernetes? PodDisruptionBudget is quite important if your team has an Service Level Agreement (SLA). Granted, it is not absolutely mandatory as we discussed before - if the cluster you manage has enough spare capacity in CPU/memory, the rollout can uneventfully finish without impacting the workload more often than not. Nevertheless, it is still a recommended approach to have control in the event of a voluntary disruption.
- bytes.devopscube.com: Kubernetes Pod Priority & Preemption Pod priority is a Kubernetes scheduling feature that allows Kubernetes to make scheduling decisions comparing other pods based on priority number. To assign a pod a certain priority, you need a priority class.
- aws.plainenglish.io: Pods in Kubernetes — The Smallest Deployable Units of Computing 🌟 Understand the basics of pods including the pods’ lifecycle in Kubernetes
@@ -9881,43 +9881,43 @@
- betterprogramming.pub: Understanding Kubernetes Multi-Container Pod Patterns A guide to Sidecar, Ambassador, and Adapter patterns with hands-on examples.
- medium.com/@danielaaronw: K8s Pod Anti-affinity How to ensure high availability when scheduling pods on a kubernetes cluster.
- mouliveera.medium.com: How to update configmap on POD without restart
-- devopscube.com: Kubernetes Pod Priority, PriorityClass, and Preemption Explained 🌟
+- devopscube.com: Kubernetes Pod Priority, PriorityClass, and Preemption Explained 🌟
- medium.com/@meng.yan: What Happens When Deleting a Pod
- itnext.io: Kubernetes Graceful Shutdown | Daniele Polencic 🌟 - community.ops.io: How do you gracefully shut down Pods in Kubernetes? Get tips on smoothly decommissioning your k8s pods. In this article, you will learn what happens when a pod is deleted (voluntarily or not) in the cluster and how Kubernetes handles graceful shutdown.
-- nunoadrego.com: Abusing Pod Priority Pod Priority can be useful for some use cases, such as prioritizing critical applications, but definitely can catch you off guard if you don’t have the right guardrails in place. This post illustrates the potential consequences of not having them.
+- nunoadrego.com: Abusing Pod Priority Pod Priority can be useful for some use cases, such as prioritizing critical applications, but definitely can catch you off guard if you don’t have the right guardrails in place. This post illustrates the potential consequences of not having them.
- blog.devgenius.io: DevOps in K8s — Pod Downward API The K8s Downward API is a feature that allows containers running in a pod to access metadata about themselves and the pod they are running in. This metadata can be exposed as environment variables or as files within the container’s file system.
- itnext.io: POD rebalancing and allocations in kubernetes | Daniele Polencic 🌟🌟 Does Kubernetes rebalance your Pods? If there’s a node that has more space, does Kubernetes recompute and balance the workloads?
-- kubernetes.io: Protect Your Mission-Critical Pods From Eviction With PriorityClass Pod priority and preemption help to make sure that mission-critical pods are up in the event of a resource crunch by deciding order of scheduling and eviction.
-- neonmirrors.net: Reducing Pod Volume Update Times Changes to a Secret of ConfigMap mounted into a pod can take 60 to 90 seconds to propagate to the container. In this article, you’ll discuss how you could speed up the process with a Kyverno policy.
+- kubernetes.io: Protect Your Mission-Critical Pods From Eviction With PriorityClass Pod priority and preemption help to make sure that mission-critical pods are up in the event of a resource crunch by deciding order of scheduling and eviction.
+- neonmirrors.net: Reducing Pod Volume Update Times Changes to a Secret of ConfigMap mounted into a pod can take 60 to 90 seconds to propagate to the container. In this article, you’ll discuss how you could speed up the process with a Kyverno policy.
- itnext.io: Kubernetes Scheduler Deep Dive | Daniele Polencic
-- kubernetes.io: configure-pod-container / Use a User Namespace With a Pod
+- kubernetes.io: configure-pod-container / Use a User Namespace With a Pod
- InPlacePodVerticalScaling (kubernetes v1.27): ==engineering.doit.com: No Restarts, No Disruptions: Seamless Pod Resource updates with In-Place Resizing Kubernetes v1.27 introduces InPlacePodVerticalScaling, allowing seamless pod resource resizing without restarts. This feature enhances efficiency, reduces downtime, and offers cost savings
-- devopscube.com/kubernetes-pod What is Kubernetes Pod? Explained With Practical Examples
+- devopscube.com/kubernetes-pod What is Kubernetes Pod? Explained With Practical Examples
Kubernetes ConfigMaps
-- blog.palark.com: ConfigMaps in Kubernetes: how they work and what you should remember 🌟
+- blog.palark.com: ConfigMaps in Kubernetes: how they work and what you should remember 🌟
- medium: ConfigMaps in Kubernetes (K8s)
- itnext.io: Working with kubernetes configmaps, part 1: volume mounts
-- blog.gopaddle.io: Strange things you never knew about Kubernetes ConfigMaps on day one 🌟🌟
-- k21academy.com: Kubernetes ConfigMaps and Secrets: Guide to Create and Update 🌟
+- blog.gopaddle.io: Strange things you never knew about Kubernetes ConfigMaps on day one 🌟🌟
+- k21academy.com: Kubernetes ConfigMaps and Secrets: Guide to Create and Update 🌟
- kubermatic.com: Keeping the State of Apps Part 3: Introduction to ConfigMaps 🌟
- medium.com/codex: Kubernetes ConfigMaps Explained
- linuxadvise.com: Kubernetes Config Maps
- aditya-sunjava.medium.com: Externalizing Configurations in Kubernetes Using ConfigMap and Secret
-- thenewstack.io: How to Make the Most of Kubernetes Environment VariablesEnvironment variables play an important role in Kubernetes. You can use them not only to provide basic information about the operating system to your application, but also as the main configuration mechanism for your pods or for passing sensitive information. It’s not uncommon in Kubernetes to extract as much configuration as possible as info ConfigMaps and environment variables to keep your Docker images as generic as possible. As you can see, even something simple like environment variables have a few options in Kubernetes.
+- thenewstack.io: How to Make the Most of Kubernetes Environment VariablesEnvironment variables play an important role in Kubernetes. You can use them not only to provide basic information about the operating system to your application, but also as the main configuration mechanism for your pods or for passing sensitive information. It’s not uncommon in Kubernetes to extract as much configuration as possible as info ConfigMaps and environment variables to keep your Docker images as generic as possible. As you can see, even something simple like environment variables have a few options in Kubernetes.
- medium.com/@shrishtishreya: Kubernetes ConfigMaps Explained A ConfigMap is an API object that lets you store configuration for other objects to use. Unlike most Kubernetes objects that have a spec, a ConfigMap has data and binaryData fields.
- medium.com/open-devops-academy: Learn Kubernetes: ConfigMap — Inject the values of a ConfigMap in a container as a volume
-- thorsten-hans.com: Hot-Reload .NET Configuration in Kubernetes with ConfigMaps
+- thorsten-hans.com: Hot-Reload .NET Configuration in Kubernetes with ConfigMaps
- devopsparthu.hashnode.dev: Day 35: Mastering ConfigMaps and Secrets in Kubernetes
Kubernetes Secrets
- linuxadvise.com: Kubernetes Secrets
-- https://blog.newrelic.com/engineering/how-to-use-kubernetes-secrets/
+- https://blog.newrelic.com/engineering/how-to-use-kubernetes-secrets
- mixi-developers.mixi.co.jp: Comparing External Secrets Operator with Secret Storage CSI as Kubernetes External Secrets is Deprecated In this article, you will compare the External Secrets Operator with Secret Storage CSI for using external secrets in a Kubernetes cluster. You will compare:
- Architecture
- Authorization management
@@ -9926,7 +9926,7 @@
- medium.com/4th-coffee: State of Kubernetes Secrets Management in 2022
-- auth0.com: Shhhh… Kubernetes Secrets Are Not Really Secret! Learn how to setup secure secrets on Kubernetes using Sealed Secrets, External Secrets Operator, and Secrets Store CSI driver. Sealed Secrets is a great solution to secure secrets in Git. For larger teams and projects, the External Secrets Operator or the Secrets Store CSI Driver is a better solution to manage secrets securely. Learn the pros and cons in this article.
+- auth0.com: Shhhh… Kubernetes Secrets Are Not Really Secret! Learn how to setup secure secrets on Kubernetes using Sealed Secrets, External Secrets Operator, and Secrets Store CSI driver. Sealed Secrets is a great solution to secure secrets in Git. For larger teams and projects, the External Secrets Operator or the Secrets Store CSI Driver is a better solution to manage secrets securely. Learn the pros and cons in this article.
- faun.pub: Encrypting Kubernetes Secrets at Rest A guideline to encrypt kubernetes secrets data.
- vinothecloudone.medium.com: Kubernetes Configuration Patterns 101
- levelup.gitconnected.com: Kubernetes 101: Secrets
@@ -9934,43 +9934,43 @@
Kubernetes Volumes
- Kubernetes Storage - Volumes
-- Searchable list of Kubernetes Storage Providers
+- Searchable list of Kubernetes Storage Providers
Kubernetes Namespaces and Multi Tenancy. Self Service Namespaces
-- Self-Service Kubernetes Namespaces Are A Game-Changer 🌟
-- qvault.io: How to Restart All Pods in a Kubernetes Namespace
+- Self-Service Kubernetes Namespaces Are A Game-Changer 🌟
+- qvault.io: How to Restart All Pods in a Kubernetes Namespace
- medium: How to create Namespaces in Kubernetes? 🌟
- starwindsoftware.com: Remove a Kubernetes namespace blocked with Terminating status
- opensource.com: Configure multi-tenancy with Kubernetes namespaces 🌟 Namespaces provide basic building blocks of access control for applications, users, or groups of users.
- Kubernetes Hierarchical Namespace Controller (slides from Kubernetes Multitenancy Working Group) 🌟
-- kubernetes.io: Introducing Hierarchical Namespaces
-- Hierarchical namespaces make it easier to share your Kubernetes cluster. For example, you can create additional namespaces under your team’s namespace, even if you don’t have cluster-level permission to create namespaces
+- kubernetes.io: Introducing Hierarchical Namespaces
+- Hierarchical namespaces make it easier to share your Kubernetes cluster. For example, you can create additional namespaces under your team’s namespace, even if you don’t have cluster-level permission to create namespaces
- medium: Kubernetes Multi-Tenancy — A Best Practices Guide 🌟
-- vamsitalkstech.com: Kubernetes Multi-tenancy Best Practices & Architecture Model..(2/2)
-- loft.sh: Kubernetes Multi-Tenancy: Why Virtual Clusters Are The Best Solution
-- kubesphere.io: Kubernetes Multi-tenancy in KubeSphere [ARCHIVED]
-- kubernetes.io: Three Tenancy Models For Kubernetes What are your tenancy options with Kubernetes? This post calls out three: by namespace, by cluster, by control plane.
-- thenewstack.io: Avoiding the Pitfalls of Multitenancy in Kubernetes
-- blog.sighup.io: Hierarchical Namespace Controller (HNC): a look into the future of Kubernetes Multitenancy Hierarchical Namespace Controller (HNC) is bringing a better multi-tenancy model to Kubernetes. In this article we are exploring the current state of the project and useful use-cases.
-- vamsitalkstech.com: Introduction to Kubernetes Multi-tenancy..(½)
+- vamsitalkstech.com: Kubernetes Multi-tenancy Best Practices & Architecture Model..(2/2)
+- loft.sh: Kubernetes Multi-Tenancy: Why Virtual Clusters Are The Best Solution
+- kubesphere.io: Kubernetes Multi-tenancy in KubeSphere [ARCHIVED]
+- kubernetes.io: Three Tenancy Models For Kubernetes What are your tenancy options with Kubernetes? This post calls out three: by namespace, by cluster, by control plane.
+- thenewstack.io: Avoiding the Pitfalls of Multitenancy in Kubernetes
+- blog.sighup.io: Hierarchical Namespace Controller (HNC): a look into the future of Kubernetes Multitenancy Hierarchical Namespace Controller (HNC) is bringing a better multi-tenancy model to Kubernetes. In this article we are exploring the current state of the project and useful use-cases.
+- vamsitalkstech.com: Introduction to Kubernetes Multi-tenancy..(½)
- asonisg.medium.com: Multi-tenancy with Kubernetes (Part-1)
-- openshift.com: The Hidden Dangers of Terminating Namespaces 🌟
+- openshift.com: The Hidden Dangers of Terminating Namespaces 🌟
- medium: Kubernetes Namespaces vs. Virtual Clusters
- engineering.salesforce.com: Project Agumbe: Share Objects Across Namespaces in Kubernetes 🌟
-- p3r.one: Delete namespace stuck in Terminating State
-- loft.sh: Multi-Tenant Kubernetes Clusters: Challenges and Useful Tooling
-- infracloud.io: Introduction to Multi-Tenancy in Kubernetes
-- redhat.com: Kubernetes architecture: How to use hierarchical namespaces for multiple tenants Hierarchical namespaces make it easier to manage individual tenants’ permissions and capabilities in a multi-tenant Kuberentes architecture.
-- kubernetes.io: Multi-tenancy 🌟🌟🌟
-- thinksys.com: Understanding Multi-Tenancy in Kubernetes 🌟
-- doordash.engineering: Fast Feedback Loop for Kubernetes Product Development in a Production Environment
+- p3r.one: Delete namespace stuck in Terminating State
+- loft.sh: Multi-Tenant Kubernetes Clusters: Challenges and Useful Tooling
+- infracloud.io: Introduction to Multi-Tenancy in Kubernetes
+- redhat.com: Kubernetes architecture: How to use hierarchical namespaces for multiple tenants Hierarchical namespaces make it easier to manage individual tenants’ permissions and capabilities in a multi-tenant Kuberentes architecture.
+- kubernetes.io: Multi-tenancy 🌟🌟🌟
+- thinksys.com: Understanding Multi-Tenancy in Kubernetes 🌟
+- doordash.engineering: Fast Feedback Loop for Kubernetes Product Development in a Production Environment
- towardsaws.com: Kubernetes Multi-Tenancy Approach Using Minikube For Demonstration. In this article, you’ll compare 2 approaches to multi-tenancy:
- Using RBAC and namespaces
- Using the Capsule operator
-- loft.sh: 10 Essentials For Kubernetes Multi-Tenancy
+- loft.sh: 10 Essentials For Kubernetes Multi-Tenancy
- Resource Limits
- Cost Tracking
- Audit Logging
@@ -9992,11 +9992,11 @@
- divya-mohan0209.medium.com: Mo’ tenancy, Mo’ problems. A curated (but not exhaustive) list of FOSS projects addressing multi-tenancy challenges in K8s.
-- cast.ai: Kubernetes Namespace: How To Use It To Organize And Optimize Costs
+- cast.ai: Kubernetes Namespace: How To Use It To Organize And Optimize Costs
- medium.com/adeo-tech: A walkthrough guide for Multi-Tenancy with GKE
- itnext.io: Multi-Tenancy in Kubernetes | Daniele Polencic 🌟🌟
- faun.pub: Hierarchical Namespaces in Kubernetes
-- blog.jessfraz.com: Hard Multi-Tenancy in Kubernetes (2018)
+- blog.jessfraz.com: Hard Multi-Tenancy in Kubernetes (2018)
Kiosk Multi-Tenancy Extension for Kubernetes
@@ -10016,22 +10016,22 @@
-
sandeepbaldawa.medium.com: K8s Labels & Selectors In this post, we will look at What Kubernetes(K8s) Labels and Selectors are, Why do we need them, How to use them.
-- blog.kubecost.com: The Guide to Kubernetes Labels
+- blog.kubecost.com: The Guide to Kubernetes Labels
- millionvisit.blogspot.com: Kubernetes for Developers #8: Kubernetes Object Name, Labels, Selectors and Namespace
- millionvisit.blogspot.com: Kubernetes for Developers #11: Pod Organization using Labels
- linuxadvise.com: Kubernetes Node Selectors
- ithands-on.com: Kubernetes 101 : Changing a Pod’s label on the fly
-- blog.newrelic.com: Kubernetes Fundamentals, Part 4: How to Organize Clusters
-- cast.ai: Kubernetes Labels: Expert Guide with 10 Best Practices With Kubernetes labels, DevOps teams can troubleshoot issues faster, apply configuration changes en masse, and respond quickly to issues. Labels also give crucial insights into your costs, boosting your monitoring, allocation, and management capabilities. Following best practices when using labels helps you realize tremendous benefits from infrastructure visibility and efficient operations.
+- blog.newrelic.com: Kubernetes Fundamentals, Part 4: How to Organize Clusters
+- cast.ai: Kubernetes Labels: Expert Guide with 10 Best Practices With Kubernetes labels, DevOps teams can troubleshoot issues faster, apply configuration changes en masse, and respond quickly to issues. Labels also give crucial insights into your costs, boosting your monitoring, allocation, and management capabilities. Following best practices when using labels helps you realize tremendous benefits from infrastructure visibility and efficient operations.
- itnext.io: Labels & Annotations in Kubernetes | Daniele Polencic In Kubernetes, you can use labels to assign key-value pairs to any resources. Labels are ubiquitous and necessary to everyday operations such as creating services. However, how should you name and use those labels? - dev.to: Labels and annotations in Kubernetes
Kubernetes Taints and Tolerations
-- thenucleargeeks.com: Taints and Tolerations in Kubernetes
+- thenucleargeeks.com: Taints and Tolerations in Kubernetes
- faun.pub: Taints And Toleration Basics In Kubernetes
- blog.learncodeonline.in: Kubernetes Scheduling - Taints and Tolerations
- kamsjec.medium.com: Kubernetes Taints and Tolerations
-- trstringer.com: Kubernetes Taints, Tolerations, and Understanding the PreferNoSchedule Effect
+- trstringer.com: Kubernetes Taints, Tolerations, and Understanding the PreferNoSchedule Effect
- medium.com/@sam.euchaliptus: Tolerations & NodeAffinity for Deterministic Pod Scheduling in Kubernetes A pod relies on the Kubernetes scheduler to be placed in a node. This article explains how you can influence allocation decisions with tolerations and node affinity.
Kubernetes Deployment, ReplicaSet, Rollling Updates and Rollbacks
@@ -10041,21 +10041,21 @@
- linuxadvise.com: Kubernetes Rolling Updates and Rollbacks
- medium: How Rolling and Rollback Deployments work in Kubernetes
- medium: Kubernetes Deployment — Rolling Updates and Rollbacks Explained Learn how to update the application once created a Deployment in the Kubernetes cluster and how to rollback.
-- thenewstack.io: How do applications run on kubernetes?
-- deepsource.io: Breaking down zero downtime deployments in Kubernetes An in-depth analysis of deployments in Kubernetes
-- k21academy.com: Kubernetes Deployment and Step-by-Step Guide to Deployment: Update, Rollback, Scale & Delete
+- thenewstack.io: How do applications run on kubernetes?
+- deepsource.io: Breaking down zero downtime deployments in Kubernetes An in-depth analysis of deployments in Kubernetes
+- k21academy.com: Kubernetes Deployment and Step-by-Step Guide to Deployment: Update, Rollback, Scale & Delete
- medium: Kubernetes Deployment: Connect Your Front End to Your Back End With Nginx
- mirantis.com: Introduction to YAML: Creating a Kubernetes deployment
- medium: Kubernetes Deployment Explained Learn what is Deployment in the Kubernetes cluster and learn the advantages of the Deployment object.
-- learnk8s.io: Graceful shutdown and zero downtime deployments in Kubernetes In this article, you will learn how to prevent broken connections when a Pod starts up or shuts down. You will also learn how to shut down long-running tasks gracefully.
+- learnk8s.io: Graceful shutdown and zero downtime deployments in Kubernetes In this article, you will learn how to prevent broken connections when a Pod starts up or shuts down. You will also learn how to shut down long-running tasks gracefully.
- thoughtbot.com: Zero Downtime Rails Deployments with Kubernetes
- medium: Deployment types in Kubernetes
- hackernoon.com: How To Deploy Code Faster Using Kubernetes
-- fosstechnix.com: Rolling out and Rolling back updates with Zero Downtime on Kubernetes Cluster
+- fosstechnix.com: Rolling out and Rolling back updates with Zero Downtime on Kubernetes Cluster
- medium: 5 Things We Overlooked When Deploying Our First App on Kubernetes
- Our Journey to Zero Downtime Rolling Updates with Ambassador In this article you will cover: How Kubernetes lifecycle hooks can be used to shutdown applications gracefully. How pods are removed from the system and why it is necessary to understand and carefully handle the shutdown sequence appropriately.
- medium: Kubernetes Tip: How Statefulsets Behave Differently Than Deployments When Node Fails? What happens to the Pods when a node fails in Kubernetes?
-- learnsteps.com: Basics on Kubernetes: What exactly is a deployment?
+- learnsteps.com: Basics on Kubernetes: What exactly is a deployment?
- polarsquad.com: Check your Kubernetes deployments!
- yankeexe.medium.com: How Rolling and Rollback Deployments work in Kubernetes
- medium.com/okteto: Beginner’s Guide to Kubernetes Deployments
@@ -10074,13 +10074,13 @@
- routerhan.medium.com: Understanding Kubernetes Deployment — A Beginner’s Guide In K8s, a Deployment is a resource object that defines the desired state of an app or workload. It provides a way to declaratively manage the deployment & scaling of containerized apps.
- blog.devgenius.io: Blue Green Deployment with Kubernetes
- itnext.io: Sticky sessions canary releases in kubernetes Daniele Polencic Sticky sessions or session affinity is a convenient strategy to keep subsequent requests always reaching the same pod.
-- learnk8s.io: How do you rollback deployments in Kubernetes? 🌟
+- learnk8s.io: How do you rollback deployments in Kubernetes? 🌟
Kubernetes StatefulSet
- medium: Kubernetes — Difference between Deployment and StatefulSet in K8s
-- kubermatic.com: Keeping the State of Apps 6: Introduction to StatefulSets
-- loft.sh: Kubernetes StatefulSet - Examples & Best Practices
+- kubermatic.com: Keeping the State of Apps 6: Introduction to StatefulSets
+- loft.sh: Kubernetes StatefulSet - Examples & Best Practices
@@ -10096,7 +10096,7 @@
Kubernetes DaemonSets
- Getting a shell on each node Learn how you can use a DaemonSet to expose an SSH shell on each node of your cluster (even if you don’t have SSH installed)
-- thenewstack.io: Kubernetes DaemonSets: A Detailed Introductory Tutorial
+- thenewstack.io: Kubernetes DaemonSets: A Detailed Introductory Tutorial
- blog.learncodeonline.in: Kubernetes Scheduling - DaemonSet What is Kubernetes Daemon Set! How it is different from ReplicaSet!
Kubernetes Jobs and Cron Jobs
@@ -10108,7 +10108,7 @@
- opensource.com: A beginner’s guide to Kubernetes Jobs and CronJobs Use Jobs and CronJobs to control and manage Kubernetes pods and containers.
- medium: Jobs & Cronjobs in Kubernetes Cluster
-- devopscube.com: How To Create Kubernetes Jobs/Cron Jobs – Getting Started Guide
+- devopscube.com: How To Create Kubernetes Jobs/Cron Jobs – Getting Started Guide
- medium.com/geekculture: Setup a CronJob to execute Kubectl or AWS commands Kubernetes Tricks | AWS CLI | CronJob | Secrets | Backup Databases | Postgres Backup in Kubernetes
- dwdraju.medium.com: Kubernetes Job or CronJob: Which One to Use and When? 🌟
- blog.devgenius.io: K8s — Why Use Job Instead of Pod Directly?
@@ -10118,13 +10118,13 @@
- medium.com/@abhinav.ittekot: Running Kubernetes jobs with sidecar containers
- github.com/alexellis/run-job Run a Kubernetes Job and get the logs when it’s done 🏃♂️
- blog.devops.dev: Understanding Jobs and CronJobs in Kubernetes
-- infoq.com: The Great Lambda Migration to Kubernetes Jobs—a Journey in Three Parts 🌟
+- infoq.com: The Great Lambda Migration to Kubernetes Jobs—a Journey in Three Parts 🌟
Kubernetes Services
-- blog.alexellis.io: A Primer: Accessing services in Kubernetes Learn how to access your applications on Kubernetes and the differences between a LoadBalancer, NodePort, port-forwarding and Ingress through examples
+- blog.alexellis.io: A Primer: Accessing services in Kubernetes Learn how to access your applications on Kubernetes and the differences between a LoadBalancer, NodePort, port-forwarding and Ingress through examples
- faun.pub: Kubernetes — Active/Passive Load Balancing with Services There can be a number of reasons one might want to do active/passive load balancing, for example licensing constraints, etc. In this article, you will learn how to do so in Kubernetes using labels and services
-- harness.io: Kubernetes Services Explained 🌟 This tutorial will explain the difference between four Kubernetes service types, and how you should choose the best one for your application.
+- harness.io: Kubernetes Services Explained 🌟 This tutorial will explain the difference between four Kubernetes service types, and how you should choose the best one for your application.
- devineer.medium.com: Kubernetes Services Explained
- How Kubernetes solves Service Discovery
- How a Load Balancer Service provisions a (cloud) Load Balancer
@@ -10142,16 +10142,16 @@
Kubernetes Deployment Strategies
-- youtube: deployment strategies in kubernetes | recreate | rolling update | blue/green | canary
+- youtube: deployment strategies in kubernetes | recreate | rolling update | blue/green | canary
- auth0.com: Deployment Strategies In Kubernetes Learn what are the different deployment strategies available in Kubernetes and how to use them.
- educative.io: A deep dive into Kubernetes Deployment strategies
-- weave.works: Kubernetes Deployment Strategies 🌟
+- weave.works: Kubernetes Deployment Strategies 🌟
- medium.com: Kubernetes Canary Deployment #1 Gitlab CI
-- semaphoreci.com: Continuous Blue-Green Deployments With Kubernetes
+- semaphoreci.com: Continuous Blue-Green Deployments With Kubernetes
- medium: Fully automated canary deployments in Kubernetes
-- auth0.com: Deployment Strategies In Kubernetes Learn what are the different deployment strategies available in Kubernetes and how to use them.
-- blog.knoldus.com: Introduction to Kubernetes Deployment Strategies
-- blog.knoldus.com: Introduction to Kubernetes Deployment Strategies – Part 2
+- auth0.com: Deployment Strategies In Kubernetes Learn what are the different deployment strategies available in Kubernetes and how to use them.
+- blog.knoldus.com: Introduction to Kubernetes Deployment Strategies
@@ -10168,18 +10168,18 @@
Kubernetes API
-- kubernetes.io: Kubernetes API
-- thenewstack.io: Living with Kubernetes: API Lifecycles and You
+- kubernetes.io: Kubernetes API
+- thenewstack.io: Living with Kubernetes: API Lifecycles and You
- blog.tilt.dev: Kubernetes is so Simple You Can Explore it with Curl
- learndevops.substack.com: Hitting prometheus API with curl and jq 🌟 Determine offending pods that use more RAM than requested, causing OOM, with Prometheus and jq.
-- thenewstack.io: Kubernetes Is Not Just About Containers — It’s About the API 🌟
-- kubernetes.io: Alpha in Kubernetes v1.22: API Server Tracing
-- evancordell.com: 16 things you didn’t know about Kube APIs and CRDs
+- thenewstack.io: Kubernetes Is Not Just About Containers — It’s About the API 🌟
+- kubernetes.io: Alpha in Kubernetes v1.22: API Server Tracing
+- evancordell.com: 16 things you didn’t know about Kube APIs and CRDs
- martinheinz.dev: Could Kubernetes Pods Ever Become Deprecated? 🌟 Could a core object or API in Kubernetes, such as Pod, Deployment or Service be removed and if so, how would that go?
-- trstringer.com: Discover Kubernetes API Calls from kubectl
+- trstringer.com: Discover Kubernetes API Calls from kubectl
- iximiuz.com: Working with Kubernetes API - Resources, Kinds, and Objects
-
-
iximiuz.com: How To Call Kubernetes API using Simple HTTP Client 🌟🌟🌟 The new kubectl create token command is pretty handy! Updated the article with the simplified way to call the Kubernetes API with curl (or alike).
+iximiuz.com: How To Call Kubernetes API using Simple HTTP Client 🌟🌟🌟 The new kubectl create token command is pretty handy! Updated the article with the simplified way to call the Kubernetes API with curl (or alike).
- How to get the API server address
- How to authenticate API server to clients
@@ -10190,9 +10190,9 @@
-
-
iximiuz.com: Working with Kubernetes API If you are working in Go with the Kubernetes API, these articles are pure gold. Get the full difference between resources and kinds.
+iximiuz.com: Working with Kubernetes API If you are working in Go with the Kubernetes API, these articles are pure gold. Get the full difference between resources and kinds.
-- iximiuz.com: How To Extend Kubernetes API - Kubernetes vs. Django In this article, you’ll learn how to extend Kubernetes API with:
+- iximiuz.com: How To Extend Kubernetes API - Kubernetes vs. Django In this article, you’ll learn how to extend Kubernetes API with:
- Kubernetes Custom Resources
- Kubernetes Custom Controllers
- Kubernetes Admission Webhooks
@@ -10206,27 +10206,27 @@
Multi-Cluster Services API
-- thenewstack.io: Extending Kubernetes Services with Multi-Cluster Services API
-- kubernetes.io: Introducing ClusterClass and Managed Topologies in Cluster API The Cluster API community is happy to announce the implementation of ClusterClass and Managed Topologies, a new feature that will greatly simplify how you can provision, upgrade, and operate multiple Kubernetes clusters in a declarative way.
+- thenewstack.io: Extending Kubernetes Services with Multi-Cluster Services API
+- kubernetes.io: Introducing ClusterClass and Managed Topologies in Cluster API The Cluster API community is happy to announce the implementation of ClusterClass and Managed Topologies, a new feature that will greatly simplify how you can provision, upgrade, and operate multiple Kubernetes clusters in a declarative way.
Kubernetes Health Checks/Probes. Startup, Liveness, Readiness
- medium: How to Perform Health checks in Kubernetes (K8s)
- If you have a livenessProbe that takes over one second, it’ll fail when you update to kubernetes 1.20, because a long-standing bug with how the default was handled has been fixed. You must override the ExecProbeTimeout if your probe takes more than 1s
- Liveness and Readiness Probes for Kubernetes in Phoenix application
-- Kubernetes Liveness and Readiness Probes
-- loft.sh: Kubernetes Readiness Probes - Examples & Common Pitfalls
+- Kubernetes Liveness and Readiness Probes
+- loft.sh: Kubernetes Readiness Probes - Examples & Common Pitfalls
- millionvisit.blogspot.com: Kubernetes for Developers #12: Effective way of using K8 Liveness Probe
- millionvisit.blogspot.com: Kubernetes for Developers #13: Effective way of using K8 Readiness Probe
-- andrewlock.net: Deploying ASP.NET Core applications to Kubernetes - Part 6 - Adding health checks with Liveness, Readiness, and Startup probes
+- andrewlock.net: Deploying ASP.NET Core applications to Kubernetes - Part 6 - Adding health checks with Liveness, Readiness, and Startup probes
- itnext.io: Kubernetes Probes: Startup, Liveness, Readiness
- itnext.io: Kubernetes Readiness Probes — Examples & Common Pitfalls
- youtube: Kubernetes 101: Get Better Uptime with K8s Health Checks
-- returngis.net: Pruebas de vida de nuestros contenedores en Kubernetes
-- blog.newrelic.com: Kubernetes Fundamentals, Part 2: How to Use Health Checks
-- komodor.com: Kubernetes Liveness Probes: A Practical Guide
+- returngis.net: Pruebas de vida de nuestros contenedores en Kubernetes
+- blog.newrelic.com: Kubernetes Fundamentals, Part 2: How to Use Health Checks
+- komodor.com: Kubernetes Liveness Probes: A Practical Guide
- martinheinz.dev: Improving Application Availability with Pod Readiness Gates Making sure your app running in Kubernetes is available and ready to serve traffic can be easy with Pod liveness and readiness probes. However, not all applications are built to use probes. Is there any solution for when Pod probes aren’t enough?
-- thenewstack.io: Kubernetes Health Checks Using Probes
+- thenewstack.io: Kubernetes Health Checks Using Probes
- faun.pub: Straight to the Point: Kubernetes Probes Both readiness and liveness probe run in parallel throughout the life of a container. Use the liveness probe to detect an internal failure and restart the container (e.g. HTTP server down). Use the readiness probe to detect if you can serve traffic (e.g. established DB connection) and wait (not restart) for the container. A dead container is also not a ready container. To serve traffic, all containers within a pod must be ready.
- guyzsarun.medium.com: Kubernetes Liveness, Readiness Probe Explained
- hmh.engineering: Dive into Kubernetes Healthchecks (part 1) 🌟 In this article, you’ll learn about health checks and:
@@ -10237,9 +10237,9 @@
- medium.com/devops-mojo: Kubernetes — Probes (Liveness, Readiness, and Startup) Overview Introduction to Types of Probes and Configure Health Checks using Probes in Kubernetes.
-- doordash.engineering: How to Handle Kubernetes Health Checks In this article, the team at DoorDash shares the lessons learned from not paying enough attention to the Kubernetes probes and how those contributed to an outage during Black Friday
-- datree.io: 6 Best Practices for Effective Readiness and Liveness Probes
-- thenewstack.io: Kubernetes Probes (and Why They Matter for Autoscaling) 🌟 In addition to validating our workloads’ health, we can use them to monitor and gather information about other events affecting containers.
+- doordash.engineering: How to Handle Kubernetes Health Checks In this article, the team at DoorDash shares the lessons learned from not paying enough attention to the Kubernetes probes and how those contributed to an outage during Black Friday
+- datree.io: 6 Best Practices for Effective Readiness and Liveness Probes
+- thenewstack.io: Kubernetes Probes (and Why They Matter for Autoscaling) 🌟 In addition to validating our workloads’ health, we can use them to monitor and gather information about other events affecting containers.
- faun.pub: Kubernetes Liveness Probes In this article, we will take a look at Liveness Probes in Kubernetes (K8S), with some useful examples. Defining probes correctly can improve pod resilience and availability.
- dev.to: Configure Kubernetes Readiness and Liveness Probes - Tutorial | Pavan Belagatti 🌟
- dnastacio.medium.com: The Art and Science of Probing a Kubernetes Container In this article, you’ll learn how to author Kubernetes container probes, with particular attention to the relatively new addition of startup probes to the mix
@@ -10256,23 +10256,23 @@
- cloudtechtwitter.com: Kubernetes Quality of Service (QoS) class Quality of Service (QoS) class to determine which pod to kill first in Kubernetes
- itnext.io: Kubernetes Resource Management in Production Requests, Limits, Overcommitment, Slack/Waste, Throttling
- medium: Ultimate Kubernetes Resource Planning Guide
-- learnk8s.io: Setting the right requests and limits in Kubernetes 🌟 By far the best read on requests and limits in Kubernetes.
-- openshift.com: Sizing Applications in Kubernetes
+- learnk8s.io: Setting the right requests and limits in Kubernetes 🌟 By far the best read on requests and limits in Kubernetes.
+- openshift.com: Sizing Applications in Kubernetes
- magalix.com: Capacity Planning When we have multiple Pods with different Priority Class values, the admission controller starts by sorting Pods according to their priority. What happens when there are no nodes with available resources to schedule a high-priority pods?
-- sysdig.com: Kubernetes capacity planning: How to rightsize the requests of your cluster
-- kubernetes.io Policy Limit Ranges
-- sysdig.com: Understanding Kubernetes limits and requests by example 🌟 Choosing the optimal limits for our Kubernetes cluster is key in order to get the best of both energy consumption and costs. In this article, you will learn how to set the right requests and limits for your containers.
+- sysdig.com: Kubernetes capacity planning: How to rightsize the requests of your cluster
+- kubernetes.io Policy Limit Ranges
+- sysdig.com: Understanding Kubernetes limits and requests by example 🌟 Choosing the optimal limits for our Kubernetes cluster is key in order to get the best of both energy consumption and costs. In this article, you will learn how to set the right requests and limits for your containers.
- dev.to/aurelievache: Understanding Kubernetes: part 22 – LimitRange
- dzone: Dive Deep Into Resource Requests and Limits in Kubernetes This article will be helpful for you to understand how Kubernetes requests and limits work, and why they can work in an expected way.
-- sysdig.com: How to rightsize the Kubernetes resource limits
+- sysdig.com: How to rightsize the Kubernetes resource limits
- medium: Understanding resource limits in kubernetes: cpu time
-- blog.newrelic.com: Kubernetes Fundamentals, Part 1: How to Manage Cluster Capacity with Requests and Limits
+- blog.newrelic.com: Kubernetes Fundamentals, Part 1: How to Manage Cluster Capacity with Requests and Limits
- john-tucker.medium.com: Kubernetes CPU Resource Requests at Runtime While it is well documented how CPU resource request impact the scheduling of Pods to Nodes, it is less clear of the impact once Pods (and their Containers) are running on a Node.
- faun.pub: Practical example of how to set requests and limits on Kubernetes
-- home.robusta.dev: For the love of god, stop using CPU limits on Kubernetes 🌟🌟 Do you really understand CPU limits and requests on Kubernetes?
-- netdata.cloud: Kubernetes Throttling Doesn’t Have To Suck. Let Us Help! 🌟🌟 CPU limits are probably the most misunderstood concept in Kubernetes CPU resources allocation and management.
+- home.robusta.dev: For the love of god, stop using CPU limits on Kubernetes 🌟🌟 Do you really understand CPU limits and requests on Kubernetes?
+- netdata.cloud: Kubernetes Throttling Doesn’t Have To Suck. Let Us Help! 🌟🌟 CPU limits are probably the most misunderstood concept in Kubernetes CPU resources allocation and management.
- dnastacio.medium.com: Why you should keep using CPU limits on Kubernetes 🌟🌟 Or why staying away from unused CPU may be good for your containers.
-- komodor.com: Kubernetes CPU Limits and Throttling CPU throttling means that applications are granted more constrained resources when they are near to the container’s CPU limit.
+- komodor.com: Kubernetes CPU Limits and Throttling CPU throttling means that applications are granted more constrained resources when they are near to the container’s CPU limit.
- github.com/FairwindsOps: Goldilocks is a utility that can help you identify a starting point for resource requests and limits
- levelup.gitconnected.com: How to guess the right size for your Kubernetes Pods? Guessing the right size for your Kubernetes resources and FinOps management using Goldilocks
@@ -10303,14 +10303,14 @@
- dev.to/pavanbelagatti: Learn How to Set Kubernetes Resource Requests and Limits
- iceburn.medium.com: Kubernetes Resource Requests and Resource Limits
- home.robusta.dev: When is a CPU not a CPU? Benchmark of Kubernetes Providers and Node Efficiency 🌟🌟 TLDR: On some cloud providers, you get half the CPU you expect due to burstable nodes. Without burstable nodes, overhead is improved but still significant.
-- piotrminkowski.com: Resize CPU Limit To Speed Up Java Startup on Kubernetes In this article, you will learn how to solve problems with the slow startup of Java apps on Kubernetes related to the CPU limit. We will use a new Kubernetes feature called “In-place Pod Vertical Scaling”. It allows resizing resources (CPU or memory) assigned to the containers without pod restart. We can use it since the Kubernetes 1.27 version. However, it is still the alpha feature, that has to be explicitly enabled. In order to test we will run a simple Spring Boot Java app on Kubernetes.
+- piotrminkowski.com: Resize CPU Limit To Speed Up Java Startup on Kubernetes In this article, you will learn how to solve problems with the slow startup of Java apps on Kubernetes related to the CPU limit. We will use a new Kubernetes feature called “In-place Pod Vertical Scaling”. It allows resizing resources (CPU or memory) assigned to the containers without pod restart. We can use it since the Kubernetes 1.27 version. However, it is still the alpha feature, that has to be explicitly enabled. In order to test we will run a simple Spring Boot Java app on Kubernetes.
- medium.com/@mark.andreev: How to configure Kubernetes memory limits for Java application This article explores the JVM memory structure and flags that can be used to limit memory usage and how those map back to Kubernetes and cgroups v2.
-- sosiv.io: A Deep Dive into Kubernetes Resource Requests and Limits
+- sosiv.io: A Deep Dive into Kubernetes Resource Requests and Limits
- medium.com/pipedrive-engineering: How we choked our Kubernetes NodeJS services Learn from the Pipedrive engineering team experience how to manage memory and CPU resources properly in NodeJS and Kubernetes without slowing down your services
- medium.com/@eliran89c: For the love of god, learn when to use CPU limits on Kubernetes In this article, you’ll explore how CPU requests and limits work, why they were introduced, and how to monitor CPU usage
-- wbhegedus.me: Demystifying Kubernetes CPU Limits (and Throttling) In this article, you will discuss a clear example of CPU throttling on Kubernetes and how you could monitor and fix it
+- wbhegedus.me: Demystifying Kubernetes CPU Limits (and Throttling) In this article, you will discuss a clear example of CPU throttling on Kubernetes and how you could monitor and fix it
- medium.com/@jettycloud: Making Sense of Kubernetes CPU Requests And Limits
-- loft.sh: How to Set Up Kubernetes Requests and Limits
+- loft.sh: How to Set Up Kubernetes Requests and Limits
- dev.to: Impacts Of Not Setting Requests, Limits, and Quotas | Michael Levan
- faun.pub: Kubernetes Chronicles:(K8s#04)|K8s Series | POD Resource Request & Limits
- hwchiu.medium.com: Why does my 2vCPU application run faster in a VM than in a container? 🌟🌟 This article explores the performance of running apps in VMs versus containers. It delves into the impact of CPU limits, thread usage, and CPU distribution, offering insights on how to avoid CPU throttling and improve application performance
@@ -10323,7 +10323,7 @@
- medium.com/@frommeyerc: Containers and the JVM: About CFS and how to deal with it This article explores the interaction between containers, the JVM, and the CFS scheduler in the Linux Kernel. It explains how CPU time is allocated, the impact of CPU requests and limits in Kubernetes, and the consequences of throttling.
- lalatron.hashnode.dev: When Kubernetes and Go don’t work well together 🌟 Go is not aware of the limits set for its container, causing some issues not easy to track. This is a story about how I stumbled into one of them. This article discusses an issue in which a pod was repeatedly restarted due to an OOM error. The problem stemmed from Go’s garbage collector not being aware of the container’s memory limits, which caused memory allocation to exceed these limits.
-- foxutech.com: Kubernetes Namespace Resource Quota and Limits 🌟 - youtube
+- foxutech.com: Kubernetes Namespace Resource Quota and Limits 🌟 - youtube
- medium.com/directeam: Kubernetes resources under the hood — Part 1 🌟
- medium.com/directeam: Kubernetes resources under the hood — Part 2 🌟 Do you think that CPU requests are just used for scheduling? Think again. Introducing CPU Shares, and laying the grounds for removing your limits! This 3-part series covers how Kubernetes resources (CPU and memory) work. You will learn the following:
- CFS (Completely Fair Scheduler)
@@ -10336,9 +10336,9 @@
- medium.com/directeam: Kubernetes resources under the hood — Part 3 🌟 Kubernetes resources, breaking the limits! Understand the biggest Kubernetes misunderstanding and why you should remove your CPU limits and unleash your cluster’s full potential
-- [reddit.com/r/kubernetes: CPU Limits](https://www.reddit.com/r/kubernetes/comments/12he7aa/cpu_limits/]
-- gokatalyst.io: Katalyst: A QoS-based resource management system for workload colocation on kubernetes 🌟
-- stormforge.io: Automated Kubernetes resource management for platform engineering teams to continuously rightsize workloads with HPA compatibility Stop Setting Kubernetes Requests and Limits. Let machine learning and automation do it for you.
+- [reddit.com/r/kubernetes: CPU Limits](https://www.reddit.com/r/kubernetes/comments/12he7aa/cpu_limits]
+- gokatalyst.io: Katalyst: A QoS-based resource management system for workload colocation on kubernetes 🌟
+- stormforge.io: Automated Kubernetes resource management for platform engineering teams to continuously rightsize workloads with HPA compatibility Stop Setting Kubernetes Requests and Limits. Let machine learning and automation do it for you.
- medium.com/@mathieuces: How to calculate CPU for containers in k8s dynamically ? 🌟 Learn how to dynamically calculate CPU for containers in Kubernetes using a strategy that optimizes resource allocation by considering average CPU usage and a safety coefficient
- kondense 🌟 Kondense is an automated resource sizing tool. It runs as a sidecar in kubernetes pods.
@@ -10359,8 +10359,8 @@
Kubernetes etcd
- medium: Getting Started with Kubernetes etcd
-- sysdig.com: How to monitor etcd Learning how to monitor etcd is of vital importance when running Kubernetes in production. Monitoring etcd will let you validate that things work as expected, while detecting and troubleshooting issues that could take your entire infrastructure down.
-- learnk8s.io: How etcd works with and without Kubernetes
+- sysdig.com: How to monitor etcd Learning how to monitor etcd is of vital importance when running Kubernetes in production. Monitoring etcd will let you validate that things work as expected, while detecting and troubleshooting issues that could take your entire infrastructure down.
+- learnk8s.io: How etcd works with and without Kubernetes
- itnext.io: Breaking down and fixing etcd cluster
- medium: ETCD - the Easy Way | Vaibhav Rajput This is a guide which will help you get started with etcd and help you understand how it is used in a kubernetes setup.
- kubernetes.io: Operating etcd clusters for Kubernetes Securing etcd clusters. Access to etcd is equivalent to root permission in the cluster so ideally only the API server should have access to it. It is recommended to grant permission to only those nodes that require access to etcd clusters.
@@ -10372,25 +10372,25 @@
- medium: Kubernetes — Learn Sidecar Container Pattern Understanding Sidecar Container Pattern With an Example Project
- ithands-on.com: Kubernetes 101 : Extending the container’s functionalities - Sidecar containers
- atul-agrawal.medium.com: Library vs Service vs Sidecar
-- banzaicloud.com: Sidecar container lifecycle changes in Kubernetes 1.18 🌟
+- banzaicloud.com: Sidecar container lifecycle changes in Kubernetes 1.18 🌟
- medium: Delaying application start until sidecar is ready Taking advantage of a peculiar Kubernetes implementation detail to block containers from starting before another container starts.
- pauldally.medium.com: Kubernetes – An Introduction to Sidecars
-- thenewstack.io: Sidecars are Changing the Kubernetes Load-Testing Landscape Sidecars don’t just capture traffic. They can replay it as well. They can also transform any metadata, like timestamps, before it sends it to your application.
+- thenewstack.io: Sidecars are Changing the Kubernetes Load-Testing Landscape Sidecars don’t just capture traffic. They can replay it as well. They can also transform any metadata, like timestamps, before it sends it to your application.
- saurabhdashora.hashnode.dev: Implementing Sidecar Design Pattern with Kubernetes Pod Build a Git Workflow with Sidecar. In this post, you will cover the theoretical aspects of the sidecar pattern and different use cases. Then, you will implement a complete Git workflow using a Kubernetes pod to demonstrate the sidecar pattern.
- dev.to/fermyon: Scaling Sidecars to Zero in Kubernetes
Kubernetes Annotations
-- kubernetes.io: Annotating Kubernetes Services for Humans A Convention for annotations in Kubernetes.
-- getambassador.io: Kubernetes Annotations and Labels: What’s the Difference?
+- kubernetes.io: Annotating Kubernetes Services for Humans A Convention for annotations in Kubernetes.
+- getambassador.io: Kubernetes Annotations and Labels: What’s the Difference?
Kubernetes Best Practices and Tips
- diegolnasc/kubernetes-best-practices 🌟 A cookbook with the best practices to working with kubernetes.
-- blog.pipetail.io: 10 most common mistakes using kubernetes
-- Optimize Kubernetes cluster management with these 5 tips Effective Kubernetes cluster management requires operations teams to balance pod and node deployments with performance and availability needs.
+- blog.pipetail.io: 10 most common mistakes using kubernetes
+- Optimize Kubernetes cluster management with these 5 tips Effective Kubernetes cluster management requires operations teams to balance pod and node deployments with performance and availability needs.
- techradar.com: Three tips to implement Kubernetes with open standards
-- 10 most common mistakes when using Kubernetes
+- 10 most common mistakes when using Kubernetes
- resources - requests and limits
- liveness and readiness probes
- LoadBalancer for every http service
@@ -10398,29 +10398,29 @@
- Not using the power of IAM/RBAC
-- geekflare.com: 10 Kubernetes Best Practices for Better Container Orchestration
-- wideops.com: Kubernetes best practices: Setting up health checks with readiness and liveness probes
-- containerjournal.com: 10 Best Practices Worth Implementing to Adopt Kubernetes
+- geekflare.com: 10 Kubernetes Best Practices for Better Container Orchestration
+- wideops.com: Kubernetes best practices: Setting up health checks with readiness and liveness probes
+- containerjournal.com: 10 Best Practices Worth Implementing to Adopt Kubernetes
- medium: Kubernetes Tip: How Does OOMKilled Work?
-- cloud.google.com: Kubernetes Best Practices A collection of blog posts aimed at guide you through the Kubernetes best practices
-- releasehub.com: Kubernetes Health Checks - 2 Ways to Improve Stability in Your Production Applications
-- stackpulse.com: Kubernetes and SRE: 5 Best Practices for K8s Reliability in Production
+- cloud.google.com: Kubernetes Best Practices A collection of blog posts aimed at guide you through the Kubernetes best practices
+- releasehub.com: Kubernetes Health Checks - 2 Ways to Improve Stability in Your Production Applications
+- stackpulse.com: Kubernetes and SRE: 5 Best Practices for K8s Reliability in Production
- fairwinds.com: Never Should You Ever In Kubernetes: #1 Do K8S The Hard Way
- fairwinds.com: Never Should You Ever In Kubernetes Part 2: Kubernetes Security Mistakes
- fairwinds.com: Never Should You Ever In Kubernetes Part 3: 6 K8s Reliability Mistakes
- fairwinds.com: Never Should You Ever In Kubernetes Part 4: Three K8s Efficiency Mistakes
-- stackpulse.com: Challenges of Running Services With K8s Reliably
-- blog.lukechannings.com: Mistakes made and lessons learned with Kubernetes and GitOps
+- stackpulse.com: Challenges of Running Services With K8s Reliably
+- blog.lukechannings.com: Mistakes made and lessons learned with Kubernetes and GitOps
- fairwinds.com: An Intro to Kubernetes Best Practices: Start Your K8s Right
- itnext.io: Lifecycle of Kubernetes Network Policies and Best Practices In this blog post, you’ll learn the lifecycle of Kubernetes Network Policies (e.g. creation, editing, governance, debugging)
-- learnk8s.io: Kubernetes production best practices A curated checklist of best practices designed to help you release to production.
+- learnk8s.io: Kubernetes production best practices A curated checklist of best practices designed to help you release to production.
- github.com/PacktPublishing: Kubernetes in Production Best Practices
-- thenewstack.io: 5 Best Practices for Configuring Kubernetes Pods Running in Production
-- freecodecamp.org: How to Make Your Enterprise Kubernetes Environment Secure, Efficient, and Reliable
-- geekflare.com: Diez mejores prácticas de Kubernetes para una mejor orquestación de contenedores
-- containerjournal.com: 4 Expert-Level Things I Wish I’d Known About Kubernetes
+- thenewstack.io: 5 Best Practices for Configuring Kubernetes Pods Running in Production
+- freecodecamp.org: How to Make Your Enterprise Kubernetes Environment Secure, Efficient, and Reliable
+- geekflare.com: Diez mejores prácticas de Kubernetes para una mejor orquestación de contenedores
+- containerjournal.com: 4 Expert-Level Things I Wish I’d Known About Kubernetes
- dev.to: Prevent Configuration Errors in Kubernetes
-- komodor.com: Four Best Practices to Migrate to Kubernetes (Part 1)
+- komodor.com: Four Best Practices to Migrate to Kubernetes (Part 1)
- komodor.com: Five Kubernetes Deployment Best Practices (Part 2) 🌟
- Maintaining Good YAML Hygiene (AKA Your K8s Deployment Manifest)
- Stateless Apps FTW!
@@ -10431,19 +10431,19 @@
-- bridgecrew.io: 5 common Kubernetes misconfigs and how to fix them
+- bridgecrew.io: 5 common Kubernetes misconfigs and how to fix them
- snapt.net: Best Practices for Load Balancing Kubernetes Containers
-- vladimir.varank.in: Making sense of requests for CPU resources in Kubernetes 🌟
-- harness.io: Kubernetes Mistakes: A Beginner’s Guide To Avoiding Common Pitfalls
+- vladimir.varank.in: Making sense of requests for CPU resources in Kubernetes 🌟
+- harness.io: Kubernetes Mistakes: A Beginner’s Guide To Avoiding Common Pitfalls
- martinheinz.dev: Keeping Kubernetes Clusters Clean and Tidy 🌟 As your cluster grows, so does the number of resources, volumes or other API objects and sooner or later you will reach the limits somewhere. In this article, you’ll learn how to keep it clean and tidy.
-- pionative.com: 6 Important things you need to run Kubernetes in production
+- pionative.com: 6 Important things you need to run Kubernetes in production
- youtube: Common Kubernetes Mistakes - CPU and Memory Requests (part 1) | Robusta
- medium.com/mycloudseries: Must-haves for your Kubernetes Cluster to be Production Ready
-- cloudogu.com: Kubernetes least privilege implementation using the Google Cloud as an axample How are you avoiding accidental changes to #kubernetes? This post describes what cloudogu do featuring “kubectl sudo”, ” helm sudo” and “sudo context”.
+- cloudogu.com: Kubernetes least privilege implementation using the Google Cloud as an axample How are you avoiding accidental changes to #kubernetes? This post describes what cloudogu do featuring “kubectl sudo”, ” helm sudo” and “sudo context”.
- blog.runx.dev: 5 Common Kubernetes Mistakes and how to avoid them
- hackernoon.com: Kubernetes Cluster Must-Haves To Be Production Ready
-- argonaut.dev: Choosing an Optimal Kubernetes Worker Node Size 🌟 This post focuses on helping you choose the optimal number of worker nodes and their sizes to run applications reliably while minimizing the waste of resources.
-- cncf.io: Kubernetes best practice: How to (correctly) set resource requests and limits
+- argonaut.dev: Choosing an Optimal Kubernetes Worker Node Size 🌟 This post focuses on helping you choose the optimal number of worker nodes and their sizes to run applications reliably while minimizing the waste of resources.
+- cncf.io: Kubernetes best practice: How to (correctly) set resource requests and limits
@@ -10460,51 +10460,51 @@
- medium.com/application-driven-infrastructure: Best Practices for Understanding Kubernetes Costs
-- collabnix.com: 10 Kubernetes Best Practices to Get You Started As a developer, understanding Kubernetes best practices is crucial to ensure smooth deployments, efficient operations, and enhanced security.
-- armosec.io: How to avoid Kubernetes misconfigurations Misconfigurations are quite common in the deployment of Kubernetes if recommendations are not followed. Misconfigurations lead to several issues, including vulnerability to attacks and open access to sensitive information.
-- nextplatform.com: Kubernetes Clusters Have Massive Overprovisioning Of Compute And Memory 🌟
-- thenewstack.io: Does Kubernetes Really Perform Better on Bare Metal vs. VMs? 🌟 A detailed comparison of CPU, RAM, storage and network performance between Kubernetes clusters on virtual machines and bare metal.
+- collabnix.com: 10 Kubernetes Best Practices to Get You Started As a developer, understanding Kubernetes best practices is crucial to ensure smooth deployments, efficient operations, and enhanced security.
+- armosec.io: How to avoid Kubernetes misconfigurations Misconfigurations are quite common in the deployment of Kubernetes if recommendations are not followed. Misconfigurations lead to several issues, including vulnerability to attacks and open access to sensitive information.
+- nextplatform.com: Kubernetes Clusters Have Massive Overprovisioning Of Compute And Memory 🌟
+- thenewstack.io: Does Kubernetes Really Perform Better on Bare Metal vs. VMs? 🌟 A detailed comparison of CPU, RAM, storage and network performance between Kubernetes clusters on virtual machines and bare metal.
- dzone.com: Optimizing Kubernetes Clusters for Better Efficiency and Cost Savings 🌟 At the core of constructing a high-performing and cost-effective Kubernetes cluster is the art of efficiently managing resources by tailoring your Kubernetes workloads.
-
+
Disruptions
-- thenewstack.io: Kubernetes: Use PodDisruptionBudgets for Application Maintenance and Upgrades
+- thenewstack.io: Kubernetes: Use PodDisruptionBudgets for Application Maintenance and Upgrades
- medium.com/@visweswara: Pod Disruption Budget — Budget that can save you One day
- saahitya.hashnode.dev: Pod Disruption Budget(Pdb)
Cost Estimation Strategies
- cncf.io: 5 Problems with Kubernetes Cost Estimation Strategies
-- loft.sh: How To Reduce Your Kubernetes Cost
-- harness.io: Getting Started with Cloud Cost Optimization
-- rancher.com: Gain Better Visibility into Kubernetes Cost Allocation
-- loft.sh: Kubernetes Cost Savings By Reducing The Number Of Clusters
-- thenewstack.io: 5 Essential Tips to Manage Kubernetes Costs
+- loft.sh: How To Reduce Your Kubernetes Cost
+- harness.io: Getting Started with Cloud Cost Optimization
+- rancher.com: Gain Better Visibility into Kubernetes Cost Allocation
+- loft.sh: Kubernetes Cost Savings By Reducing The Number Of Clusters
+- thenewstack.io: 5 Essential Tips to Manage Kubernetes Costs
- opensource.com: 3 ways Kubernetes optimizes your IT budget Automation is not only good for IT, it’s also beneficial to your company’s bottom line.
-- thenewstack.io: 5 Expensive Kubernetes Cost Traps and How to Deal with Them
+- thenewstack.io: 5 Expensive Kubernetes Cost Traps and How to Deal with Them
- KubeSurvival Significantly reduce Kubernetes costs by finding the cheapest machine types that can run your workloads
-- containerjournal.com: Assessing the True Cost of Kubernetes
+- containerjournal.com: Assessing the True Cost of Kubernetes
- ubuntu.com: Kubernetes Fully Managed – half the cost of AWS
-- learnk8s.io: Kubernetes Instance Calculator 🌟🌟
+- learnk8s.io: Kubernetes Instance Calculator 🌟🌟
- dev.to: Kubernetes Cost Management and Analysis Guide 🌟
- hackernoon.com: Reducing Kubernetes Costs
- medium.com/streamotion-tech-blog: Visualising the Cost of Kubernetes
-- infoworld.com: Sysdig’s new Cost Advisor aims to cut Kubernetes costs The company claims that the new tool, in combination with its existing Sysdig Monitor, can cut Kubernetes costs by an average of 40%.
+- infoworld.com: Sysdig’s new Cost Advisor aims to cut Kubernetes costs The company claims that the new tool, in combination with its existing Sysdig Monitor, can cut Kubernetes costs by an average of 40%.
kubecost
- Kubecost 🌟
-- How to track costs in multi-tenant Amazon EKS clusters using Kubecost
-- infracloud.io: Kubernetes Cost Reporting using Kubecost
-- github.com/kubecost: kubecost-exporter - Running Kubecost as a Prometheus metric exporter
-- blog.kubecost.com: Kubecost raises $5.5 million to help teams monitor and reduce their Kubernetes spend
+- How to track costs in multi-tenant Amazon EKS clusters using Kubecost
+- infracloud.io: Kubernetes Cost Reporting using Kubecost
+- github.com/kubecost: kubecost-exporter - Running Kubecost as a Prometheus metric exporter
+- blog.kubecost.com: Kubecost raises $5.5 million to help teams monitor and reduce their Kubernetes spend
- kubectl-cost is a kubectl plugin that provides easy CLI access to Kubernetes cost allocation metrics via the kubecost APIs. It allows developers, devops, and others to quickly determine the cost & efficiency for any Kubernetes workload
-- blog.kubecost.com: AKS Cost Monitoring and Governance With Kubecost
-- thenewstack.io: KubeCost: Monitor Kubernetes Costs with kubectl
-- rtfm.co.ua: Kubernetes: Cluster Cost Monitoring – Kubernetes Resource Report and Kubecost In this article, you will explore the Kubernetes Resource Report and Kubecost projects and
+
- blog.kubecost.com: AKS Cost Monitoring and Governance With Kubecost
+- thenewstack.io: KubeCost: Monitor Kubernetes Costs with kubectl
+- rtfm.co.ua: Kubernetes: Cluster Cost Monitoring – Kubernetes Resource Report and Kubecost In this article, you will explore the Kubernetes Resource Report and Kubecost projects and
will dive into the details of how they work
- medium.com/@randhirthakur076: Optimizing Kubernetes Cost Management: A Deep Dive into Kubecost
@@ -10513,27 +10513,27 @@ will dive into the details of how they work
Architecting Kubernetes clusters. Node Size. Multi Clusters and Hybrid Cloud
-- learnk8s.io: Architecting Kubernetes clusters — how many should you have?
-- learnk8s.io: Architecting Kubernetes clusters — choosing a worker node size This article discusses the pros and cons of having either many small clusters or few large clusters for running a given set of apps.
+- learnk8s.io: Architecting Kubernetes clusters — how many should you have?
+- learnk8s.io: Architecting Kubernetes clusters — choosing a worker node size This article discusses the pros and cons of having either many small clusters or few large clusters for running a given set of apps.
- itnext.io: Architecting Kubernetes clusters — choosing a cluster size
-- learnk8s.io: Allocatable memory and CPU in Kubernetes Nodes
+- learnk8s.io: Allocatable memory and CPU in Kubernetes Nodes
- docs.google.com - learnk8s.io: Research on the trade offs when choosing an instance type for a kubernetes cluster
- medium: Deploying Kubernetes — Deciding the size of your nodes
- dzone refcard: Kubernetes Multi-Cluster Management and Governance
-- thenewstack.io: A Deep Dive into Architecting a Kubernetes Infrastructure
-- thenewstack.io: Manage Multicluster Kubernetes with Operators
-- kubernetes.io: Out of the Clouds onto the Ground: How to Make Kubernetes Production Grade Anywhere
-- cncf.io: Simplifying multi-clusters in Kubernetes
-- platform9.com: Difference Between multi-cluster, multi-master, multi-tenant & federated Kubernetes
-- datacenterknowledge.com: The Pros and Cons of Kubernetes-Based Hybrid Cloud
-- thenewstack.io: 4 ways to run kubernetes in production
+- thenewstack.io: A Deep Dive into Architecting a Kubernetes Infrastructure
+- thenewstack.io: Manage Multicluster Kubernetes with Operators
+- kubernetes.io: Out of the Clouds onto the Ground: How to Make Kubernetes Production Grade Anywhere
+- cncf.io: Simplifying multi-clusters in Kubernetes
+- platform9.com: Difference Between multi-cluster, multi-master, multi-tenant & federated Kubernetes
+- datacenterknowledge.com: The Pros and Cons of Kubernetes-Based Hybrid Cloud
+- thenewstack.io: 4 ways to run kubernetes in production
- medium: Individual Kubernetes Clusters vs. Shared Kubernetes Clusters for Development
-- nginx.com: Reduce Complexity with Production-Grade Kubernetes
-- platform9.com: Kubernetes Cluster Sizing – How Large Should a Kubernetes Cluster Be?
-- redhat.com: 3 questions to answer when considering a multi-cluster Kubernetes architecture A multi-cluster Kubernetes architecture is complex, but its versatility and resiliency make the tradeoffs worthwhile for large-scale enterprise applications.
+- nginx.com: Reduce Complexity with Production-Grade Kubernetes
+- platform9.com: Kubernetes Cluster Sizing – How Large Should a Kubernetes Cluster Be?
+- redhat.com: 3 questions to answer when considering a multi-cluster Kubernetes architecture A multi-cluster Kubernetes architecture is complex, but its versatility and resiliency make the tradeoffs worthwhile for large-scale enterprise applications.
- itnext.io: Do You Need Multi-Clusters? 🌟 Evaluate CNCF multi-clusters solutions and go our own way.
- In this article, you will discuss the limitations of running a single cluster and the options you have to go multicluster. You will investigate:
- Kubefed
@@ -10559,8 +10559,8 @@ will dive into the details of how they work
Templating YAML in Kubernetes with real code. YQ YAML processor
-- Templating YAML in Kubernetes with real code
-- TL;DR: You should use tools such as yq and kustomize to template YAML resources instead of relying on tools that interpolate strings such as Helm.
+- Templating YAML in Kubernetes with real code
+- TL;DR: You should use tools such as yq and kustomize to template YAML resources instead of relying on tools that interpolate strings such as Helm.
- If you’re working on large scale projects, you should consider using real code — you can find hands-on examples on how to programmatically generate Kubernetes resources in Java, Go, Javascript, C# and Python in this repository.
@@ -10568,7 +10568,7 @@ will dive into the details of how they work
Extending Kubernetes
Adding Custom Resources. Extending Kubernetes API with Kubernetes Resource Definitions. CRD vs Aggregated API
-- Custom Resources
+- Custom Resources
- itnext.io: CRD is just a table in Kubernetes
- Use a custom resource (CRD or Aggregated API) if most of the following apply:
- You want to use Kubernetes client libraries and CLIs to create and update the new resource.
@@ -10593,7 +10593,7 @@ will dive into the details of how they work
Krew, a plugin manager for kubectl plugins
-- Krew is the plugin manager for kubectl command-line tool.
+- Krew is the plugin manager for kubectl command-line tool.
- itnext.io: Extending Kubernetes Cluster; Kubectl Plugins and Krew
- darumatic.com: Improve Kubectl Command with Krew Krew is a tool that aims to ease plugin discovery, installation, upgrade, and removal on multiple operating systems. This article will show you how easy it is to grab and experiment with existing plugins.
- awstip.com: Essential plugins for Kubectl CLI
@@ -10613,9 +10613,9 @@ will dive into the details of how they work
OpenKruise/Kruise
-- openkruise.io
+- openkruise.io
- OpenKruise/Kruise
-- thenewstack.io: Introducing CloneSet: A Production-Grade Kubernetes Deployment CRD
+- thenewstack.io: Introducing CloneSet: A Production-Grade Kubernetes Deployment CRD
Crossplane, a Universal Control Plane API for Cloud Computing. Crossplane Workloads Definitions
@@ -10624,12 +10624,12 @@ will dive into the details of how they work
Kubernetes Community
Community Forums
Kubernetes Special Interest Groups (SIGs)
-- Kubernetes Special Interest Groups (SIGs) have been around to support the community of developers and operators since around the 1.0 release. People organized around networking, storage, scaling and other operational areas.
-- SIG Apps: build apps for and operate them in Kubernetes
+- Kubernetes Special Interest Groups (SIGs) have been around to support the community of developers and operators since around the 1.0 release. People organized around networking, storage, scaling and other operational areas.
+- SIG Apps: build apps for and operate them in Kubernetes
Kubernetes SIG’s Repos
@@ -10642,9 +10642,9 @@ will dive into the details of how they work
- Available kubectl plugins
- Awesome Kubectl plugins
-- Extend kubectl with plugins
+- Extend kubectl with plugins
- youtube: Welcome to the world of kubectl plugins
-- padok.fr: Getting started with kubectl plugins 5 useful kubectl plugins:
+- padok.fr: Getting started with kubectl plugins 5 useful kubectl plugins:
- whoami
- access-matrix
- neat
@@ -10656,7 +10656,7 @@ will dive into the details of how they work
- pixelstech.net: Build a Kubectl Plugin from Scratch
- k8scr A kubectl plugin for pushing OCI images through the Kubernetes API server.
- martinheinz.dev: Making Kubernetes Operations Easy with kubectl Plugins
-- kei6u/kubectl-secret-data A kubectl plugin for finding decoded secret data with productive search flags.
+- kei6u/kubectl-secret-data A kubectl plugin for finding decoded secret data with productive search flags.
- medium: Cool Kubernetes command line plugins
- martinheinz.dev: Making Kubernetes Operations Easy with kubectl Plugins
- github.com/sigstore: k8s-manifest-sigstore kubectl plugin for signing Kubernetes manifest YAML files with sigstore
@@ -10673,7 +10673,7 @@ will dive into the details of how they work
- Outdated
-- davidB/kubectl-view-allocations kubectl plugin lists allocations for resources (cpu, memory, gpu,…) as defined into the manifest of nodes and running pods.
+- davidB/kubectl-view-allocations kubectl plugin lists allocations for resources (cpu, memory, gpu,…) as defined into the manifest of nodes and running pods.
- Ramilito/kubesess kubesess(ion) is a kubectl plugin for managing sessions. With this plugin, it is possible to have one context per active shell session.
- tonylixu.medium.com: Kubectl — Plugins Operation K8s kubectl Deep Dive
- kubectl netshoot kubectl netshoot is a kubectl plugin that spins up netshoot: a network troubleshooting Swiss-army knife that allows you to troubleshoot Kubernetes without installing new packages in your containers or cluster nodes
@@ -10689,7 +10689,7 @@ will dive into the details of how they work
- Accelerated Feedback Loops when Developing for Kubernetes with Conftest Learn how to validate Kubernetes resources with Conftest for faster feedback loops
- Deprek8ion is a set of rego policies to monitor Kubernetes APIs deprecations and designed to work with conftest.
@@ -10702,45 +10702,45 @@ will dive into the details of how they work
Kubernetes Patterns and Antipatterns. Service Discovery
- github.com/k8spatterns/examples Examples for “Kubernetes Patterns - Reusable Elements for Designing Cloud-Native Applications”
-- kubernetes.io: container design patterns
+- kubernetes.io: container design patterns
- magalix.com: Kubernetes Patterns - The Service Discovery Pattern
- dzone.com: Performance Patterns in Microservices-Based Integrations
-- developers.redhat.com: Top 10 must-know Kubernetes design patterns
+- developers.redhat.com: Top 10 must-know Kubernetes design patterns
- medium: 10 Anti-Patterns for Kubernetes Deployments Common practices in Kubernetes deployments that have better solutions
-- learnsteps.com: How Kubernetes works on reconciler pattern
-- learncloudnative.com: Sidecar Container Pattern
-- codefresh.io: Kubernetes Deployment Antipatterns – part 1
-- codefresh.io: Kubernetes Deployment Antipatterns – part 2
-- iximiuz.com: Service discovery in Kubernetes - combining the best of two worlds
+- learnsteps.com: How Kubernetes works on reconciler pattern
+- learncloudnative.com: Sidecar Container Pattern
+- codefresh.io: Kubernetes Deployment Antipatterns – part 1
+- codefresh.io: Kubernetes Deployment Antipatterns – part 2
+- iximiuz.com: Service discovery in Kubernetes - combining the best of two worlds
- github.com/sharadbhat/KubernetesPatterns: YAML and Golang implementations of common Kubernetes patterns
- developers.redhat.com: Kubernetes configuration patterns, Part 1: Patterns for Kubernetes primitives
-- learnk8s.io: Extending applications on Kubernetes with multi-container pods Can you change an application without changing any code in Kubernetes? You can when you use multiple containers in a single Pod. Developing and deploying new apps in Kubernetes is easy. But what about legacy apps? In Kubernetes, you can use multiple containers in a Pod to change how your application works.
+- learnk8s.io: Extending applications on Kubernetes with multi-container pods Can you change an application without changing any code in Kubernetes? You can when you use multiple containers in a single Pod. Developing and deploying new apps in Kubernetes is easy. But what about legacy apps? In Kubernetes, you can use multiple containers in a Pod to change how your application works.
- dev.to: Kubernetes Deployment Antipatterns – part 1
-- ishantgaurav.in: Kubernetes – Sidecar Container Pattern
+- ishantgaurav.in: Kubernetes – Sidecar Container Pattern
- developers.redhat.com: Kubernetes configuration patterns, Part 1: Patterns for Kubernetes primitives
- betterprogramming.pub: 10 Anti-Patterns for Kubernetes Deployments Common practices in Kubernetes deployments that have better solutions
- medium: Kubernetes — Learn Init Container Pattern Understanding Init Container Pattern With an Example Project.
-- weave.works: Tools for Automating and Implementing Cloud Native Patterns
+- weave.works: Tools for Automating and Implementing Cloud Native Patterns
- dzone: Microservices Patterns: Sidecar Learn about Microservice architecture and single responsibility principle, know more on how to achieve it using sidecars.
- dzone: Multi-Container Pod Design Patterns in Kubernetes In Kubernetes, Pods are the single deployable units. If an application is to be deployed, it must be so in a Pod as a container. Learn how to use multi-container pods.
-- linkedin.com/pulse: Avoid These Kubernetes Anti-Patterns | Pavan Belagatti
+- linkedin.com/pulse: Avoid These Kubernetes Anti-Patterns | Pavan Belagatti
- medium.com/@ehsan-khodadadi: Patterns and anti-patterns for a reliable Kubernetes infra deployment
-
+
Kubernetes Scheduling and Scheduling Profiles
-- Kubernetes Scheduling
-- Scheduling Profiles
-- granulate.io: A Deep Dive into Kubernetes Scheduling
+- Kubernetes Scheduling
+- Scheduling Profiles
+- granulate.io: A Deep Dive into Kubernetes Scheduling
- medium: K8S - Creating a kube-scheduler plugin
Assigning Pods to Nodes. NodeSelector, Pod Affinity and Anti-Affinity
-- Affinity and anti-affinity
-- blog.kubecost.com: Kubernetes node affinity: examples & instructions Pod scheduling is one of the most important aspects of Kubernetes cluster management. How pods are distributed across nodes directly impacts performance and resource utilization. Kubernetes node affinity is an advanced scheduling feature that helps administrators optimize the distribution of pods across a cluster. This article will review scheduling basics, Kubernetes node affinity and anti-affinity, pod affinity and anti-affinity, and provide practical examples to help you get comfortable using this cluster scheduling feature.
+- Affinity and anti-affinity
+- blog.kubecost.com: Kubernetes node affinity: examples & instructions Pod scheduling is one of the most important aspects of Kubernetes cluster management. How pods are distributed across nodes directly impacts performance and resource utilization. Kubernetes node affinity is an advanced scheduling feature that helps administrators optimize the distribution of pods across a cluster. This article will review scheduling basics, Kubernetes node affinity and anti-affinity, pod affinity and anti-affinity, and provide practical examples to help you get comfortable using this cluster scheduling feature.
- medium.com/dlt-labs-publication: Kubernetes: Understanding Pod Affinity, Taint & Toleration
- medium.com/@pbijjala: reCap: Elasticity in Kubernetes/GKE 🌟🌟
- Node affinity, nodeSelector is the simplest way to constrain Pods to nodes with specified labels.
@@ -10757,45 +10757,45 @@ will dive into the details of how they work
-- 4sysops.com: Node selector and node affinity in Kubernetes
+- 4sysops.com: Node selector and node affinity in Kubernetes
Pod Topology Spread Constraints and PodTopologySpread Scheduling Plugin
-- Pod Topology Spread Constraints
-- Introducing PodTopologySpread plugin
+- Pod Topology Spread Constraints
+- Introducing PodTopologySpread plugin
Cloud Development Kit (CDK) for Kubernetes
-- cdk8s.io Define Kubernetes apps and components using familiar languages. cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar programming languages and rich object-oriented APIs. cdk8s apps synthesize into standard Kubernetes manifests which can be applied to any Kubernetes cluster.
-- github.com/awslabs/cdk8s
+- cdk8s.io Define Kubernetes apps and components using familiar languages. cdk8s is an open-source software development framework for defining Kubernetes applications and reusable abstractions using familiar programming languages and rich object-oriented APIs. cdk8s apps synthesize into standard Kubernetes manifests which can be applied to any Kubernetes cluster.
+- github.com/awslabs/cdk8s
AWS Cloud Development Kit (AWS CDK)
-- AWS: Introducing CDK for Kubernetes
+- AWS: Introducing CDK for Kubernetes
- Traditionally, Kubernetes applications are defined with human-readable, static YAML data files which developers write and maintain. Building new applications requires writing a good amount of boilerplate config, copying code from other projects, and applying manual tweaks and customizations. As applications evolve and teams grow, these YAML files become harder to manage. Sharing best practices or making updates involves manual changes and complex migrations.
- YAML is an excellent format for describing the desired state of your cluster, but it is does not have primitives for expressing logic and reusable abstractions. There are multiple tools in the Kubernetes ecosystem which attempt to address these gaps in various ways:
- kustomize Customization of kubernetes YAML configurations
- jsonnet data templating language
- jkcfg Configuration as Code with ECMAScript
-- kubecfg A tool for managing complex enterprise Kubernetes environments as code.
+- kubecfg A tool for managing complex enterprise Kubernetes environments as code.
- kubegen Simple way to describe Kubernetes resources in a structured way, but without new syntax or magic
-- Pulumi
+- Pulumi
-- We realized this was exactly the same problem our customers had faced when defining their applications through CloudFormation templates, a problem solved by the AWS Cloud Development Kit (AWS CDK), and that we could apply the same design concepts from the AWS CDK to help all Kubernetes users.
+- We realized this was exactly the same problem our customers had faced when defining their applications through CloudFormation templates, a problem solved by the AWS Cloud Development Kit (AWS CDK), and that we could apply the same design concepts from the AWS CDK to help all Kubernetes users.
Serverless with OpenFaas and Knative
-
+
Virtual Kubernetes Clusters
@@ -10805,8 +10805,8 @@ will dive into the details of how they work
Multi-Cluster Federation. Hybrid Cloud Setup Tools
KubeFed
-- KubeFed: Kubernetes Cluster Federation
-- aquasec.com: Kubernetes Federation: The Basics and a 5-Step Tutorial Learn about Kubernetes Federation use cases, how it works, and see how to create your first Kubernetes Federation in 5 steps.
+- KubeFed: Kubernetes Cluster Federation
+- aquasec.com: Kubernetes Federation: The Basics and a 5-Step Tutorial Learn about Kubernetes Federation use cases, how it works, and see how to create your first Kubernetes Federation in 5 steps.
- Kubernetes Federation, or KubeFed, is a tool for coordinating the configuration of multiple clusters in Kubernetes. You can determine which clusters KubeFed will manage, and what their configuration looks like, all from a single group of APIs in the hosting cluster. KubeFed offers low-level mechanisms that can be used as a foundation for increasingly complex production Kubernetes use cases across multiple clusters, such as geographic redundancy and disaster recovery.
- medium.com/expedia-group-tech: Manage multi-cluster Kubernetes infrastructure with Kubefed v2 In this article, you will discuss the need for a multi-cluster architecture and how kubefed solves that. Then, you will deploy an app and proceed to test the setup with a hands-on example
@@ -10820,15 +10820,15 @@ will dive into the details of how they work
Istio Service Mesh
Multi-Regional Architecture
-- engineering.monday.com: monday.com’s Multi-Regional Architecture: A Deep Dive Building a global SaaS platform requires lots of preparation, deep evaluation of your request routes and a truckload of R&D cooperation. Here’s how we did it
+- engineering.monday.com: monday.com’s Multi-Regional Architecture: A Deep Dive Building a global SaaS platform requires lots of preparation, deep evaluation of your request routes and a truckload of R&D cooperation. Here’s how we did it
Kubernetes in Kubernetes
-- kubernetes.io: Kubernetes-in-Kubernetes and the WEDOS PXE bootable server farm Learn how you can simplify management of data centers, thousands of physical servers, virtual machines and hosting for hundreds of thousands of sites with Kubernetes-in-Kubernetes (nested Kubernetes clusters)
+- kubernetes.io: Kubernetes-in-Kubernetes and the WEDOS PXE bootable server farm Learn how you can simplify management of data centers, thousands of physical servers, virtual machines and hosting for hundreds of thousands of sites with Kubernetes-in-Kubernetes (nested Kubernetes clusters)
Kubernetes Scripts
@@ -10846,36 +10846,36 @@ will dive into the details of how they work
Kubernetes on Windows
-- loft.sh: Kubernetes on Windows: 6 Life-Saving Tools & Tips Kubernetes is primarily a Linux technology, so it’s fairly straightforward to run it on different Linux distros. But what about the developers working on Windows who need to run Kubernetes locally?
+- loft.sh: Kubernetes on Windows: 6 Life-Saving Tools & Tips Kubernetes is primarily a Linux technology, so it’s fairly straightforward to run it on different Linux distros. But what about the developers working on Windows who need to run Kubernetes locally?
Kubernetes Incident Report Plan IRP
-- cynet.com: Incident Report Plan (IRP)
-- kubermatic.com: A Framework for Kubernetes Incident Response
+- cynet.com: Incident Report Plan (IRP)
+- kubermatic.com: A Framework for Kubernetes Incident Response
- medium.com/@cloud_tips: Kubernetes Incident Response Incident response is one of the most important aspects of running a Kubernetes deployment. A well-defined incident response plan can help you quickly identify and mitigate issues with your Kubernetes deployment.
Kubernetes Certifications. CKA, CKAD and CKS
-- cncf.io: Certified Kubernetes Application Developer (CKAD)
+- cncf.io: Certified Kubernetes Application Developer (CKAD)
- CKAD-Bookmarks save time in searching docs in CKAD exam
- itnext.io: Tips & Tricks for CKA, CKAD and CKS exams
- bmuschko/ckad-crash-course: Certified Kubernetes Application Developer (CKAD) Crash Course
- jamesbuckett/ckad-questions A set of exercises and solutions to prepare for the Certified Kubernetes Application Developer exam by Cloud Native Computing Foundation.
-
-
reddit.com/r/kubernetes: CKAD - free materials This collection of useful links and resources is indispensable if you’re thinking of passing the CKAD (Certified Kubernetes Application Developer) course!
+reddit.com/r/kubernetes: CKAD - free materials This collection of useful links and resources is indispensable if you’re thinking of passing the CKAD (Certified Kubernetes Application Developer) course!
- Courses: https://www.edx.org/course/introduction-to-kubernetes
- Exercises: https://github.com/dgkanatsios/CKAD-exercises
- Workshops:
- https://kube.academy/courses/ckad-practice
-- https://kodekloud.com/courses/game-of-pods/
-- https://kubernetes.io/docs/tutorials/kubernetes-basics/
-- https://www.katacoda.com/courses/kubernetes/
+- https://kodekloud.com/courses/game-of-pods
+- https://kubernetes.io/docs/tutorials/kubernetes-basics
+- https://www.katacoda.com/courses/kubernetes
- VIM: Vim Crash Course | How to edit files quickly in CKAD / CKA exam
- Cheatsheet:
@@ -10889,26 +10889,26 @@ will dive into the details of how they work
-
-
+
- bmuschko/ckad-prep Exercises demonstrated as part of the video course “Certified Kubernetes Application Developer (CKAD) Prep Course” published by O’Reilly Media.
- blog.jcprz.com: My tips to pass the CKA exam and what’s next
- medium.com/@vamshisuram: How to crack CKAD exam (part — 2)
- blog.devgenius.io: Passing the 2023 Certified Kubernetes Administrator (CKA) Exam My experience and strategy for preparing, studying, and taking the exam
-- packetpushers.net: KU046: Do Kubernetes Certs Prepare You For Real-World Production?
-- mattias.engineer/courses/kubernetes: Certified Kubernetes Application Developer (CKAD) This course is written in a different style than my other certification courses. However, I wrote it while I was preparing for the CKAD exam myself. All of the required material to pass the CKAD is included, with some extra details along the way. This exam is performance based, which means it will not be enough to read about the topics - you must practice performing the commands!
+- packetpushers.net: KU046: Do Kubernetes Certs Prepare You For Real-World Production?
+- mattias.engineer/courses/kubernetes: Certified Kubernetes Application Developer (CKAD) This course is written in a different style than my other certification courses. However, I wrote it while I was preparing for the CKAD exam myself. All of the required material to pass the CKAD is included, with some extra details along the way. This exam is performance based, which means it will not be enough to read about the topics - you must practice performing the commands!
- cloudnativeengineer.substack.com: Prepare for your Certified Kubernetes Administrator exam
Books and eBooks
- developers.redhat.com: Kubernetes Operators
- Kubernetes 101
-- learnk8s.io/first-steps
+- learnk8s.io/first-steps
- ubuntuask.com: Best New Kubernetes Books
Kubernetes Patterns eBooks
-- k8spatterns.io: Free Kubernetes Patterns e-book , ref
+- k8spatterns.io: Free Kubernetes Patterns e-book , ref
- magalix.com: Free Kubernetes Application Architecture Patterns eBook
Famous Kubernetes ebooks of 2019
@@ -10916,7 +10916,7 @@ will dive into the details of how they work
- Kubernetes essentials E-book
- Kubernetes: Up and Running, 2nd Edition Dive into the Future of Infrastructure. By Brendan Burns, Kelsey Hightower, Joe Beda
- Container Security
- digitalocean.com: From Containers to Kubernetes with Node.js eBook
@@ -10926,23 +10926,23 @@ will dive into the details of how they work
Famous Kubernetes resources of 2019
-- Kubernetes for developers
-- Kubernetes for the Absolute Beginners
-- Kubernetes: Getting Started (Free)
+- Kubernetes for developers
+- Kubernetes for the Absolute Beginners
+- Kubernetes: Getting Started (Free)
- Kubernetes Tutorial: Learn the Basics
- Complete Kubernetes Course
-- Getting started with Kubernetes
+- Getting started with Kubernetes
Famous Kubernetes resources of 2020
- javarevisited.blogspot.com: Top 5 courses to Learn Docker and Kubernetes in 2020 - Best of Lot
- medium.com: Top 15 Online Courses to Learn Docker, Kubernetes, and AWS for Fullstack Developers and DevOps Engineers
- medium.com: 7 Free Online Courses to Learn Kubernetes in 2020
-- skillslane.com: 10 Best Kubernetes Courses [2020]: Beginner to Advanced Courses
+- skillslane.com: 10 Best Kubernetes Courses [2020]: Beginner to Advanced Courses
Compliant Kubernetes
-- compliantkubernetes.io: Compliant Kubernetes is a Certified Kubernetes distribution, that complies with: HIPAA, GDPR, PCI DSS, FFFS 2014:7, ISO 27001, etc. 🌟
+- compliantkubernetes.io: Compliant Kubernetes is a Certified Kubernetes distribution, that complies with: HIPAA, GDPR, PCI DSS, FFFS 2014:7, ISO 27001, etc. 🌟
PCI SSC (Payment Card Industry Security Standards Council)
@@ -10958,18 +10958,18 @@ will dive into the details of how they work
Click to expand!
-
+
-
+
-
-
+
+
-
+
-
+
Videos
@@ -11053,7 +11053,7 @@ will dive into the details of how they work
🧵How do you keep up with Kubernetes?
If you are looking for curated Kubernetes news, we have you covered on:
- Core Kubernetes
- Security
- Architecture & development
- Job opportunities
- K3s
Here are the accounts that you should follow: pic.twitter.com/Hcw9BelCsd
— Learnk8s (@learnk8s) October 20, 2021
-@kubernetesio @K8sArchitect K8s Architecture pic.twitter.com/Kbm11a8oMA
— Julien (@MapEngArch) October 24, 2021
+@kubernetesio @K8sArchitect K8s Architecture pic.twitter.com/Kbm11a8oMA
— Julien (@MapEngArch) October 24, 2021
How Kubernetes differs from Docker in the way it deals with containers 🔽
Under the hood, Kubernetes and Docker both rely on the same/similar lower-level components to run containers.
Often, both use containerd and runc. However, Kubernetes makes the container runtime pluggable pic.twitter.com/5daIalpmrt
— Ivan Velichko (@iximiuz) October 30, 2021
@@ -11071,7 +11071,7 @@ will dive into the details of how they work
When it comes to YAML manifests for Kubernetes, is it Best Practice to create individual YAML files for each object (namespace, secret, configmap, deployment, statefulset...) or do people put everything in the one YAML?
— Michael Cade (@MichaelCade1) August 11, 2022
-It's funny: everyone thinks CPU requests are only used for scheduling (WRONG) and memory requests determine who gets OOMKilled (WRONG) but it's actually the opposite!
At runtime, memory requests do nothing, but CPU requests DO.#kubernetes is funny like that
— Natan Yellin (@aantn) August 27, 2022
+It's funny: everyone thinks CPU requests are only used for scheduling (WRONG) and memory requests determine who gets OOMKilled (WRONG) but it's actually the opposite!
At runtime, memory requests do nothing, but CPU requests DO.#kubernetes is funny like that
— Natan Yellin (@aantn) August 27, 2022
Reducing infrastructure costs boils down to turning apps off when you don't use them
That's easy to do manually, but how to turn them on automatically when you need them?
You can do so with a scale-to-zero strategy
Let me show you how to implement it in Kubernetes pic.twitter.com/YDqbAQlWUK
— Daniele Polencic (@danielepolencic) September 12, 2022
@@ -11079,7 +11079,7 @@ will dive into the details of how they work
Kind reminder: If you want to master Containers and Kubernetes, I've got a blog and newsletter for you! 👋
Blog: https://t.co/9J6Aj8Jn3U
Newsletter: https://t.co/DQyv14T0Nw
The focus is on:
- Clarity
- Fundamentals
- Visual explanations
Here are some recent content samples 👇 pic.twitter.com/f3B7dGhGr1
— Ivan Velichko (@iximiuz) October 1, 2022
-Kubernetes has two types of resources. Compressible and non-compressible.
CPU is a compressible resource. K8s can give and take CPUs whenever it likes. Pod that need CPU and don't get it will wait.
Memory is non-compressible. K8s can't take it away without killing the pod. pic.twitter.com/OLfpvjDk17
— Natan Yellin (@aantn) November 10, 2022
+Kubernetes has two types of resources. Compressible and non-compressible.
CPU is a compressible resource. K8s can give and take CPUs whenever it likes. Pod that need CPU and don't get it will wait.
Memory is non-compressible. K8s can't take it away without killing the pod. pic.twitter.com/OLfpvjDk17
— Natan Yellin (@aantn) November 10, 2022
What happens when you create a Pod in Kubernetes?
A surprisingly simple task reveals a complicated workflow that touches several components in the cluster.
Let's dive into it. pic.twitter.com/T1VGR18rRu
— Daniele Polencic — @danielepolencic@hachyderm.io (@danielepolencic) February 6, 2023
@@ -11100,35 +11100,35 @@ will dive into the details of how they work
Click to expand!
-Kubernetes experts be like: pic.twitter.com/0z47Q9bdZm
— memenetes (@memenetes) October 11, 2021
-Every kubernetes tutorial ever pic.twitter.com/b2qNU143sZ
— memenetes (@memenetes) January 31, 2022
-Using kubernetes for single page apps pic.twitter.com/2gW6ELi2Gi
— memenetes (@memenetes) February 10, 2022
-Deploying your own kubernetes cluster pic.twitter.com/9kblyVKK1Z
— memenetes (@memenetes) February 14, 2022
-Kubernetes path to production readiness pic.twitter.com/OgQd5Vj8Io
— memenetes (@memenetes) February 17, 2022
-Deleting a stuck pod pic.twitter.com/LxaYt0E0F6
— memenetes (@memenetes) February 21, 2022
-new and shiny, or old and proven? pic.twitter.com/lPhLi651tu
— memenetes (@memenetes) March 7, 2022
-Using kubernetes to run stateful workloads pic.twitter.com/jHaZiCGclj
— memenetes (@memenetes) March 17, 2022
-Also how I prepare for a major cluster upgrade pic.twitter.com/ANY2cHH0CN
— memenetes (@memenetes) March 24, 2022
-Container orchestration competition pic.twitter.com/JPDu4BWhgZ
— memenetes (@memenetes) March 28, 2022
-Watching devs using Kubernetes pic.twitter.com/uxGr2bP98c
— memenetes (@memenetes) April 4, 2022
-When you are the only one that knows Kubernetes and are asked to help pic.twitter.com/VIomvubkkj
— memenetes (@memenetes) September 12, 2022
-Your next challenge is to write a correct kubernetes yaml file from memory pic.twitter.com/h6FCA5iBzX
— memenetes (@memenetes) September 26, 2022
-Everyone who gets through a successful cluster upgrade pic.twitter.com/BDb0cVWqMh
— memenetes (@memenetes) October 27, 2022
-Using Kubernetes + ELK stack + Prometheus to deploy a static site pic.twitter.com/DB95WovYXU
— memenetes (@memenetes) October 31, 2022
-If you've been there, you know. pic.twitter.com/7CefZXfmk5
— memenetes (@memenetes) November 10, 2022
-The average GitOps pipeline pic.twitter.com/pexcfFMNfy
— memenetes (@memenetes) November 17, 2022
+Kubernetes experts be like: pic.twitter.com/0z47Q9bdZm
— memenetes (@memenetes) October 11, 2021
+Every kubernetes tutorial ever pic.twitter.com/b2qNU143sZ
— memenetes (@memenetes) January 31, 2022
+Using kubernetes for single page apps pic.twitter.com/2gW6ELi2Gi
— memenetes (@memenetes) February 10, 2022
+Deploying your own kubernetes cluster pic.twitter.com/9kblyVKK1Z
— memenetes (@memenetes) February 14, 2022
+Kubernetes path to production readiness pic.twitter.com/OgQd5Vj8Io
— memenetes (@memenetes) February 17, 2022
+Deleting a stuck pod pic.twitter.com/LxaYt0E0F6
— memenetes (@memenetes) February 21, 2022
+new and shiny, or old and proven? pic.twitter.com/lPhLi651tu
— memenetes (@memenetes) March 7, 2022
+Using kubernetes to run stateful workloads pic.twitter.com/jHaZiCGclj
— memenetes (@memenetes) March 17, 2022
+Also how I prepare for a major cluster upgrade pic.twitter.com/ANY2cHH0CN
— memenetes (@memenetes) March 24, 2022
+Container orchestration competition pic.twitter.com/JPDu4BWhgZ
— memenetes (@memenetes) March 28, 2022
+Watching devs using Kubernetes pic.twitter.com/uxGr2bP98c
— memenetes (@memenetes) April 4, 2022
+When you are the only one that knows Kubernetes and are asked to help pic.twitter.com/VIomvubkkj
— memenetes (@memenetes) September 12, 2022
+Your next challenge is to write a correct kubernetes yaml file from memory pic.twitter.com/h6FCA5iBzX
— memenetes (@memenetes) September 26, 2022
+Everyone who gets through a successful cluster upgrade pic.twitter.com/BDb0cVWqMh
— memenetes (@memenetes) October 27, 2022
+Using Kubernetes + ELK stack + Prometheus to deploy a static site pic.twitter.com/DB95WovYXU
— memenetes (@memenetes) October 31, 2022
+If you've been there, you know. pic.twitter.com/7CefZXfmk5
— memenetes (@memenetes) November 10, 2022
+The average GitOps pipeline pic.twitter.com/pexcfFMNfy
— memenetes (@memenetes) November 17, 2022
Self inflicted pain pic.twitter.com/V5zXOCtWj5
— Appvia (@appvia_io) December 6, 2022
-When there's a new Kubernetes release, but you are the one upgrading all clusters pic.twitter.com/nuII6vKfYP
— memenetes (@memenetes) December 12, 2022
-When you say not everything has to run on Kubernetes pic.twitter.com/QNuan5nw90
— memenetes (@memenetes) December 22, 2022
-"It's Kubernetes! I know this!" pic.twitter.com/djD4Ns3iEY
— memenetes (@memenetes) February 13, 2023
-"But think about the cost reduction" pic.twitter.com/8qWJpNgnu1
— memenetes (@memenetes) February 23, 2023
-everyone loves free stuff pic.twitter.com/lcAKpc29BG
— memenetes (@memenetes) March 9, 2023
-It's not that hard pic.twitter.com/o6J2em6tkk
— memenetes (@memenetes) March 13, 2023
-Still cheaper than running multiple EKS clusters pic.twitter.com/Rk1sDEzLCY
— memenetes (@memenetes) March 16, 2023
+When there's a new Kubernetes release, but you are the one upgrading all clusters pic.twitter.com/nuII6vKfYP
— memenetes (@memenetes) December 12, 2022
+When you say not everything has to run on Kubernetes pic.twitter.com/QNuan5nw90
— memenetes (@memenetes) December 22, 2022
+"It's Kubernetes! I know this!" pic.twitter.com/djD4Ns3iEY
— memenetes (@memenetes) February 13, 2023
+"But think about the cost reduction" pic.twitter.com/8qWJpNgnu1
— memenetes (@memenetes) February 23, 2023
+everyone loves free stuff pic.twitter.com/lcAKpc29BG
— memenetes (@memenetes) March 9, 2023
+It's not that hard pic.twitter.com/o6J2em6tkk
— memenetes (@memenetes) March 13, 2023
+Still cheaper than running multiple EKS clusters pic.twitter.com/Rk1sDEzLCY
— memenetes (@memenetes) March 16, 2023
This is what happens to your SRE team when you're not considering #MultiTenancy for your #Kubernetes platforms.
Adopt #MultiTenancy, save SREs' life from getting paged and getting buried from the operational burden: it could be done, thanks to #Capsule and #Kamaji! pic.twitter.com/tHXWVe6mdX
— prometherion (@tranchitellad) April 3, 2023
-Using the HPA without a metrics server pic.twitter.com/kjCCmIDnTh
— memenetes (@memenetes) April 17, 2023
+Using the HPA without a metrics server pic.twitter.com/kjCCmIDnTh
— memenetes (@memenetes) April 17, 2023
In Kubernetes, you can use labels to assign key-value pairs to any resources.
Labels are ubiquitous and necessary to everyday operations such as creating services.
However, how should you name and use those labels? pic.twitter.com/l3P1lFcTus
— Daniele Polencic — @danielepolencic@hachyderm.io (@danielepolencic) April 24, 2023
-Day in the life of a kubernetes engineer pic.twitter.com/MgPnR8ShNd
— memenetes (@memenetes) May 15, 2023
+Day in the life of a kubernetes engineer pic.twitter.com/MgPnR8ShNd
— memenetes (@memenetes) May 15, 2023
diff --git a/kustomize.html b/kustomize.html
index 71b731cb..9354bfb5 100644
--- a/kustomize.html
+++ b/kustomize.html
@@ -7712,23 +7712,23 @@
Introduction
-- kustomize.io 🌟
+- kustomize.io 🌟
- Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into
kubectl as apply -k.
- Kustomize traverses a Kubernetes manifest to add, remove or update configuration options without forking.
- It is available both as a standalone binary and as a native feature of kubectl.
-- kubernetes.io: Introducing kustomize; Template-free Configuration Customization for Kubernetes If you run a Kubernetes environment, chances are you’ve customized a Kubernetes configuration — you’ve copied some API object YAML files and edited them to suit your needs. But there are drawbacks to this approach — it can be hard to go back to the source material and incorporate any improvements that were made to it. Today Google is announcing kustomize, a command-line tool contributed as a subproject of SIG-CLI. The tool provides a new, purely declarative approach to configuration customization that adheres to and leverages the familiar and carefully designed Kubernetes API.
-- Declarative Management of Kubernetes Objects Using Kustomize
+- kubernetes.io: Introducing kustomize; Template-free Configuration Customization for Kubernetes If you run a Kubernetes environment, chances are you’ve customized a Kubernetes configuration — you’ve copied some API object YAML files and edited them to suit your needs. But there are drawbacks to this approach — it can be hard to go back to the source material and incorporate any improvements that were made to it. Today Google is announcing kustomize, a command-line tool contributed as a subproject of SIG-CLI. The tool provides a new, purely declarative approach to configuration customization that adheres to and leverages the familiar and carefully designed Kubernetes API.
+- Declarative Management of Kubernetes Objects Using Kustomize
- blog.tomarrell.com: Kustomize: Traefik v2.2 as a Kubernetes Ingress Controller
- Kubestack Gitops Framework is a Gitops framework built on Terraform and Kustomize
- 3 ways to customize off-the-shelf Helm charts with Kustomize - Kubernetes
- dex.dev: YAML Templating Solutions: Helm & Kustomize Writing config files by hand is like coding with Notepad instead of an IDE. Let’s find a better way, and take an overview of the popular solutions Helm & Kustomize.
-- blog.stack-labs.com: Kustomize - The right way to do templating in Kubernetes
+- blog.stack-labs.com: Kustomize - The right way to do templating in Kubernetes
- opensource.com: Modify your Kubernetes manifests with Kustomize Modify your Kubernetes manifests without losing control of what’s in the original versions.
- dev.to: Introduction to Kustomize - How to customize Kubernetes objects kubernetes
-- mirantis.com: Kustomize Tutorial: Creating a Kubernetes app out of multiple pieces
-- codefresh.io: Applied GitOps with Kustomize In this article, you will learn Kustomize and how it can help deploy Kubernetes manifest with GitOps. This will allow you to leverage the power of Kustomize to define YAML files without using a templating engine
+- mirantis.com: Kustomize Tutorial: Creating a Kubernetes app out of multiple pieces
+- codefresh.io: Applied GitOps with Kustomize In this article, you will learn Kustomize and how it can help deploy Kubernetes manifest with GitOps. This will allow you to leverage the power of Kustomize to define YAML files without using a templating engine
- tech.aabouzaid.com: Set OpenAPI patch strategy for Kubernetes Custom Resources - Kustomize Kustomize supports 2 main client-side patching methods for Kubernetes manifests: JSON Patching and Strategic Merge Patch. This article discusses the pros and cons and shows how to add a merging strategy extension for Custom Resources.
- nakamasato.medium.com: Comparison between Helm and Kustomize for Kubernetes yaml management
- pauldally.medium.com: Kustomize Best Practices (Part 1) Kubectl includes a very useful command called kustomize that allows a template-free way to customize Kubernetes application configuration.
@@ -7737,7 +7737,7 @@
- notmattlucas.com: Kubernetes Configuration with Kustomize
- medium.com/@nanditasahu031: How to Start with Kustomize — it’s Features
-- harness.io: Comparing Helm vs Kustomize
+- harness.io: Comparing Helm vs Kustomize
- nicolasbarlatier.hashnode.dev: Introduction Kubernetes and Kustomize: How to easily customize any resource configuration with Kustomize? In this tutorial, you will learn how to use Kustomize to template the number of replicas in a workload based on the environment (e.g. 1 pod in dev, 10 pods in prod)
- github.com/kostis-codefresh: How to Model Your Gitops Environments with kustomize 🌟 In this repository, you’ll find an example of how to model Kustomize folders for a GitOps application and promote releases between environments
- dev.to: Kubernetes Kustomize Tutorial: A Beginner-Friendly Developer Guide!
@@ -7746,8 +7746,8 @@
- devopscube.com/kustomize-tutorial: Kustomize Tutorial: Comprehensive Guide For Beginners 🌟
- blog.devgenius.io: Kustomize — K8 manifest patching In this tutorial, you will learn how to manipulate YAML files using Kustomize
- faun.pub: How to build a GitOps workflow with ArgoCD, Kustomize and GitHub Actions Gain speed and clarity by adopting GitOps for your deployments
-- techiescamp.com: Kubernetes Kustomize Crash Course In this Kustomize crash course, you will learn all the Kustomize concepts and deploy an application using Kustomize on a Kubernetes cluster.
-- devopscube.com/kuztomize-configmap-generators: Kuztomize Secret & Configmap Generators [Practical Examples]
+- techiescamp.com: Kubernetes Kustomize Crash Course In this Kustomize crash course, you will learn all the Kustomize concepts and deploy an application using Kustomize on a Kubernetes cluster.
+- devopscube.com/kuztomize-configmap-generators: Kuztomize Secret & Configmap Generators [Practical Examples]
- itnext.io: Generating, transforming, and patching Kubernetes configuration with Kustomize
Secretize plugin
@@ -7757,7 +7757,7 @@
Comparison between Helm and Kustomize for Kubernetes yaml management
- itnext.io: Helm Is Not Enough, You Also Need Kustomize Customize the YAML’s to enforce policies from application operators, security operators, and cluster operators.
-- harness.io: Comparing Helm vs Kustomize 🌟
+- harness.io: Comparing Helm vs Kustomize 🌟
- nakamasato.medium.com: Comparison between Helm and Kustomize for Kubernetes yaml management Helm and Kustomize are often compared with each other in the context of managing Kubernetes manifest file. Although those two tools have similar features, they are fundamentally different. In this post, I’ll compare them from several points of view with a sample application.
Boilerplate
diff --git a/linux-dev-env.html b/linux-dev-env.html
index 9d32ebfe..eb0f4844 100644
--- a/linux-dev-env.html
+++ b/linux-dev-env.html
@@ -7704,41 +7704,41 @@
WSL: Linux Dev Environment on Windows
-- docs.microsoft.com: WSL - Windows Subsystem for Linux
+- docs.microsoft.com: WSL - Windows Subsystem for Linux
- Using WSL and MobaXterm to Create a Linux Dev Environment on Windows
- Setting Up Docker for Windows and WSL to Work Flawlessly
-- Take your Linux development experience in Windows to the next level with WSL and Visual Studio Code Remote
-- kubernetes.io: WSL+Docker: Kubernetes on the Windows Desktop 🌟 A lesson on how to install Kubernetes in Docker KinD and Minikube.
+- Take your Linux development experience in Windows to the next level with WSL and Visual Studio Code Remote
+- kubernetes.io: WSL+Docker: Kubernetes on the Windows Desktop 🌟 A lesson on how to install Kubernetes in Docker KinD and Minikube.
- Ubuntu on WSL 2 Is Generally Available 🌟
- Microsoft Makes it Easier to Install WSL on Windows 10 🌟
wsl.exe --install
-- kubernetes.io - WSL+Docker: Kubernetes on the Windows Desktop 🌟
-- 9elements.com: Developing on Windows with WSL2
-- Docker Desktop & WSL 2 – Backport Update Docker Desktop Edge users will be able to use Docker Desktop with WSL 2 rather than our legacy HyperV based backend. This is available not only for Windows Pro and Windows Enterprise, but also for Windows Home users.
+- kubernetes.io - WSL+Docker: Kubernetes on the Windows Desktop 🌟
+- 9elements.com: Developing on Windows with WSL2
+- Docker Desktop & WSL 2 – Backport Update Docker Desktop Edge users will be able to use Docker Desktop with WSL 2 rather than our legacy HyperV based backend. This is available not only for Windows Pro and Windows Enterprise, but also for Windows Home users.
- itnext.io: WSL2 Tips: Limit CPU/Memory When using Docker
-- Distro installation added to WSL –install in Windows 10 insiders preview build 20246
-- pandorafms.com: Qué es, cómo instalar WSL2 y por qué es una gran noticia para el sector TI
+- Distro installation added to WSL –install in Windows 10 insiders preview build 20246
+- pandorafms.com: Qué es, cómo instalar WSL2 y por qué es una gran noticia para el sector TI
- dev.to: Install Docker on Windows (WSL) without Docker Desktop 🌟
-- techrepublic.com: Windows Subsystem for Linux 2: The GUI features developers have been asking for
-- bleepingcomputer.com: Windows 11 can now install WSL from the Microsoft Store 🌟
+- techrepublic.com: Windows Subsystem for Linux 2: The GUI features developers have been asking for
+- bleepingcomputer.com: Windows 11 can now install WSL from the Microsoft Store 🌟
- klaushofrichter.medium.com: Using Windows Subsystem for Linux for Kubernetes
Windows Terminal
-- Windows Terminal 1.0
-- Microsoft launches Windows Terminal 1.0, unveils GPU support and Linux GUI apps in WSL
+- Windows Terminal 1.0
+- Microsoft launches Windows Terminal 1.0, unveils GPU support and Linux GUI apps in WSL
Windows Package Manager
- Windows Package Manager CLI (aka winget)
-- Microsoft debuts Windows Package Manager for your dev environment
+- Microsoft debuts Windows Package Manager for your dev environment
ASDF-VM
-- asdf version manager (asdf-vm) is a CLI tool that can manage multiple language runtime versions on a per-project basis. It is like gvm, nvm, rbenv & pyenv (and more) all in one! Simply install your language’s plugin!
+- asdf version manager (asdf-vm) is a CLI tool that can manage multiple language runtime versions on a per-project basis. It is like gvm, nvm, rbenv & pyenv (and more) all in one! Simply install your language’s plugin!
Alternatives to WSL on Windows
diff --git a/linux.html b/linux.html
index 0cdcbf24..8949c874 100644
--- a/linux.html
+++ b/linux.html
@@ -8137,96 +8137,96 @@
Introduction
RHEL
-- infoworld.com: Red Hat’s crime against CentOS In the beginning, no one expected to get Red Hat Enterprise Linux for free. The end of CentOS as a free drop-in replacement is no cause for outrage.
-- arstechnica.com: CentOS is gone—but RHEL is now free for up to 16 production servers RHEL is now free for dev teams, and it’s even free in production for up to 16 systems.
-- cyberciti.biz: Red Hat introduces new no-cost RHEL option
-- enterpriseai.news: Red Hat’s Disruption of CentOS Unleashes Storm of Dissent
-- arstechnica.com: Why Red Hat killed CentOS—a CentOS board member speaks “The CentOS Board doesn’t get to decide what Red Hat engineering teams do.”
-- zdnet.com: Red Hat introduces free RHEL for open-source, non-profit organizations Some CentOS users still aren’t happy, but Red Hat is keeping its promise to open-source organizations that they’ll have access to a free version of RHEL.
+- infoworld.com: Red Hat’s crime against CentOS In the beginning, no one expected to get Red Hat Enterprise Linux for free. The end of CentOS as a free drop-in replacement is no cause for outrage.
+- arstechnica.com: CentOS is gone—but RHEL is now free for up to 16 production servers RHEL is now free for dev teams, and it’s even free in production for up to 16 systems.
+- cyberciti.biz: Red Hat introduces new no-cost RHEL option
+- enterpriseai.news: Red Hat’s Disruption of CentOS Unleashes Storm of Dissent
+- arstechnica.com: Why Red Hat killed CentOS—a CentOS board member speaks “The CentOS Board doesn’t get to decide what Red Hat engineering teams do.”
+- zdnet.com: Red Hat introduces free RHEL for open-source, non-profit organizations Some CentOS users still aren’t happy, but Red Hat is keeping its promise to open-source organizations that they’ll have access to a free version of RHEL.
- genbeta.com: Red Hat Enterprise Linux lanza una versión a bajo costo para llegar a más público de sectores de investigación y académico
-- makeuseof.com: The 4 Best RHEL-Based Alternatives to CentOS Now that CentOS is gone, you should make a switch to some other OS. Check out these four RHEL-based CentOS alternatives.
-- centos.org: Comparing Centos Linux and CentOS Stream The CentOS Project produces two variants: CentOS Linux and CentOS Stream. They are alike in many ways. Here’s what sets them apart.
-- makeuseof.com: The 7 Best Red Hat-Based Linux Distributions Unlike other Linux distros, RHEL isn’t free to download. But you can still enjoy its benefits by installing these free RHEL-based Linux distributions.
+- makeuseof.com: The 4 Best RHEL-Based Alternatives to CentOS Now that CentOS is gone, you should make a switch to some other OS. Check out these four RHEL-based CentOS alternatives.
+- centos.org: Comparing Centos Linux and CentOS Stream The CentOS Project produces two variants: CentOS Linux and CentOS Stream. They are alike in many ways. Here’s what sets them apart.
+- makeuseof.com: The 7 Best Red Hat-Based Linux Distributions Unlike other Linux distros, RHEL isn’t free to download. But you can still enjoy its benefits by installing these free RHEL-based Linux distributions.
Rocky Linux
- https://rockylinux.org
-- cloudsavvyit.com: Is Rocky Linux the new CentOS?
+- cloudsavvyit.com: Is Rocky Linux the new CentOS?
- 9to5linux.com: CentOS Alternative Rocky Linux 8.5 Is Out Now with Secure Boot Support, Updated Components Derived from Red Hat Enterprise Linux 8.5, Rocky Linux 8.5 is here to introduce an important feature for the mass adoption of this CentOS Linux alternative, namely Secure Boot support.
VIM
- VimWiki
-- redhat.com: Vim: Basic and intermediate commands
-- thevaluable.dev: A Vim Guide for Advanced Users
-- redhat.com: Recursive Vim macros: One step further into automating repetitive tasks Take Vim to the limit with recursive macros.
-- openvim.com Interactive Vim tutorial for developers, sysadmins and Linux or Unix users.
+- redhat.com: Vim: Basic and intermediate commands
+- thevaluable.dev: A Vim Guide for Advanced Users
+- redhat.com: Recursive Vim macros: One step further into automating repetitive tasks Take Vim to the limit with recursive macros.
+- openvim.com Interactive Vim tutorial for developers, sysadmins and Linux or Unix users.
- levelup.gitconnected.com: Vim: A How-To Guide Key Techniques with Vim for Faster Programming
Neovim
-- neovim hyperextensible Vim-based text editor
-- blog.ashwinchat.com: 9 Months of Full Time Neovim + Tmux
+- neovim hyperextensible Vim-based text editor
+- blog.ashwinchat.com: 9 Months of Full Time Neovim + Tmux
SSH
-- gravitational.com: How to SSH Properly 🌟
+- gravitational.com: How to SSH Properly 🌟
- 19 Common SSH Commands In Linux With Examples
-- commandlinefu.com/commands/matching/ssh
+- commandlinefu.com/commands/matching/ssh
- Auto-SSH for Linux security
- Grant-Revoke-ssh-access To automate the process of granting ssh access to a group of servers instances
- How to use SSH properly and what is SSH Agent Forwarding
-- How To Set up SSH Keys on a Linux / Unix System
+- How To Set up SSH Keys on a Linux / Unix System
- opensource.com: Bypass your Linux firewall with SSH over HTTP Remote work is here to stay; use this helpful open source solution to quickly connect and access all your devices from anywhere.
-- Túneles SSH
-- paepper.com: How to properly manage ssh keys for server access
-- goteleport.com: SSH Certificates Security. SSH Access Hardening 🌟
+- Túneles SSH
+- paepper.com: How to properly manage ssh keys for server access
+- goteleport.com: SSH Certificates Security. SSH Access Hardening 🌟
- dev.to: How to Manage Multiple SSH Key Pairs
- cyberciti.biz: Top 20 OpenSSH Server Best Security Practices
-- cyberciti.biz: How To Reuse SSH Connection To Speed Up Remote Login Process Using Multiplexing
-- cyberciti.biz: OpenSSH Change a Passphrase With ssh-keygen command
-- thenewstack.io: SSH Made Easy with SSH Agent and SSH Config
-- linuxteck.com: 10 basic and most useful ‘ssh’ client commands in Linux
+- cyberciti.biz: How To Reuse SSH Connection To Speed Up Remote Login Process Using Multiplexing
+- cyberciti.biz: OpenSSH Change a Passphrase With ssh-keygen command
+- thenewstack.io: SSH Made Easy with SSH Agent and SSH Config
+- linuxteck.com: 10 basic and most useful ‘ssh’ client commands in Linux
- cyberciti.biz: How to audit SSH server and client config on Linux/Unix OpenSSH is critical for Linux & Unix servers. However, misconfig can create issues. But fear not, you can audit the SSH server & client config easily. You don’t have to be a security guru. New developers and sysadmins can look for security & other issues.
-- iximiuz.com: A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding 🌟
+- iximiuz.com: A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding 🌟
OpenSSL
-- redhat.com: 6 OpenSSL command options that every sysadmin should know Look beyond generating certificate signing requests and see how OpenSSL commands can display practical information about certificates.
-- tecmint.com: Testssl.sh – Testing TLS/SSL Encryption Anywhere on Any Port
+- redhat.com: 6 OpenSSL command options that every sysadmin should know Look beyond generating certificate signing requests and see how OpenSSL commands can display practical information about certificates.
+- tecmint.com: Testssl.sh – Testing TLS/SSL Encryption Anywhere on Any Port
Linux Blogs
-- The Linux Foundation
-- tecmint.com 🌟
-- nixCraft 🌟
-- unixmen.com 🌟
-- opensource.com 🌟
-- linux.com 🌟
-- linuxteck.com
-- linoxide.com 🌟
-- linuxjourney.com
-- howtoforge.com
-- tecadmin.net
-- systemcodegeeks.com
-- linuxnix.com
-- learnitguide.net 🌟
-- FOSS Force
-- linuxhomenetworking.com
-- linuxtoday.com
-- unixetc.co.uk
-- LWN.net
-- Linux-tutorial.info
-- The Lone Sysadmin
+- The Linux Foundation
+- tecmint.com 🌟
+- nixCraft 🌟
+- unixmen.com 🌟
+- opensource.com 🌟
+- linux.com 🌟
+- linuxteck.com
+- linoxide.com 🌟
+- linuxjourney.com
+- howtoforge.com
+- tecadmin.net
+- systemcodegeeks.com
+- linuxnix.com
+- learnitguide.net 🌟
+- FOSS Force
+- linuxhomenetworking.com
+- linuxtoday.com
+- unixetc.co.uk
+- LWN.net
+- Linux-tutorial.info
+- The Lone Sysadmin
- LinuxLinks.com
- unixmages.com
-- The Geek Stuff
+- The Geek Stuff
- abarrak.gitbook.io: Linux SysOps Handbook 🌟 A study notes book for the common knowledge and tasks of a Linux system admin.
Spanish Linux Blogs
Youtube
@@ -8236,166 +8236,166 @@
Reddit
-- reddit.com/r/linuxadmin Expanding Linux SysAdmin knowledge
+- reddit.com/r/linuxadmin Expanding Linux SysAdmin knowledge
Linux Commands and Tools
-- watchman command: A File and Directory Watching Tool for Changes
-- ip command: How to use IP Command in Linux with Examples
-- curl command: Understanding the Hidden Powers of curl
-- How To Use grep Command In Linux / UNIX 🌟
-- tecmint.com: vtop – A Linux Process and Memory Activity Monitoring Tool
-- tecmint.com: How to Install htop on CentOS 8
-- cyberciti.biz: bpytop – Awesome Linux, macOS and FreeBSD resource monitor
-- redhat.com: Save time at the command line with HTTPie instead of curl Automate testing endpoints, downloading files, and submitting forms with HTTPie.
+- watchman command: A File and Directory Watching Tool for Changes
+- ip command: How to use IP Command in Linux with Examples
+- curl command: Understanding the Hidden Powers of curl
+- How To Use grep Command In Linux / UNIX 🌟
+- tecmint.com: vtop – A Linux Process and Memory Activity Monitoring Tool
+- tecmint.com: How to Install htop on CentOS 8
+- cyberciti.biz: bpytop – Awesome Linux, macOS and FreeBSD resource monitor
+- redhat.com: Save time at the command line with HTTPie instead of curl Automate testing endpoints, downloading files, and submitting forms with HTTPie.
- redhat.com: World domination with cgroups part 8: down and dirty with cgroup v2
-- freecodecamp.org: RSync Examples – Rsync Options and How to Copy Files Over SSH
-- tecmint.com: How to Control Systemd Services on Remote Linux Server
-- redhat.com: Vim: Basic and intermediate commands
-- redhat.com: Using ssh-keygen and sharing for key-based authentication in Linux SSH key-based authentication is helpful for both security and convenience. See how to generate and share keys.
-- tecmint.com: How to Run Commands from Standard Input Using Tee and Xargs in Linux
-- cyberciti.biz: How to configure pfSense as multi wan (DUAL WAN) load balance failover router
-- nikhilism.com: Mystery Knowledge and Useful Tools
+- freecodecamp.org: RSync Examples – Rsync Options and How to Copy Files Over SSH
+- tecmint.com: How to Control Systemd Services on Remote Linux Server
+- redhat.com: Vim: Basic and intermediate commands
+- redhat.com: Using ssh-keygen and sharing for key-based authentication in Linux SSH key-based authentication is helpful for both security and convenience. See how to generate and share keys.
+- tecmint.com: How to Run Commands from Standard Input Using Tee and Xargs in Linux
+- cyberciti.biz: How to configure pfSense as multi wan (DUAL WAN) load balance failover router
+- nikhilism.com: Mystery Knowledge and Useful Tools
- developers.redhat.com: Linux commands for developers
-- cyberciti.biz: BASH Shell Change The Color of Shell Prompt on Linux or UNIX
-- cyberciti.biz: How to check TLS/SSL certificate expiration date from command-line
-- igoroseledko.com: Parallel Rsync
-- redhat.com: How to record your Linux terminal using asciinema Asciinema might be the application you’ve been looking for to demonstrate a skill or process that you want your colleagues or students to learn on-demand.
-- redhat.com: 5 advanced rsync tips for Linux sysadmins Use rsync compression and checksums to better manage file synchronization.
+- cyberciti.biz: BASH Shell Change The Color of Shell Prompt on Linux or UNIX
+- cyberciti.biz: How to check TLS/SSL certificate expiration date from command-line
+- igoroseledko.com: Parallel Rsync
+- redhat.com: How to record your Linux terminal using asciinema Asciinema might be the application you’ve been looking for to demonstrate a skill or process that you want your colleagues or students to learn on-demand.
+- redhat.com: 5 advanced rsync tips for Linux sysadmins Use rsync compression and checksums to better manage file synchronization.
- metacpan.org: a2p - Awk to Perl translator A2p takes an awk script specified on the command line (or from standard input) and produces a comparable perl script on the standard output.
-- oilshell: Alternative shells
+- oilshell: Alternative shells
- Timezone Bullshit
-- cyberciti.biz: How to check memory utilization in Linux
-- tecmint.com: Different Ways to Use Column Command in Linux
+- cyberciti.biz: How to check memory utilization in Linux
+- tecmint.com: Different Ways to Use Column Command in Linux
- opensource.com: How to use the Linux grep command
-- dnschecker.org 🌟
+- dnschecker.org 🌟
- tecmint.com: 10 Useful Commands to Collect System and Hardware Information in Linux
-- cyberciti.biz: How To Find Largest Top 10 Files and Directories On Linux / UNIX / BSD
-- cyberciti.biz: How to restart systemd without rebooting Linux when critical libraries installed
-- cyberciti.biz: How to install ncdu on Linux / Unix to see disk usage
+- cyberciti.biz: How To Find Largest Top 10 Files and Directories On Linux / UNIX / BSD
+- cyberciti.biz: How to restart systemd without rebooting Linux when critical libraries installed
+- cyberciti.biz: How to install ncdu on Linux / Unix to see disk usage
- cyberciti.biz: 21 Examples To Make Sure Unix / Linux Configuration Files Are Free From Syntax Errors
- opensource.com: Don’t love diff? Use Meld instead Meld is a visual diff tool that makes it easier to compare and merge changes in files, directories, Git repos, and more.
-- kalilinuxtutorials.com: Ldsview : Offline search tool for LDAP directory dumps in LDIF format
+- kalilinuxtutorials.com: Ldsview : Offline search tool for LDAP directory dumps in LDIF format
- medium: Useful Commands/Solutions
- CLImagic subscription
-- cyberciti.biz: How to save terminal output to a file under Linux/Unix
-- cyberciti.biz: ls* Commands Are Even More Useful Than You May Have Thought
-- linuxtechlab.com: Search a file in Linux using Find & Locate command
-- tecmint.com: How to Install and Configure ‘Collectd’ and ‘Collectd-Web’ to Monitor Server Resources in Linux
-- sysadminxpert.com: How to watch real time TCP and UDP ports on Linux (netstat & ss) 🌟
-- cyberciti.biz: How to flush Redis cache and delete everything using the CLI
-- cyberciti.biz: How To: Linux Find Large Files in a Directory
-- linuxteck.com: 15 basic curl command in Linux with practical examples
-- linuxteck.com: 12 basic cat command in Linux with examples
-- tecmint.com: How to Find Recent or Today’s Modified Files in Linux 🌟
+- cyberciti.biz: How to save terminal output to a file under Linux/Unix
+- cyberciti.biz: ls* Commands Are Even More Useful Than You May Have Thought
+- linuxtechlab.com: Search a file in Linux using Find & Locate command
+- tecmint.com: How to Install and Configure ‘Collectd’ and ‘Collectd-Web’ to Monitor Server Resources in Linux
+- sysadminxpert.com: How to watch real time TCP and UDP ports on Linux (netstat & ss) 🌟
+- cyberciti.biz: How to flush Redis cache and delete everything using the CLI
+- cyberciti.biz: How To: Linux Find Large Files in a Directory
+- linuxteck.com: 15 basic curl command in Linux with practical examples
+- linuxteck.com: 12 basic cat command in Linux with examples
+- tecmint.com: How to Find Recent or Today’s Modified Files in Linux 🌟
- linuxshelltips.com: How to Use Netcat to Scan Open Ports in Linux 🌟
-- Rclone 🌟🌟🌟 Rclone is a command line program to manage files on cloud storage. It is a feature rich alternative to cloud vendors’ web storage interfaces. Over 40 cloud storage products support rclone including S3 object stores, business & consumer file storage services, as well as standard transfer protocols. Rclone has powerful cloud equivalents to the unix commands rsync, cp, mv, mount, ls, ncdu, tree, rm, and cat. Rclone’s familiar syntax includes shell pipeline support, and –dry-run protection. It is used at the command line, in scripts or via its API.
-- cyberciti.biz: 8 Tips to Solve Linux Hard Disk Problems: Like Disk Full Or Can’t Write to the Disk
-- blog.ycrash.io: dmesg – Unix/Linux command, beginners introduction with examples
+- Rclone 🌟🌟🌟 Rclone is a command line program to manage files on cloud storage. It is a feature rich alternative to cloud vendors’ web storage interfaces. Over 40 cloud storage products support rclone including S3 object stores, business & consumer file storage services, as well as standard transfer protocols. Rclone has powerful cloud equivalents to the unix commands rsync, cp, mv, mount, ls, ncdu, tree, rm, and cat. Rclone’s familiar syntax includes shell pipeline support, and –dry-run protection. It is used at the command line, in scripts or via its API.
+- cyberciti.biz: 8 Tips to Solve Linux Hard Disk Problems: Like Disk Full Or Can’t Write to the Disk
+- blog.ycrash.io: dmesg – Unix/Linux command, beginners introduction with examples
- opensource.com: Use XMLStarlet to parse XML in the Linux terminal Become an XML star with XMLStarlet, an XML toolkit for your terminal.
-- redhat.com: 5 Linux commands I’m going to start using Five standard Linux commands that can make your life much easier.
+- redhat.com: 5 Linux commands I’m going to start using Five standard Linux commands that can make your life much easier.
- developers.redhat.com: Build your own RPM package with a sample Go program to simplify installing, updating, or removing a piece of software
-- cyberciti.biz: How to copy and transfer files remotely on Linux using scp and rsync
-- nginx.com: What Are Namespaces and cgroups, and How Do They Work? 🌟 Namespaces provide isolation of system resources, and cgroups allow for fine‑grained control and enforcement of limits for those resources. Containers are not the only way that you can use namespaces and cgroups. Namespaces and cgroup interfaces are built into the Linux kernel, which means that other applications can use them to provide separation and resource constraints.
-- cyberciti.biz: How to check CPU temperature on Ubuntu Linux
+- cyberciti.biz: How to copy and transfer files remotely on Linux using scp and rsync
+- nginx.com: What Are Namespaces and cgroups, and How Do They Work? 🌟 Namespaces provide isolation of system resources, and cgroups allow for fine‑grained control and enforcement of limits for those resources. Containers are not the only way that you can use namespaces and cgroups. Namespaces and cgroup interfaces are built into the Linux kernel, which means that other applications can use them to provide separation and resource constraints.
+- cyberciti.biz: How to check CPU temperature on Ubuntu Linux
- opensource.com: Check used disk space on Linux with du Find out how much disk space you’re using with the Linux du command.
-- linuxshelltips.com: How to Kill Running Linux Process on Particular Port
-- freecodecamp.org: The Linux Command Handbook 🌟
-- sysadminxpert.com: How to do Security Auditing of CentOS System Using Lynis Tool
-- tecmint.com: 10 Practical Examples of Rsync Command in Linux
-- tecmint.com: 10 Useful du (Disk Usage) Commands to Find Disk Usage of Files and Directories
-- tecmint.com: What’s Difference Between Grep, Egrep and Fgrep in Linux?
+- linuxshelltips.com: How to Kill Running Linux Process on Particular Port
+- freecodecamp.org: The Linux Command Handbook 🌟
+- sysadminxpert.com: How to do Security Auditing of CentOS System Using Lynis Tool
+- tecmint.com: 10 Practical Examples of Rsync Command in Linux
+- tecmint.com: 10 Useful du (Disk Usage) Commands to Find Disk Usage of Files and Directories
+- tecmint.com: What’s Difference Between Grep, Egrep and Fgrep in Linux?
- opensource.com: Check file status on Linux with the stat command
-- tecmint.com: How to Kill Linux Process Using Kill, Pkill and Killall
-- linuxteck.com: 13 Top command in Linux (Monitor Linux Server Processes) 🌟
-- cyberciti.biz: How to use df command in Linux / Unix {with examples}
-- commandlinefu.com: Compare directories via diff:
diff -rq dirA dirB
+- tecmint.com: How to Kill Linux Process Using Kill, Pkill and Killall
+- linuxteck.com: 13 Top command in Linux (Monitor Linux Server Processes) 🌟
+- cyberciti.biz: How to use df command in Linux / Unix {with examples}
+- commandlinefu.com: Compare directories via diff:
diff -rq dirA dirB
- opensource.com: Check Java processes on Linux with the jps command With many processes running on a system, it’s useful to have a quick way to identify only Java with the jps command.
- opensource.com: Get memory use statistics with this Linux command-line tool The smem command allows you to quickly view your web applications’ memory use.
-- redhat.com: 3 basic Linux group management commands every sysadmin should know How to use the groupadd, groupmod, and groupdel commands is essential knowledge for Linux sysadmins.
+- redhat.com: 3 basic Linux group management commands every sysadmin should know How to use the groupadd, groupmod, and groupdel commands is essential knowledge for Linux sysadmins.
- itsfoss.com/exa exa: A Modern Replacement for the ls Command
-- cyberciti.biz: diff Command Colorize Output On the Unix / Linux Command Line colordiff
+- cyberciti.biz: diff Command Colorize Output On the Unix / Linux Command Line colordiff
- betterprogramming.pub: How to Use tmuxp to Manage Your tmux Session Take control of your tmux sessions.
- opensource.com: Linux tips for using cron to schedule tasks Schedule backups, file cleanups, and other tasks by using this simple yet powerful Linux command-line tool. Download our new cron cheat sheet.
- opensource.com: 7 handy tricks for using the Linux wget command Download files from the internet in your Linux terminal. Get the most out of the wget command with our new cheat sheet.
-- makeuseof.com: The 6 Best Command Line Tools to Monitor Linux Performance in the Terminal Want to track and debug Linux System resources, storage, and network-related problems? Get started with the best Linux performance monitoring tools.
+- makeuseof.com: The 6 Best Command Line Tools to Monitor Linux Performance in the Terminal Want to track and debug Linux System resources, storage, and network-related problems? Get started with the best Linux performance monitoring tools.
- opensource.com: 4 Linux tools to erase your data Erase data from your hard disk drive with these open source tools.
-- redhat.com: 20 one-line Linux commands to add to your toolbox Every Linux user has a favorite single-line command. Here are the 20 Linux commands we can’t live without.
+- redhat.com: 20 one-line Linux commands to add to your toolbox Every Linux user has a favorite single-line command. Here are the 20 Linux commands we can’t live without.
- termshark A terminal UI for tshark, inspired by Wireshark
- baeldung.com: Maximum Number of Threads Per Process in Linux
- opensource.com: Record your terminal session with Asciinema
-- redhat.com: 5 scripts for getting started with the Nmap Scripting Engine The NSE boosts Nmap’s power by adding scripting capabilities (custom or community-created) to the network scanning tool.
-- redhat.com: Linux troubleshooting commands: 4 tools for DNS name resolution problems Find out what’s stopping you from accessing a server, printer, or another network resource with these four Linux troubleshooting commands.
-- jvns.ca: A list of new(ish) command line tools | Julia Evans
-- itsfoss.com: 5 htop Alternatives to Enhance Your Linux System Monitoring Experience
+- redhat.com: 5 scripts for getting started with the Nmap Scripting Engine The NSE boosts Nmap’s power by adding scripting capabilities (custom or community-created) to the network scanning tool.
+- redhat.com: Linux troubleshooting commands: 4 tools for DNS name resolution problems Find out what’s stopping you from accessing a server, printer, or another network resource with these four Linux troubleshooting commands.
+- jvns.ca: A list of new(ish) command line tools | Julia Evans
+- itsfoss.com: 5 htop Alternatives to Enhance Your Linux System Monitoring Experience
- dev.to: 50 Linux Commands every developer NEED to know with example
- blog.devgenius.io: DevOps in Linux — Systemd Introduction
- difftastic.wilfred.me.uk Difftastic is a CLI diff tool that compares files based on their syntax, not line-by-line. Difftastic produces accurate diffs that are easier for humans to read.
- digitalocean.com: How To Use Journalctl to View and Manipulate Systemd Logs 🌟
- github.com/curl/wcurl 🌟 a simple wrapper around curl to easily download files
Makefiles
-- makefiletutorial.com 🌟 Learn Makefiles With the tastiest examples
+- makefiletutorial.com 🌟 Learn Makefiles With the tastiest examples
Guestfish
- Guestfish
-- redhat.com: How to customize VM and cloud images with guestfish Need to tweak your cloud and virtual machine images to comply with company policies or other requirements? Give guestfish a try.
+- redhat.com: How to customize VM and cloud images with guestfish Need to tweak your cloud and virtual machine images to comply with company policies or other requirements? Give guestfish a try.
BusyBox
-- busybox.net BusyBox: The Swiss Army Knife of Embedded Linux
+- busybox.net BusyBox: The Swiss Army Knife of Embedded Linux
- genbeta.com: BusyBox, el ejecutable que agrupa casi 200 utilidades Unix de línea de comandos (y que puedes usar también en Windows o Android)
Bash
-- igoroseledko.com: Checking Multiple Variables in Bash
+- igoroseledko.com: Checking Multiple Variables in Bash
- Introduction to Bash Scripting Interactive training
-- datafix.com.au: BASHing data - Data ops on the Linux command line 🌟
+- datafix.com.au: BASHing data - Data ops on the Linux command line 🌟
- medium: How to trigger an action at the end of the Shell/Bash script Using Bash/Shell trap, a built-in command to define any action to be executed before exiting the Bash or Shell script. You can define multiple actions and per signal.
-- redhat.com: Bash scripting: How to read data from text files Here’s how to extract data from a text file such as reading in a list of servers to test connectivity to them.
+- redhat.com: Bash scripting: How to read data from text files Here’s how to extract data from a text file such as reading in a list of servers to test connectivity to them.
- pement.org: Over 100 sed one-liners
- github: Safe ways to do things in bash
-- rexegg.com: Regex Syntax Tricks
+- rexegg.com: Regex Syntax Tricks
- pement.org: Handy one-line scripts for AWK
- robertmuth.blogspot.com: Better Bash Scripting in 15 Minutes
-- cyberciti.biz: How To Bash Shell Find Out If a Variable Is Empty Or Not
+- cyberciti.biz: How To Bash Shell Find Out If a Variable Is Empty Or Not
- Bash Pitfalls 🌟
- cyberciti.biz: Bash For Loop Examples
- opensource.com: Parsing config files with Bash Separating config files from code enables anyone to change their configurations without any special programming skills.
-- cloudsavvyit.com: How to Use Multi-Threaded Processing in Bash Scripts
+- cloudsavvyit.com: How to Use Multi-Threaded Processing in Bash Scripts
- opensource.com: How to include options in your Bash shell scripts
- bash.cyberciti.biz Wiki 🌟
-- redhat.com: Audit user accounts for never-expiring passwords with a Bash script Non-expiring passwords might violate your organization’s policies, so use this basic Bash script to quickly pick them out.
-- thenewstack.io: An Introduction to AWK
-- cyberciti.biz: How to repeat a character ‘n’ times in Bash
-- redhat.com: 2 Bash commands to change strings in multiple files at once Search and replace text in several files simultaneously, right from the Linux terminal, to gain efficiency and minimize mistakes.
+- redhat.com: Audit user accounts for never-expiring passwords with a Bash script Non-expiring passwords might violate your organization’s policies, so use this basic Bash script to quickly pick them out.
+- thenewstack.io: An Introduction to AWK
+- cyberciti.biz: How to repeat a character ‘n’ times in Bash
+- redhat.com: 2 Bash commands to change strings in multiple files at once Search and replace text in several files simultaneously, right from the Linux terminal, to gain efficiency and minimize mistakes.
- cyberciti.biz: Bash Read Comma Separated CSV File on Linux / Unix
-- fedoramagazine.org: Bash Shell Scripting for beginners (Part 1)
-- igoroseledko.com: Awk & sed Snippets for SysAdmins
+- fedoramagazine.org: Bash Shell Scripting for beginners (Part 1)
+- igoroseledko.com: Awk & sed Snippets for SysAdmins
- dev.to: Writing Bash Scripts Like A Pro - Part 1 - Styling Guide
-- linuxhandbook.com: Unusual Ways to Use Variables Inside Bash Scripts
+- linuxhandbook.com: Unusual Ways to Use Variables Inside Bash Scripts
- opensource.com: An introduction to programming with Bash (eBook)
-- pythonspeed.com: Please stop writing shell scripts
-- linuxshelltips.com: What’s the Difference Between ${} and $() in Bash
+- pythonspeed.com: Please stop writing shell scripts
+- linuxshelltips.com: What’s the Difference Between ${} and $() in Bash
- medium.com/kubehub: A Series on Bash Scripting
- levelup.gitconnected.com: Start Your Scripting Journey Today | Bash Script — Part 1 Everything You Need to Know to Write Bash Scripts
- medium.com: Shell Scripting for DevOps with Examples
- levelup.gitconnected.com: 5 Bash String Manipulation Methods That Help Every Developer Process strings productively in your automation scripts with these syntaxes
- piyushverma.hashnode.dev: Basic Linux Shell Scripting for DevOps Engineers
-- gnu.org/software/parallel GNU parallel is a shell tool for executing jobs in parallel using one or more computers. A job can be a single command or a small script that has to be run for each of the lines in the input. The typical input is a list of files, a list of hosts, a list of users, a list of URLs, or a list of tables. A job can also be a command that reads from a pipe. GNU parallel can then split the input and pipe it into commands in parallel.
+- gnu.org/software/parallel GNU parallel is a shell tool for executing jobs in parallel using one or more computers. A job can be a single command or a small script that has to be run for each of the lines in the input. The typical input is a list of files, a list of hosts, a list of users, a list of URLs, or a list of tables. A job can also be a command that reads from a pipe. GNU parallel can then split the input and pipe it into commands in parallel.
- youtube: Bash for Beginners Bash is considered a universal language when it comes to cloud computing and programming. Many languages support Bash commands to pass data and information and when it comes to the Cloud, all platforms support using it to interact with your environment.
Questions and Answers
-- redhat.com: 5 questions to ask during your next sysadmin interview
+- redhat.com: 5 questions to ask during your next sysadmin interview
- trimstray/test-your-sysadmin-skills A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
Automation. Bash VS Python VS JavaScript
@@ -8404,8 +8404,8 @@
Zsh
-- Oh My Zsh Oh My Zsh is a delightful, open source, community-driven framework for managing your Zsh configuration. It comes bundled with thousands of helpful functions, helpers, plugins, themes, and a few things that make you shout…
-- zshdb.readthedocs.io zshdb - a gdb-like debugger for zsh
+- Oh My Zsh Oh My Zsh is a delightful, open source, community-driven framework for managing your Zsh configuration. It comes bundled with thousands of helpful functions, helpers, plugins, themes, and a few things that make you shout…
+- zshdb.readthedocs.io zshdb - a gdb-like debugger for zsh
- github.com/zsh-users/zsh-autosuggestions 🌟 Fish-like autosuggestions for zsh
ZX
@@ -8414,10 +8414,10 @@
bpftrace
-- bpftrace High-level tracing language for Linux eBPF. bpftrace is pretty impressive in terms of conciseness and practicality of their docs.
-- https://github.com/iovisor/bpftrace/blob/master/docs/reference_guide.md
-- https://github.com/iovisor/bpftrace/blob/master/docs/tutorial_one_liners.md
-- https://github.com/iovisor/bpftrace/blob/master/docs/internals_development.md
+- bpftrace High-level tracing language for Linux eBPF. bpftrace is pretty impressive in terms of conciseness and practicality of their docs.
+- https://github.com/bpftrace/bpftrace/blob/master/docs/reference_guide.md
+- https://github.com/bpftrace/bpftrace/blob/master/docs/tutorial_one_liners.md
+- https://github.com/bpftrace/bpftrace/blob/master/docs/internals_development.md
- blog.flipkart.tech: The Art of System Debugging — Decoding CPU Utilization
Linux processes
@@ -8426,12 +8426,12 @@
Controlling Process Resources with Linux Control Groups (cgroups) - (Related to kubernetes topic)
-
-
percona.com: How Much Memory Does the Process Really Take on Linux? 🌟
+percona.com: How Much Memory Does the Process Really Take on Linux? 🌟
Linux Memory
-- learnsteps.com: Difference between minor page faults vs major page faults
+- learnsteps.com: Difference between minor page faults vs major page faults
KVM
@@ -8445,7 +8445,7 @@
-
-- How Linux PID namespaces work with containers 🌟
+- How Linux PID namespaces work with containers 🌟
Systemd
@@ -8454,16 +8454,16 @@
Blogs
CommandLineFu
-- CommandLineFu 🌟
-- twitter.com/commandlinefu Command line diamonds, created and voted on by our members
-- twitter.com/commandlinefu3 3-star commands, a Linux afficionado’s wet dream
-- twitter.com/commandlinefu10 10 star command line gems - known to make experienced sysadmins weep with joy.
+- CommandLineFu 🌟
+- twitter.com/commandlinefu Command line diamonds, created and voted on by our members
+- twitter.com/commandlinefu3 3-star commands, a Linux afficionado’s wet dream
+- twitter.com/commandlinefu10 10 star command line gems - known to make experienced sysadmins weep with joy.
Wait until Your Dockerized Database Is Ready before Continuing
@@ -8475,12 +8475,12 @@
Copr Build System
- Building a repo with RPM packages from PyPI is super easy using Copr.
-- copr.fedorainfracloud.org Copr is an easy-to-use automatic build system providing a package repository as its output.
+- copr.fedorainfracloud.org Copr is an easy-to-use automatic build system providing a package repository as its output.
- Copr
Pulp
-- pulpproject.org Fetch, Upload, Organize, and Distribute Software Packages.
+- pulpproject.org Fetch, Upload, Organize, and Distribute Software Packages.
Hashicorp
@@ -8492,31 +8492,31 @@
Linux Networking
-- ntop
-- ngrep
-- Angry IP Scanner (or simply ipscan) to Nmap and cross-platform
+- ntop
+- ngrep
+- Angry IP Scanner (or simply ipscan) to Nmap and cross-platform
- cyberciti.biz - ss: Display Linux TCP / UDP Network and Socket Information
- cyberciti.biz - SS Utility: Quick Intro
-- binarytides.com - 10 examples of Linux ss command to monitor network connections
+- binarytides.com - 10 examples of Linux ss command to monitor network connections
- unix.stackexchange.com: ss - linux socket statistics utility output format
- stackoverflow.com: difference between netstat and ss in linux?
- Linux networking examples and tutorials for advanced users Includes lab examples for lxc, bgp, vpn, & more
-- blog.pandorafms.org: Useful Network commands VNStat, ping, traceroute, ping, arp, curl and wget, netstat, whois, ssh, tcpdump, ngrep, nmap, netcat, lsof, iptraf
-- Diferencias entre servidor proxy y servidor proxy inverso
-- cyberciti.biz: Linux ip Command Examples 🌟
+- blog.pandorafms.org: Useful Network commands VNStat, ping, traceroute, ping, arp, curl and wget, netstat, whois, ssh, tcpdump, ngrep, nmap, netcat, lsof, iptraf
+- Diferencias entre servidor proxy y servidor proxy inverso
+- cyberciti.biz: Linux ip Command Examples 🌟
- cyberciti.biz: Linux: 25 Iptables Netfilter Firewall Examples For New SysAdmins
-- redhat.com: 6 tcpdump network traffic filter options The first six of eighteen common tcpdump options that you should use for network troubleshooting and analysis.
-- redhat.com: Learn the networking basics every sysadmin needs to know
-- tecmint.com: 16 Useful Bandwidth Monitoring Tools to Analyze Network Usage in Linux
-- iximiuz.com: Illustrated introduction to Linux iptables
-- linuxteck.com: 15 basic useful firewall-cmd commands in Linux
-- tecmint.com: 20 Netstat Commands for Linux Network Management
-- redhat.com: 5 Linux network troubleshooting commands 🌟 Linux provides many command-line tools to help sysadmins manage, configure, and troubleshoot network settings.
+- redhat.com: 6 tcpdump network traffic filter options The first six of eighteen common tcpdump options that you should use for network troubleshooting and analysis.
+- redhat.com: Learn the networking basics every sysadmin needs to know
+- tecmint.com: 16 Useful Bandwidth Monitoring Tools to Analyze Network Usage in Linux
+- iximiuz.com: Illustrated introduction to Linux iptables
+- linuxteck.com: 15 basic useful firewall-cmd commands in Linux
+- tecmint.com: 20 Netstat Commands for Linux Network Management
+- redhat.com: 5 Linux network troubleshooting commands 🌟 Linux provides many command-line tools to help sysadmins manage, configure, and troubleshoot network settings.
Networking Protocols
-- freecodecamp.org: TCP vs. UDP — What’s the Difference and Which Protocol is Faster?
-- howdns.works A fun and colorful explanation of how DNS works.
+- freecodecamp.org: TCP vs. UDP — What’s the Difference and Which Protocol is Faster?
+- howdns.works A fun and colorful explanation of how DNS works.
Linux Hardening Security
diff --git a/liquibase.html b/liquibase.html
index 93e4da20..79289ccc 100644
--- a/liquibase.html
+++ b/liquibase.html
@@ -7751,26 +7751,26 @@
Liquibase
-- liquibase.org
+- liquibase.org
- dzone: Introduction to Liquibase and Managing Your Database Source Code
- dzone: Managing Your Database With Liquibase and Gradle
- dzone: Executing Liquibase: 3 Use Cases
-- percona: Database Schema Management Via Liquibase
-- piotrminkowski.com: Blue-green deployment with a database on Kubernetes 🌟
+- percona: Database Schema Management Via Liquibase
+- piotrminkowski.com: Blue-green deployment with a database on Kubernetes 🌟
Flyway
-- Flyway Version control for your database. Robust schema evolution across all your environments. With ease, pleasure and plain SQL.
+- Flyway Version control for your database. Robust schema evolution across all your environments. With ease, pleasure and plain SQL.
- dzone: Build a Spring Boot App With Flyway and Postgres
Liquibase vs. Flyway
-- liquibase.org: Liquibase vs. Flyway
+- liquibase.org: Liquibase vs. Flyway
- medium: Database version control — Liquibase versus Flyway
PlanetScale
-- docs.planetscale.com: The PlanetScale workflow 🌟 Use the PlanetScale workflow for branching databases, non-blocking schema changes and more.
+- docs.planetscale.com: The PlanetScale workflow 🌟 Use the PlanetScale workflow for branching databases, non-blocking schema changes and more.
Bytebase
diff --git a/lowcode-nocode.html b/lowcode-nocode.html
index da7cf838..0bac0b25 100644
--- a/lowcode-nocode.html
+++ b/lowcode-nocode.html
@@ -7623,12 +7623,12 @@
- dzone: Top 10 Low-Code Articles See the 10 most popular articles on Low-Code with topics covering Low-Code introduction, building an application with Low-Code, comparison with Microservices, a smack-down with pro-code, and more!
- dzone: Low Code and No-Code Considerations [ARCHIVED]
-- sdtimes.com: Low code cuts down on dev time, increases testing headaches
-- thenewstack.io: Use Low Code to Reduce Friction for Cloud Operations Teams
+- sdtimes.com: Low code cuts down on dev time, increases testing headaches
+- thenewstack.io: Use Low Code to Reduce Friction for Cloud Operations Teams
- itnext.io: For Developers the Low-Code Winter Is Coming Prepare for hard times or move to where the sun is shining
-- thenewstack.io: Why Businesses Want to Enable ‘No-Code’ and ‘Low-Code’ Automation
-- thenewstack.io: Low Code for Pro Coders
-- acloudguru.com: AWS adds to the no-code pile: Is it the end of the engineer?
+- thenewstack.io: Why Businesses Want to Enable ‘No-Code’ and ‘Low-Code’ Automation
+- thenewstack.io: Low Code for Pro Coders
+- acloudguru.com: AWS adds to the no-code pile: Is it the end of the engineer?
- techradar.com: Low-code could replace “traditional” coding within months
diff --git a/managed-kubernetes-in-public-cloud.html b/managed-kubernetes-in-public-cloud.html
index 446d1df9..dce2db21 100644
--- a/managed-kubernetes-in-public-cloud.html
+++ b/managed-kubernetes-in-public-cloud.html
@@ -7980,11 +7980,11 @@
Introduction
-- infoworld.com: 6 reasons to switch to managed Kubernetes Managed Kubernetes services have matured to the point where many enterprises are handing over the keys to their clusters. Here we identify some of the main drivers behind that trend.
-- Allocatable memory and CPU in Kubernetes Nodes 🌟 Not all CPU and memory in your Kubernetes nodes can be used to run Pods. In this article, you will learn how managed Kubernetes Services such AKS, EKS and GKE reserve resources for workloads, operating systems, daemons and Kubernetes agent.
+- infoworld.com: 6 reasons to switch to managed Kubernetes Managed Kubernetes services have matured to the point where many enterprises are handing over the keys to their clusters. Here we identify some of the main drivers behind that trend.
+- Allocatable memory and CPU in Kubernetes Nodes 🌟 Not all CPU and memory in your Kubernetes nodes can be used to run Pods. In this article, you will learn how managed Kubernetes Services such AKS, EKS and GKE reserve resources for workloads, operating systems, daemons and Kubernetes agent.
- armosec.io: Which Managed Kubernetes Is Right for Me? This blog will compare on-premises, or self-hosted,Kubernetes clusters to managed ones, as well as outline your options for Kubernetes in the cloud
-- infoworld.com: CNCF survey: Managed Kubernetes becomes the norm Cloud Native Computing Foundation’s latest survey shows that container and Kubernetes usage continues to rise, as managed services ease the operational burden on their teams.
-- redhat.com: What architects need to know about managed Kubernetes Should you assemble your own Kubernetes stack or adopt a managed platform such as Red Hat OpenShift? Evaluate the differences.
+- infoworld.com: CNCF survey: Managed Kubernetes becomes the norm Cloud Native Computing Foundation’s latest survey shows that container and Kubernetes usage continues to rise, as managed services ease the operational burden on their teams.
+- redhat.com: What architects need to know about managed Kubernetes Should you assemble your own Kubernetes stack or adopt a managed platform such as Red Hat OpenShift? Evaluate the differences.
- dev.to/thenjdevopsguy: AKS vs EKS vs GKE
@@ -7996,110 +7996,110 @@
GKE vs EKS vs AKS
- medium.com: Kubernetes Cloud Services: Comparing GKE, EKS and AKS
-- stackrox.com: EKS vs GKE vs AKS - Evaluating Kubernetes in the Cloud
+- stackrox.com: EKS vs GKE vs AKS - Evaluating Kubernetes in the Cloud
- youtube: Kubernetes Comparison A beautiful comparison of Kubernetes Services from GCP, AWS and Azure by learnk8s.
- medium: State of Managed Kubernetes 2020 EKS vs. AKS vs. GKE from a Developer’s Perspective
- medium: Managed Kubernetes Services Compared: GKE vs. EKS vs. AKS Comparing the three most popular managed Kubernetes platforms in features and overall experience.
-- acloudguru.com: AKS vs EKS vs GKE: Managed Kubernetes services compared
+- acloudguru.com: AKS vs EKS vs GKE: Managed Kubernetes services compared
Other Managed Kubernetes
-- thenewstack.io: Otomi Container Platform Offers an Integrated Kubernetes Bundle If you want to enjoy the benefits of Kubernetes, configuring and installing the software itself can be just the first of many deeply technical and oftentimes confusing steps. To simplify this, many major cloud providers offer managed Kubernetes services, but even then you may need to install secondary services to handle tasks such as tracing, logging, monitoring, identity access management, and so on. The Otomi Container Platform looks to address this complexity by bundling together more than 30 different Kubernetes add-ons, as well as providing what it calls an “OSX like interface,” and today the project has open sourced a community edition under the Apache 2.0 license.
-- otomi.io 🌟
-- github: Otomi GitOps powered K8s app suite with developer self-service
+- thenewstack.io: Otomi Container Platform Offers an Integrated Kubernetes Bundle If you want to enjoy the benefits of Kubernetes, configuring and installing the software itself can be just the first of many deeply technical and oftentimes confusing steps. To simplify this, many major cloud providers offer managed Kubernetes services, but even then you may need to install secondary services to handle tasks such as tracing, logging, monitoring, identity access management, and so on. The Otomi Container Platform looks to address this complexity by bundling together more than 30 different Kubernetes add-ons, as well as providing what it calls an “OSX like interface,” and today the project has open sourced a community edition under the Apache 2.0 license.
+- otomi.io 🌟
+- github: Otomi GitOps powered K8s app suite with developer self-service
AWS EKS (Hosted/Managed Kubernetes on AWS)
-- community.aws/kubernetes Kubernetes at AWS! Welcome to the hub for all things Kubernetes at AWS.
-- udemy.com: amazon eks starter kubernetes on aws
-- eksctl: EKS installer
+- community.aws/kubernetes Kubernetes at AWS! Welcome to the hub for all things Kubernetes at AWS.
+- udemy.com: amazon eks starter kubernetes on aws
+- eksctl: EKS installer
-- Amazon EKS Security Best Practices
-- thenewstack.io: Install and Configure OpenEBS on Amazon Elastic Kubernetes Service
-- cloudonaut.io: Scaling Container Clusters on AWS: ECS and EKS 🌟
+- Amazon EKS Security Best Practices
+- thenewstack.io: Install and Configure OpenEBS on Amazon Elastic Kubernetes Service
+- cloudonaut.io: Scaling Container Clusters on AWS: ECS and EKS 🌟
- magalix.com: Deploying Kubernetes Cluster With EKS 🌟 Fargate Deployment vs. Linux Workload
- Deploying Infrastructure (FrontEnd + BackEnd) on AWS using Amazon EKS
-- EKS Service Accounts Explained In AWS you can assign IAM permissions to pods in your cluster. This article explains how it works.
+- EKS Service Accounts Explained In AWS you can assign IAM permissions to pods in your cluster. This article explains how it works.
- medium: Building the CI/CD of the Future, Creating the EKS Cluster 🌟
-- Announcing the AWS Controllers for Kubernetes Preview
-- daveops.xyz: Administrar usuarios en EKS
-- stacksimplify.com: AWS ALB Ingress Service - Basics 🌟
-- Kubernetes PVCs with EFS provisioner
-- Running spot instances effectively with Amazon EKS
+- Announcing the AWS Controllers for Kubernetes Preview
+- daveops.xyz: Administrar usuarios en EKS
+- stacksimplify.com: AWS ALB Ingress Service - Basics 🌟
+- Kubernetes PVCs with EFS provisioner
+- Running spot instances effectively with Amazon EKS
- medium: Designing a Kubernetes Cluster with Amazon EKS From Scratch 🌟
- en.sokube.ch: AWS + Kubernetes = AWS Elastic Kubernetes Service (EKS) 🌟
-- aws.amazon.com: Operating a multi-regional stateless application using Amazon EKS
-- clickittech.com: Amazon ECS vs EKS : The Best Container Orchestration Platform 🌟
+- aws.amazon.com: Operating a multi-regional stateless application using Amazon EKS
+- clickittech.com: Amazon ECS vs EKS : The Best Container Orchestration Platform 🌟
- POKE - Provision Opinionated Kubernetes on EKS Poke is infrastructure as software to provision EKS cluster in an opinianated way. Code is written in nodejs utilising pulumi framework. It is opinionated in such a way to improve security and simplicity.Consider this similar to terraform module. This package can be used to provision eks clusters declaratively with immutability and repeatability.
-- clickittech.com: Kubernetes Multi tenancy with Amazon EKS: Best practices and considerations
+- clickittech.com: Kubernetes Multi tenancy with Amazon EKS: Best practices and considerations
- medium: Run Kubernetes Production Environment on EC2 Spot Instances With Zero Downtime: A Complete Guide
- releaseops.io: Scaling Kubernetes Deployments in AWS with Container Insights Metrics
- medium: Create Kubernetes Cluster On AWS EKS Setup AWS credentials and install kubectl, eksctl on Ubuntu. Create Kubernetes cluster using eksctl.
-- Amazon EKS Price Reduction
-- cloudonaut.io: Scaling Container Clusters on AWS: ECS and EKS 🌟
-- Amazon EKS Best Practices Guide for Security 🌟
+- Amazon EKS Price Reduction
+- cloudonaut.io: Scaling Container Clusters on AWS: ECS and EKS 🌟
+- Amazon EKS Best Practices Guide for Security 🌟
- info.acloud.guru: Scaling the hottest app in tech on AWS and Kubernetes
- itnext.io: Using AWS NLB manually targeting an EKS Service exposing UDP traffic
-- Amazon EKS Now Supports EC2 Inf1 Instances
-- Create a pipeline with canary deployments for Amazon EKS with AWS App Mesh 🌟
-- linkedin.com: Amazon EKS Distro (EKS-D): The Kubernetes Distribution Used by Amazon EKS 🌟
+- Amazon EKS Now Supports EC2 Inf1 Instances
+- Create a pipeline with canary deployments for Amazon EKS with AWS App Mesh 🌟
+- linkedin.com: Amazon EKS Distro (EKS-D): The Kubernetes Distribution Used by Amazon EKS 🌟
- medium: How to Deploy an EKS stack in AWS?
-- aws.amazon.com: Fluent Bit Integration in CloudWatch Container Insights for EKS
-- Optimizing Your Kubernetes Clusters with Rancher and Amazon EKS 🌟
-- clickittech.com: Amazon ECS vs EKS : The Best Container Orchestration Platform 🌟
+- aws.amazon.com: Fluent Bit Integration in CloudWatch Container Insights for EKS
+- Optimizing Your Kubernetes Clusters with Rancher and Amazon EKS 🌟
+- clickittech.com: Amazon ECS vs EKS : The Best Container Orchestration Platform 🌟
- faun.pub: Upgrading and Scaling Kubernetes cluster in AWS
- youtube/StackSimplify: Kubernetes Deployments on AWS EKS | Amazon Elastic Kubernetes Service | Amazon EKS 🌟
-- cloudify.co: Simplifying Hybrid Cloud Deployments With AWS EKS And Outpost
-- eksworkshop.com 🌟
-- cast.ai: AWS EKS vs. ECS vs. Fargate: Where to manage your Kubernetes?
-- cast.ai: 8 best practices to reduce your AWS bill for Kubernetes
+- cloudify.co: Simplifying Hybrid Cloud Deployments With AWS EKS And Outpost
+- eksworkshop.com 🌟
+- cast.ai: AWS EKS vs. ECS vs. Fargate: Where to manage your Kubernetes?
+- cast.ai: 8 best practices to reduce your AWS bill for Kubernetes
- aws whitepapers: Architecting Amazon EKS for PCI DSS Compliance (pdf) 🌟🌟
- github.com/aws/eks-charts 🌟 Amazon EKS Helm chart repository
- AWS Load Balancer Controller 🌟
-- particule.io: Create Kubernetes federated clusters on AWS
-- aws.github.io/aws-eks-best-practices 🌟 The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS.
+- particule.io: Create Kubernetes federated clusters on AWS
+- aws.github.io/aws-eks-best-practices 🌟 The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS.
- betterprogramming.pub: Amazon EKS Is Eating My IPs! Understand how AWS EKS manages IP addresses and what you can do about it
- engineering.salesforce.com: Optimizing EKS networking for scale
- blog.usejournal.com: Spice up Your Kubernetes Environment with AWS Lambda 🌟 In this blog you will learn a simple yet effective and secure way to integrate AWS Lambda with an existing Kubernetes environment without codes changes.
- azon EKS Pod Identity Webhook Amazon EKS Pod Identity Webhook
-- Chaos engineering on Amazon EKS using AWS Fault Injection Simulator
+- Chaos engineering on Amazon EKS using AWS Fault Injection Simulator
- pages.awscloud.com: GitOps on AWS for High Performing Team Operations (eBook) Realize the full value of Kubernetes by leveraging GitOps to manage operational complexity
-- thenewstack.io: Deploy Gremlin to Amazon EKS Using AWS CloudFormation
-- aws.amazon.com: Easy as one-two-three policy management with Kyverno on Amazon EKS 🌟
-- nextlinklabs.com: Handling Auth in EKS Clusters: Setting Up Kubernetes User Access Using AWS IAM
+- thenewstack.io: Deploy Gremlin to Amazon EKS Using AWS CloudFormation
+- aws.amazon.com: Easy as one-two-three policy management with Kyverno on Amazon EKS 🌟
+- nextlinklabs.com: Handling Auth in EKS Clusters: Setting Up Kubernetes User Access Using AWS IAM
- neal-davis.medium.com: ECS vs EC2 vs Lambda 🌟
- faun.pub: Kubernetes Multi-tenancy with Amazon EKS: Best practices and considerations 🌟
-- nginx.com: Deploying NGINX Ingress Controller on Amazon EKS: How We Tested
-- hackerxone.com: 13 Steps Guide to Create Kubernetes Cluster on AWS
-- hackerxone.com: Steps to Create Amazon EKS node group on Amazon web Service (AWS)
+- nginx.com: Deploying NGINX Ingress Controller on Amazon EKS: How We Tested
+- hackerxone.com: 13 Steps Guide to Create Kubernetes Cluster on AWS
+- hackerxone.com: Steps to Create Amazon EKS node group on Amazon web Service (AWS)
- dev.to: EKS IAM Deep Dive 🌟
- aws.plainenglish.io: 6 Tips to Improve Availability with AWS Load Balancers and Kubernetes
-- aws.amazon.com: Using Prometheus Adapter to autoscale applications running on Amazon EKS
-- youtube: CloudGeeks - Terraform Eks Kubernetes RDS Secrets Manager Eksctl Cloudformation ALB Controller (Redmine App) - quickbooks2018/eks-redmin
-- aws.amazon.com: Kubernetes Ingress with AWS ALB Ingress Controller
+- aws.amazon.com: Using Prometheus Adapter to autoscale applications running on Amazon EKS
+- youtube: CloudGeeks - Terraform Eks Kubernetes RDS Secrets Manager Eksctl Cloudformation ALB Controller (Redmine App) - quickbooks2018/eks-redmin
+- aws.amazon.com: Kubernetes Ingress with AWS ALB Ingress Controller
- aws/aws-node-termination-handler 🌟 Gracefully handle EC2 instance shutdown within Kubernetes
-- howtoforge.com: How to Create a Kubernetes Cluster with AWS CLI
+- howtoforge.com: How to Create a Kubernetes Cluster with AWS CLI
- blog.searce.com: Optimise cost for AWS EKS cluster using Spotinst 🌟
-- thenewstack.io: How We Built Preview Environments on Kubernetes and AWS
+- thenewstack.io: How We Built Preview Environments on Kubernetes and AWS
- aws.amazon.com: Mount Amazon EFS file systems cross-account from Amazon EKS, and utilize AWS Organizations more effectively
-- Onfido’s Journey to a Multi-Cluster Amazon EKS Architecture In this article, you will learn how moving to an active/active cluster architecture has allowed Onfido to shift traffic away from an Amazon EKS cluster when performing infrastructure maintenance.
+- Onfido’s Journey to a Multi-Cluster Amazon EKS Architecture In this article, you will learn how moving to an active/active cluster architecture has allowed Onfido to shift traffic away from an Amazon EKS cluster when performing infrastructure maintenance.
- medium.com/@abhinav.ittekot: Granting IAM permissions to pods in EKS using OIDC
- medium.com/@ishana98dadhich: Integrating AWS Secret Manager with EKS and use Secrets inside the Pods: Part-1 This blog provides you enough details on how you can use secrets (managed by AWS Secrets Manager) inside AWS EKS pods.
- medium.com/@radha.sable25: Enabling IAM users/roles Access on Amazon EKS cluster
- aws.amazon.com: Continuous Delivery of Amazon EKS Clusters Using AWS CDK and CDK Pipelines
- medium.com/avmconsulting-blog: Installing Vault On EKS With TLS And Persistent Storage
- dzone.com: How to Use AWS IAM Role on AWS EKS PODs 🌟 A native-AWS way to attach an IAM role into the Kubernetes POD, without third-party software, reducing latency and improving your EKS security.
-- aws.amazon.com: Troubleshooting Amazon EKS API servers with Prometheus
+- aws.amazon.com: Troubleshooting Amazon EKS API servers with Prometheus
- AWS Controllers for Kubernetes (ACK) 🌟 AWS Controllers for Kubernetes (ACK) lets you define & use AWS service resources directly from Kubernetes. With ACK, you can take advantage of AWS managed services for your applications without needing to define resources outside of the cluster.
- itnext.io: Deploy Kubernetes (K8s) on Amazon AWS using mixed on-demand and spot instances 🌟
- github.com/awslabs: Kubernetes Migration Factory User Guide 🌟 Kubernetes Migrations Factory (KMF) is a tool developed for migrating docker containers to Amazon EKS. The Kubernetes Migration Factory solution is an orchestration platform for migrating containers to Amazon EKS at scale.
@@ -8109,42 +8109,42 @@
- akintola-lonlon.medium.com: AWS Kubernetes: The #1 Rule You Need To Master Before Going To Production. This is the most important thing to consider before going to production on EKS.
- amod-kadam.medium.com: Are there two Load Balancer Controllers with EKS? 🌟 In this article, you will learn how AWS provision different types of load balancers (Classic vs Network) to expose your applications depending on the annotations that you use.
-- aws.amazon.com: Streaming Kubernetes Events in Slack This post describes how you can send events from your Kubernetes cluster to a Slack channel using BotKube, a messaging bot for monitoring and debugging Kubernetes clusters.
+- aws.amazon.com: Streaming Kubernetes Events in Slack This post describes how you can send events from your Kubernetes cluster to a Slack channel using BotKube, a messaging bot for monitoring and debugging Kubernetes clusters.
- joachim8675309.medium.com: ExternalDNS with EKS and Route53 After deploying a web app on Kubernetes, you might need to update the DNS records. ExternalDNS can automate this process and this tutorial demonstrates how to set up and configure this on Amazon EKS using Amazon Route 53 DNS zones.
-- aws-quickstart/cdk-eks-blueprints: Amazon EKS Blueprints for CDK This repository contains the source code for the eks-blueprints NPM module that can be used to configure and manage complete EKS clusters that are fully bootstrapped with the operational software that is needed to deploy and operate workloads
+- aws-quickstart/cdk-eks-blueprints: Amazon EKS Blueprints for CDK This repository contains the source code for the eks-blueprints NPM module that can be used to configure and manage complete EKS clusters that are fully bootstrapped with the operational software that is needed to deploy and operate workloads
- dev.to: One technique to save your AWS EKS IP addresses 10x To increase the number of available IP addresses in your EKS cluster you can:
- Assign address prefixes to your ENI and
- Enable the CNI custom networking feature
-- aws.amazon.com: Autoscaling EKS on Fargate with custom metrics What follows is a step-by-step guide on configuring the Horizontal Pod Autoscaler with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate.
+- aws.amazon.com: Autoscaling EKS on Fargate with custom metrics What follows is a step-by-step guide on configuring the Horizontal Pod Autoscaler with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate.
- Autoscaling is an approach to automatically scale up or down workloads based on the resource usage. In Kubernetes, the Horizontal Pod Autoscaler (HPA) can scale pods based on observed CPU utilization and memory usage. Starting with Kubernetes 1.7, an aggregation layer was introduced that allows third-party applications to extend the Kubernetes API by registering themselves as API add-ons. Such an add-on can implement the Custom Metrics API and enable HPA access to arbitrary metrics. What follows is a step-by-step guide on configuring HPA with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate.
- opssorry.substack.com: GitOps: A Simple Approach to using AWS Secrets Manager with Kubernetes 🌟
-- aws.github.io/aws-eks-best-practices: Amazon EKS Best Practices Guides 🌟🌟🌟 Welcome to the EKS Best Practices Guides. The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS. We elected to publish this guidance to GitHub so we could iterate quickly, provide timely and effective recommendations for variety of concerns, and easily incorporate suggestions from the broader community.
-- Amazon EKS Best Practices Guide for Networking Intro to Amazon VPC Container Network Interface (VPC CNI) in the context of Kubernetes cluster networking. VPC CNI is the default networking plugin supported by EKS. The VPC CNI is highly configurable to support different use cases.
+- aws.github.io/aws-eks-best-practices: Amazon EKS Best Practices Guides 🌟🌟🌟 Welcome to the EKS Best Practices Guides. The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS. We elected to publish this guidance to GitHub so we could iterate quickly, provide timely and effective recommendations for variety of concerns, and easily incorporate suggestions from the broader community.
+- Amazon EKS Best Practices Guide for Networking Intro to Amazon VPC Container Network Interface (VPC CNI) in the context of Kubernetes cluster networking. VPC CNI is the default networking plugin supported by EKS. The VPC CNI is highly configurable to support different use cases.
- medium.com/@chandranathmondal: Self-service Amazon EKS Cluster provisioning with Kubernetes configuration applied 🌟
-- AWS and Kubecost collaborate to deliver cost monitoring for EKS customers
+- AWS and Kubecost collaborate to deliver cost monitoring for EKS customers
- eng.grip.security: Enabling AWS IAM Group Access to an EKS Cluster Using RBAC There is no standardized method for providing IAM group access to an EKS cluster or namespace. In this article, you will learn how you can use an IAM role to authenticate the user group automatically and transparently when kubectl is being used.
- medium.com/@andriikrymus: DNS config for EKS Elastic Kubernetes Service provide coredns add-on for k8s. Unfortunately, this add-on lucks of configuration options (for example, nodeSelector). In this article, you will learn how to patch it, and configure it the way you want it.
-- cast.ai: EKS Security Checklist: 10 Best Practices for a Secure Cluster
+- cast.ai: EKS Security Checklist: 10 Best Practices for a Secure Cluster
- github.com/kubernetes-sigs/aws-load-balancer-controller AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster. It satisfies:
- Ingress resources by provisioning Application Load Balancers
- Service resources by provisioning Network Load Balancers
-- thenewstack.io: Amazon Web Services Gears Elastic Kubernetes Service for Batch Work AWS Batch is ideal for developers looking for a more simplified workflow when it comes to managing Kubernetes clusters and pods to use with their batch jobs.
+- thenewstack.io: Amazon Web Services Gears Elastic Kubernetes Service for Batch Work AWS Batch is ideal for developers looking for a more simplified workflow when it comes to managing Kubernetes clusters and pods to use with their batch jobs.
- silvr.medium.com: Using Kyverno To Enforce AWS Load Balancer Annotations For Centralized Logging To S3 In this tutorial, you’ll learn how to use Kyverno to automatically configure annotations that enable access logs for an AWS Network Load Balancer (NLB) to be forwarded to an S3 bucket for a service of type
LoadBalancer.
- blog.jimmyray.io: Kubernetes Workload Identity with AWS SDK for Go v2 Using AWS SDK for Go v2 and AWS IAM Roles for Service Accounts. In this article, you’ll learn how to use the AWS SDK for Go v2 and AWS IAM Roles for Service Accounts to grant permissions to access AWS services from wuthin Kubernetes
-- github.com/rebataur/djkube Tool for Django Developers to setup full stack EKS Kubernetes with all necessary tools including DevSecOps in 40 minutes. If you are a Python Django developer then djkube provides you with best user experience in easily running your full-stack Django apps on Kubernetes in AWS with just a few clicks.
-- aws.amazon.com: Troubleshooting Amazon EKS API servers with Prometheus and Grafana
+- github.com/rebataur/djkube Tool for Django Developers to setup full stack EKS Kubernetes with all necessary tools including DevSecOps in 40 minutes. If you are a Python Django developer then djkube provides you with best user experience in easily running your full-stack Django apps on Kubernetes in AWS with just a few clicks.
+- aws.amazon.com: Troubleshooting Amazon EKS API servers with Prometheus and Grafana
- medium.com/geekculture: EKS — Kubernetes — Not Ready nodes Today I’m going to talk about an issue that I encounter a couple of days ago while working on EKS 1.21.
- faun.pub: How to access AWS services from EKS Solutions to access AWS APIs from Kubernetes
-- aws.amazon.com: Persistent storage for Kubernetes
-- aws.amazon.com: Machine Learning with Kubeflow on Amazon EKS with Amazon EFS
+- aws.amazon.com: Persistent storage for Kubernetes
+- aws.amazon.com: Machine Learning with Kubeflow on Amazon EKS with Amazon EFS
- faun.pub: AWS EKS: The Ultimate Guide To Deploy AWS Load Balancer Controller add-on In this article, you’ll learn how to set up an Ingress Controller on EKS in 5 steps:
- Creating a cluster with EKSctl
- Creating the IAM OIDC provider
@@ -8161,14 +8161,14 @@
- towardsaws.com: Autoscale Kubernetes Metrics Server on Amazon EKS
- aws-samples/hardeneks Runs checks to see if an EKS cluster follows EKS Best Practices.
- faun.pub: Analyze AWS EKS Audit logs with Falco
-- docs.aws.amazon.com: Managing Amazon EKS add-ons
+- docs.aws.amazon.com: Managing Amazon EKS add-ons
- docs.aws.amazon.com: Access container applications privately on Amazon EKS using AWS PrivateLink and a Network Load Balancer AWS Prescriptive Guidance includes patterns for EKS.
-- aws.amazon.com: Addressing latency and data transfer costs on EKS using Istio In this blog, you will learn how to use Istio topology-aware routing to reduce latency and data transfer costs between EKS nodes deployed in different Availability Zones
-- aws.amazon.com: Addressing IPv4 address exhaustion in Amazon EKS clusters using private NAT gateways This post highlights the advantages of implementing a network architecture with a private NAT Gateway to deploy an Amazon EKS cluster. This enables communication across Amazon EKS clusters deployed to VPCs with overlapping CIDRs.
+- aws.amazon.com: Addressing latency and data transfer costs on EKS using Istio In this blog, you will learn how to use Istio topology-aware routing to reduce latency and data transfer costs between EKS nodes deployed in different Availability Zones
+- aws.amazon.com: Addressing IPv4 address exhaustion in Amazon EKS clusters using private NAT gateways This post highlights the advantages of implementing a network architecture with a private NAT Gateway to deploy an Amazon EKS cluster. This enables communication across Amazon EKS clusters deployed to VPCs with overlapping CIDRs.
- hardiks.medium.com: Where should you manage your Kubernetes in 2023? Amazon ECS or EKS
- awstip.com: Amazon Elastic Kubernetes Service (Amazon EKS) — The Only Resource Hub You Ever Need In this article, you will find a collection of links to learn and master Amazon EKS
- awstip.com: Working The Amazon EKS Immersion Workshop — Chapter 1 — Deploying A Microservices Application In A Kubernetes Cluster This 12-part series covers how to provision an EKS cluster, deploy apps, and route traffic into the cluster using Ingress and the AWS Load Balancer controller
-- Understanding and Cost Optimizing Amazon EKS Control Plane Logs
+- Understanding and Cost Optimizing Amazon EKS Control Plane Logs
- itnext.io: Top 10 Ways to Protect EKS Workloads from Ransomware Here are the top 10 things you should focus on to protect EKS workloads against ransomware and all intrusions
- blog.antoinechoula.ga: Native EKS Ingress with AWS Load Balancer Controller This tutorial will teach you how to install and configure the AWS Load Balancer Controller using Terraform and Helm. You will also learn how to manage multiple ingresses and secure the traffic with SSL/TLS
- devopslearning.medium.com: Lesson learned while scaling Kubernetes cluster to 1000 pods in AWS EKS In this article, you will follow Prashant’s journey in scaling EKS to 1000+ pods and learn how to overcome these challenges:
@@ -8178,53 +8178,53 @@
- Control plane performance issues
-- Scaling Amazon EKS and Cassandra Beyond 1,000 Nodes This post described a concrete experiment to prove k8ssandra scalability on Amazon EKS. You will also find general performance and scaling configurations of Amazon EKS that enable customers to scale workloads while maintaining linear performance.
-- sitepoint.com: Getting Started With Kubernetes on AWS Tutorial (2023 Update)
+- Scaling Amazon EKS and Cassandra Beyond 1,000 Nodes This post described a concrete experiment to prove k8ssandra scalability on Amazon EKS. You will also find general performance and scaling configurations of Amazon EKS that enable customers to scale workloads while maintaining linear performance.
+- sitepoint.com: Getting Started With Kubernetes on AWS Tutorial (2023 Update)
- medium.com: Saving costs in Google Kubernetes Engine using Spot VMs
- medium.com/@benjamin.christmann_12432: Setting up your first EKS cluster on AWS: some practical tips
- blog.ratnopamc.com: Reduce cross-AZ traffic costs on EKS using topology aware hints Topology Aware Hints is a new feature in EKS that reduces data transfer costs by keeping traffic within the same availability zone. It uses Pod Topology Spread Constraints to spread Pods evenly onto multiple node topologies
- itnext.io: Running resilient workloads in EKS using Spot instances In this article, you will learn how giffgaff run all of their applications in an EKS cluster using 100% spot instances and what additional safeguards they put in place to improve reliability
-- Simplifying Amazon EBS volume migration and modification on Kubernetes using the EBS CSI Driver
-- Eliminate Kubernetes node scaling lag with pod priority and over-provisioning In this post, you’ll learn how to over-provision the cluster worker nodes using dummy pods for quicker scaling. The dummy pods contain a pause container that is scheduled by the scheduler according to pod specifications’ placements and CPU/memory.
+- Simplifying Amazon EBS volume migration and modification on Kubernetes using the EBS CSI Driver
+- Eliminate Kubernetes node scaling lag with pod priority and over-provisioning In this post, you’ll learn how to over-provision the cluster worker nodes using dummy pods for quicker scaling. The dummy pods contain a pause container that is scheduled by the scheduler according to pod specifications’ placements and CPU/memory.
- medium.com/@danielresponda: Testing Spot Reclamation Mechanisms with AWS Node Termination Handler and Kubernetes Autoscaler What happens if a spot instance is reclaimed, but no more capacity is available in the cluster? In this article, you will learn how to use the AWS Node Termination Handler with Kubernetes Autoscaler to handle spot reclamations seamlessly
- Amazon EKS introduces EKS Pod Identity
- itnext.io: AWS Elastic Kubernetes Service: RBAC Authorization via AWS IAM and RBAC Groups
- medium.com/@leocherian: Simple CDK app to create EKS Cluster
- blog.clouddrove.com: AWS EKS Blue/Green Deployment with Best Practices
-- devoriales.com: AWS EKS Secret Encryption: Securing Your EKS Secrets At Rest with AWS KMS
+- devoriales.com: AWS EKS Secret Encryption: Securing Your EKS Secrets At Rest with AWS KMS
- blog.stackademic.com: Create the AWS EKS Cluster with a Managed Node Group Using Custom Launch Templates
- blog.devops.dev: HACKING KUBERNETES in AWS In this article, you’ll learn how to secure EKS by intentionally attaching the wrong policies to pods and hacking the cluster. You will misconfigure AWS Identity and Access Management (IAM) roles for the service accounts (IRSA) feature
- rahulbhatia1998.medium.com: Designing A Multi-Region Kubernetes Cluster For Disaster Recovery On AWS EKS
- towardsaws.com: From Scratch to Production: Deploying EKS Clusters and Applications with CI/CD using Jenkins and Terraform
- awstip.com: Per-pod PIDs limit on EKS
-- aws.amazon.com: Amazon EKS announces native support for autoscaling CoreDNS Pods
+- aws.amazon.com: Amazon EKS announces native support for autoscaling CoreDNS Pods
- medium.com/ekino-france: Addressing private IPv4 shortage: 5 Strategies for Amazon EKS This article explores 5 strategies for addressing private IPv4 shortage in Amazon EKS. Strategies include tweaking VPC CNI settings, using subnet CIDR reservation, custom networking with internal SNAT, private NAT gateways, and transitioning to IPv6
-- aws.amazon.com: Start Pods faster by prefetching images
+- aws.amazon.com: Start Pods faster by prefetching images
EKS Upgrades
- Updating a managed node group amazon eks managed node groups now supports parallel node upgrades
-- aws.amazon.com: Planning Kubernetes Upgrades with Amazon EKS
+- aws.amazon.com: Planning Kubernetes Upgrades with Amazon EKS
- repost.aws: How do I plan an upgrade strategy for an Amazon EKS cluster?
- medium.com/scout24-engineering: How did we upgrade our EKS clusters from 1.15 to 1.22 without K8s knowledge?
- marcincuber.medium.com: Amazon EKS Upgrade Journey From 1.24 to 1.25
EKS and IaC with Crossplane
-- aws.amazon.com: GitOps model for provisioning and bootstrapping Amazon EKS clusters using Crossplane and Argo CD
+- aws.amazon.com: GitOps model for provisioning and bootstrapping Amazon EKS clusters using Crossplane and Argo CD
- nivogt.medium.com: [IaC] Continuous Delivery with Crossplane and ArgoCD : how to automate the creation of AWS EKS clusters
AWS EKS Vs ECS Vs Fargate
-- cloudify.co: AWS EKS Vs. ECS Vs. Fargate: The Breakdown
+- cloudify.co: AWS EKS Vs. ECS Vs. Fargate: The Breakdown
EKS Anywhere (on premises)
- EKS Anywhere: github.com/aws/eks-anywhere Run Amazon EKS on your own infrastructure
-- aws.amazon.com: Amazon EKS Anywhere – Now Generally Available to Create and Manage Kubernetes Clusters on Premises
-- solo.io: Connect Your Services Seamlessly with Amazon EKS Anywhere and Istio
-- anywhere.eks.amazonaws.com: Compare EKS Anywhere and EKS
-- aws.amazon.com: Getting started with Amazon EKS Anywhere
+- aws.amazon.com: Amazon EKS Anywhere – Now Generally Available to Create and Manage Kubernetes Clusters on Premises
+- solo.io: Connect Your Services Seamlessly with Amazon EKS Anywhere and Istio
+- anywhere.eks.amazonaws.com: Compare EKS Anywhere and EKS
+- aws.amazon.com: Getting started with Amazon EKS Anywhere
- gokulchandrapr.medium.com: Amazon EKS Anywhere & EKS Connector
- ambar-thecloudgarage.medium.com: EKS Anywhere., decoding the architecture. In this article, you will take a deeper look into the EKS Anywhere architecture as well as compare it with EKS Distro. Then, you will discuss the different type of installations:
- Standalone clusters
@@ -8232,7 +8232,7 @@
- blog.techknowtrendz.com: Taking Amazon EKS Anywhere for a spin Bringing EKS to a datacenter near you
-- aws.amazon.com: Blue/Green Kubernetes upgrades for Amazon EKS Anywhere using Flux
+- aws.amazon.com: Blue/Green Kubernetes upgrades for Amazon EKS Anywhere using Flux
EKS Distro (EKS-D)
@@ -8245,12 +8245,12 @@
AKS Azure Kubernetes Service
- learn.microsoft.com: Introduction to Kubernetes on Azure
-- azure.github.io/AKS-Construction 🌟 AKS Construction Helper
+- azure.github.io/AKS-Construction 🌟 AKS Construction Helper
- youtube: The AKS Community 🌟
-- the-aks-checklist.com: The Azure Kubernetes Service Checklist 🌟🌟🌟 This checklist contains a large set of best practices and some of them may not be relevant to your context and thus the rating may be incorrect in your case. Please choose and apply them wisely.
+- the-aks-checklist.com: The Azure Kubernetes Service Checklist 🌟🌟🌟 This checklist contains a large set of best practices and some of them may not be relevant to your context and thus the rating may be incorrect in your case. Please choose and apply them wisely.
- Azure Updates AKS 🌟
-- docs.microsoft.com: Baseline architecture for an Azure Kubernetes Service (AKS) cluster 🌟 In this reference architecture, you’ll build a baseline infrastructure that deploys an AKS cluster. The article includes recommendations for networking, security, identity, management, and monitoring.
-- docs.microsoft.com: Microservices architecture on Azure Kubernetes Service (AKS) 🌟 This reference architecture shows a microservices application deployed to Azure Kubernetes Service (AKS). It describes a basic AKS configuration that can be the starting point for most deployments. The architecture consists of the following components:
+- docs.microsoft.com: Baseline architecture for an Azure Kubernetes Service (AKS) cluster 🌟 In this reference architecture, you’ll build a baseline infrastructure that deploys an AKS cluster. The article includes recommendations for networking, security, identity, management, and monitoring.
+- docs.microsoft.com: Microservices architecture on Azure Kubernetes Service (AKS) 🌟 This reference architecture shows a microservices application deployed to Azure Kubernetes Service (AKS). It describes a basic AKS configuration that can be the starting point for most deployments. The architecture consists of the following components:
- Azure Kubernetes Service (AKS)
- Kubernetes cluster
- Virtual network
@@ -8264,80 +8264,80 @@
- Azure Monitor
-- docs.microsoft.com: Use kubenet networking with your own IP address ranges in Azure Kubernetes Service (AKS) 🌟
-- docs.microsoft.com: Configure Azure CNI networking in Azure Kubernetes Service (AKS)
-- trstringer.com: Run Kubernetes Pods on Specific VM Types in AKS
-- docs.microsoft.com: AKS-managed Azure Active Directory integration
-- build5nines.com: Terraform: Create an AKS Cluster 🌟
+- docs.microsoft.com: Use kubenet networking with your own IP address ranges in Azure Kubernetes Service (AKS) 🌟
+- docs.microsoft.com: Configure Azure CNI networking in Azure Kubernetes Service (AKS)
+- trstringer.com: Run Kubernetes Pods on Specific VM Types in AKS
+- docs.microsoft.com: AKS-managed Azure Active Directory integration
+- build5nines.com: Terraform: Create an AKS Cluster 🌟
- github.com: AKS: Use AAD identity for pods and make your SecOps happy
-- docs.microsoft.com: Microservices architecture on Azure Kubernetes Service (AKS) 🌟
-- techcommunity.microsoft.com: Containerize and migrate applications to AKS with the Azure Migrate’s new App Containerization tool
+- docs.microsoft.com: Microservices architecture on Azure Kubernetes Service (AKS) 🌟
+- techcommunity.microsoft.com: Containerize and migrate applications to AKS with the Azure Migrate’s new App Containerization tool
- mehmetozkaya.medium.com: Deploying .Net Microservices to Azure Kubernetes Services(AKS) and Automating with Azure DevOps
- faun.pub: How to implement Azure Kubernetes Service (AKS) in Cloud?
-- adamrushuk.github.io: Increasing the volumeClaimTemplates Disk Size in a Statefulset on AKS
+- adamrushuk.github.io: Increasing the volumeClaimTemplates Disk Size in a Statefulset on AKS
- nillsf.com: Running Windows containers on the Azure Kubernetes Service (AKS)
- itnext.io: Running Your Microservices Securely on AKS
-- docs.microsoft.com: Create an HTTPS ingress controller on Azure Kubernetes Service (AKS)
-- blog.nillsf.com: Customize core dump in Azure Kubernetes
+- docs.microsoft.com: Create an HTTPS ingress controller on Azure Kubernetes Service (AKS)
+- blog.nillsf.com: Customize core dump in Azure Kubernetes
- medium: Secure your Microservices on AKS — Part 1 🌟
-- zartis.com: How To Save A Fortune On Azure Kubernetes Service
+- zartis.com: How To Save A Fortune On Azure Kubernetes Service
- itnext.io: AKS Performance: Limit Ranges Limit Ranges can be used to fine tune your resource consumption by limiting your min/max requests/limits in namespaces.
- itnext.io: Kubernetes Ingress on Azure using the Application Gateway How to expose multiple services on a single host
- joachim8675309.medium.com: AKS with GRPC and ingress-nginx Using GRPC with ingress-nginx add-on with AKS
-- thenewstack.io: Microsoft’s Practical Approach to Kubernetes Management
+- thenewstack.io: Microsoft’s Practical Approach to Kubernetes Management
- medium: AKS with Calico Network Policies Using Calico Network Policy with Azure Kubernetes Server
- itnext.io: Network Isolated AKS — Part 1: Controlling network traffic
-- thenewstack.io: Turbocharging AKS Networking with Calico eBPF
-- carlos.mendible.com: AKS: Persistent Volume Claim with an Azure File Storage protected with a Private Endpoint
+- thenewstack.io: Turbocharging AKS Networking with Calico eBPF
+- carlos.mendible.com: AKS: Persistent Volume Claim with an Azure File Storage protected with a Private Endpoint
- joachim8675309.medium.com: AKS with Istio Service Mesh Securing traffic with Istio service mesh on AKS
- optisolbusiness.com: Implementing Microservices Architecture in AKS
- blog.kasten.io: AKS and Storage: How to Design Storage for Cloud Native Applications
- blog.kasten.io: AKS and Storage: Performance Differences Among K8s Storage Services
- medium: AKS — different load balancing options. When to use what?
- medium: Going multicloud with kubernetes and Azure Front Door Kubernetes/AKS/GKE/MultiCloud/Azure Front Door
-- docs.microsoft.com: Best practices for cluster isolation in Azure Kubernetes Service (AKS)
+- docs.microsoft.com: Best practices for cluster isolation in Azure Kubernetes Service (AKS)
- docs.cloudblue.com: Deploying an AKS Cluster with Custom IP Ranges (ARM template)
-- k21academy.com: Azure Kubernetes Service & Azure Container Instances For Beginners 🌟
-- azurecloudai.blog: Deploy Azure Kubernetes Service (AKS) to a preexisting VNET
-- tigera.io: Turbocharging AKS networking with Calico eBPF
-- akhilsharma.work: How to list Azure RBAC Roles to Secure AKS Clusters
-- tigera.io: Calico WireGuard support with Azure CNI Last June, Tigera announced a first for Kubernetes: supporting open-source WireGuard for encrypting data in transit within your cluster. We never like to sit still, so we have been working hard on some exciting new features for this technology, the first of which is support for WireGuard on AKS using the Azure CNI.
-- docs.microsoft.com: Use dual-stack (IPv4 and IPv6) kubenet networking in Azure Kubernetes Service (AKS) (Preview)
-- logz.io: Collecting Metrics from Windows Kubernetes Nodes in AKS 🌟
+- k21academy.com: Azure Kubernetes Service & Azure Container Instances For Beginners 🌟
+- azurecloudai.blog: Deploy Azure Kubernetes Service (AKS) to a preexisting VNET
+- tigera.io: Turbocharging AKS networking with Calico eBPF
+- akhilsharma.work: How to list Azure RBAC Roles to Secure AKS Clusters
+- tigera.io: Calico WireGuard support with Azure CNI Last June, Tigera announced a first for Kubernetes: supporting open-source WireGuard for encrypting data in transit within your cluster. We never like to sit still, so we have been working hard on some exciting new features for this technology, the first of which is support for WireGuard on AKS using the Azure CNI.
+- docs.microsoft.com: Use dual-stack (IPv4 and IPv6) kubenet networking in Azure Kubernetes Service (AKS) (Preview)
+- logz.io: Collecting Metrics from Windows Kubernetes Nodes in AKS 🌟
- dev.to: Moving Azure Functions from AKS to Container Apps
-- techcommunity.microsoft.com: Azure Kubernetes Service and Azure Container Registry Service on Azure Stack Hub
+- techcommunity.microsoft.com: Azure Kubernetes Service and Azure Container Registry Service on Azure Stack Hub
- dev.to: Getting started with Windows Containers on Azure Kubernetes Service Windows support has finally arrived in Kubernetes and AKS. Learn how to migrate your workloads and what pitfalls to avoid in this short and sweet introduction to Windows Containers.
- mehighlow.medium.com: Hardened-AKS/Secrets Commonly, an application requires access to data and, usually, such access must be restricted. So, you need to provide your pod/deployment/replicaSet/DaemonSet with secrets. Learn how you can do so in AKS
-- returngis.net: Desescalar nodos de AKS apagando las máquinas en lugar de eliminarlas
+- returngis.net: Desescalar nodos de AKS apagando las máquinas en lugar de eliminarlas
- dev.to/javiermarasco: HTTPs with Ingress controller, cert-manager and DuckDNS (in AKS/Kubernetes)
- dev.to: Implement Azure AD Workload Identity on AKS with terraform Azure AD workload identity is designed to associate a pod with an identity in Azure Active Directory so that you can grant permissions to access another resource (i.e. a storage account or an Azure SQL Database)
- medium.com/kocsistem: Installation Internal Nginx Ingress for a Private AKS Cluster
-- pixelrobots.co.uk: Bring your own Container Network Interface (CNI) plugin with Azure Kubernetes Service (AKS) (PREVIEW) AKS has only officially supported two CNI’s: Kubenet and Azure CNI. In this blog post, you will learn how to create an AKS cluster with no CNI and then deploy cilium.
+- pixelrobots.co.uk: Bring your own Container Network Interface (CNI) plugin with Azure Kubernetes Service (AKS) (PREVIEW) AKS has only officially supported two CNI’s: Kubenet and Azure CNI. In this blog post, you will learn how to create an AKS cluster with no CNI and then deploy cilium.
- joachim8675309.medium.com: ExternalDNS with AKS & Azure DNS ExternalDNS with kubelet identity to access to Azure DNS. After deploying a public facing web application on Kubernetes, you need to update DNS records so that traffic can reach the server. ExternalDNS can automate this process during deployment stage of the web application, so there is no need for extra configuration outside of Kubernetes.
- medium.com/dzerolabs: Accessing Azure Key Vault Secrets in Azure Kubernetes with Secrets Store CSI Driver 🌟 A little bit of standardization goes a long way. Much better than documenting steps that can soon become outdated. Azure Key Vault Provider for Secrets Store CSI Driver maps a Kubernetes resource called SecretProviderClass to an Azure Key Vault and lets you select which secrets, keys, and/or certificates you’d like to expose.
-- buchatech.com/2022: A Guide to Navigating the AKS Enterprise Documentation & Scripts 🌟🌟 This blog’s goal is to guide you through the AKS Enterprise Docs as you architect, deploy, and operate your AKS.
-- docs.microsoft.com: Start and stop an Azure Kubernetes Service (AKS) node pool 🌟 Your AKS workloads may not need to run continuously, for example a development cluster that has node pools running specific workloads. To optimize your costs, you can completely turn off (stop) your node pools in your AKS cluster, allowing you to save on compute costs.
+- buchatech.com/2022: A Guide to Navigating the AKS Enterprise Documentation & Scripts 🌟🌟 This blog’s goal is to guide you through the AKS Enterprise Docs as you architect, deploy, and operate your AKS.
+- docs.microsoft.com: Start and stop an Azure Kubernetes Service (AKS) node pool 🌟 Your AKS workloads may not need to run continuously, for example a development cluster that has node pools running specific workloads. To optimize your costs, you can completely turn off (stop) your node pools in your AKS cluster, allowing you to save on compute costs.
- dev.to/thenjdevopsguy: Monitoring AKS With Prometheus and Grafana 🌟
-- techcommunity.microsoft.com: Azure Kubernetes Service Microsoft Ignite announcements
-- isovalent.com: Announcing Azure CNI Powered by Cilium
+- techcommunity.microsoft.com: Azure Kubernetes Service Microsoft Ignite announcements
+- isovalent.com: Announcing Azure CNI Powered by Cilium
- dev.to: Access Secrets in AKV using Managed identities for AKS 🌟 The purpose of this post is to show you how to access secrets from AKS cluster that are stored in Azure Key Vault.
-- blog.baeke.info: AKS Workload Identity Revisited
-- azure.microsoft.com: Private preview: Azure Kubernetes Service (AKS) Backup 🌟
+- blog.baeke.info: AKS Workload Identity Revisited
+- azure.microsoft.com: Private preview: Azure Kubernetes Service (AKS) Backup 🌟
- medium.com/@gjoshevski: Reduce the cost of running AKS cluster by leveraging Azure Spot VMs| 70% and more 🌟🌟
- community.ops.io: One day I woke up to a crashed AKS cluster and this is what I did to get it back to life One day, Javier found a crashed AKS cluster with three nodes stopped and all pods in the “Terminating” state. Learn how Javier debugged the cluster and brought it back to life.
-- Using CDK to perform continuous deployments in multi-region Kubernetes environments This post demonstrated how to create a continuous deployment pipeline to deploy applications in multiple EKS clusters running in different regions. The accompanying CDK code creates EKS clusters and the CI/CD stack to continuously deploy applications
+- Using CDK to perform continuous deployments in multi-region Kubernetes environments This post demonstrated how to create a continuous deployment pipeline to deploy applications in multiple EKS clusters running in different regions. The accompanying CDK code creates EKS clusters and the CI/CD stack to continuously deploy applications
- blog.coffeeapplied.com: Securing AKS in peered virtual networks using only network security groups (NSGs) When you use peering in AKS, with the “default” AKS deployment, your complete cluster, including all pods, is completely open and addressable from your complete peered network. Learn how to fix in this article.
- medium.com/@vamsi.lakshman: Overview of Azure Kubernetes Services Networking Models
-- techcommunity.microsoft.com: SQL Server containers on Kubernetes with S3-compatible object storage - Getting started Check out this post on the Microsoft Tech Community : SQL Server containers on Kubernetes with S3-compatible object storage - Getting started - Microsoft Community Hub
+- techcommunity.microsoft.com: SQL Server containers on Kubernetes with S3-compatible object storage - Getting started Check out this post on the Microsoft Tech Community : SQL Server containers on Kubernetes with S3-compatible object storage - Getting started - Microsoft Community Hub
- learn.microsoft.com: Connect with RDP to Azure Kubernetes Service (AKS) cluster Windows Server nodes for maintenance or troubleshooting
-- techcommunity.microsoft.com: Azure Kubernetes Service Free tier and Standard tier
+- techcommunity.microsoft.com: Azure Kubernetes Service Free tier and Standard tier
- medium.com/credera-engineering: How to blue-green deploy an AKS cluster
- community.ops.io: Configuring AKS to read secrets and certificates from Azure KeyVaults This article will teach you how to configure an AKS cluster to consume secrets, keys and certificates from an Azure KeyVault
- medium.com/@danieljimgarcia: The Application Gateway Ingress Controller is broken 🌟 The Application Gateway Ingress Controller exposes applications hosted in Kubernetes to the outside world via Azure’s native Application Gateway. However, it has important design flaws, which can cause minutes of downtime when updating your workloads.
-- kristhecodingunicorn.com: Setting Up OAuth 2.0 Authentication for Applications in AKS With NGINX and OAuth2 Proxy 🌟🌟
+- kristhecodingunicorn.com: Setting Up OAuth 2.0 Authentication for Applications in AKS With NGINX and OAuth2 Proxy 🌟🌟
- medium.com/@ershivamgupta: Disaster Recovery Solution for Azure Kubernetes Service (AKS) Persistent Volume Storage 🌟 This article demonstrates a disaster recovery solution for AKS:
- Installing Longhorn
- Setting up an External Backup target
@@ -8347,13 +8347,13 @@
- github.com/OvidiuBorlean/kubectl-windumps Network traffic capture in AKS Windows Nodes
-- infoq.com: Microsoft Brings Kubernetes to the Edge with AKS Edge Essentials
-- azuredevopslabs.com: Deploying a multi-container application to Azure Kubernetes Services
-- danielstechblog.io: Mitigating slow container image pulls on Azure Kubernetes Service It is not easy identifying the root cause for slow container image pulls on your AKS. In this article, you’ll follow Daniel’s journey in debugging the OS disk queue depth and how it affects image pulls.
-- grafana.com: Scrape Azure metrics and monitor AKS using Grafana Agent 🌟 In this blog post, we will demonstrate how to configure Grafana Agent to scrape metrics from Microsoft Azure, specifically from AKS, using the newly released azure_exporter.
+- infoq.com: Microsoft Brings Kubernetes to the Edge with AKS Edge Essentials
+- azuredevopslabs.com: Deploying a multi-container application to Azure Kubernetes Services
+- danielstechblog.io: Mitigating slow container image pulls on Azure Kubernetes Service It is not easy identifying the root cause for slow container image pulls on your AKS. In this article, you’ll follow Daniel’s journey in debugging the OS disk queue depth and how it affects image pulls.
+- grafana.com: Scrape Azure metrics and monitor AKS using Grafana Agent 🌟 In this blog post, we will demonstrate how to configure Grafana Agent to scrape metrics from Microsoft Azure, specifically from AKS, using the newly released azure_exporter.
- medium.com/microsoftazure: Automating Managed Prometheus and Grafana with Terraform for scalable observability on Azure Kubernetes Service and Istio 🌟
-- kristhecodingunicorn.com: Setting Up OAuth 2.0 Authentication for Applications in AKS With NGINX and OAuth2 Proxy
-- azure.microsoft.com: Announcing the general availability of Azure CNI Overlay in Azure Kubernetes Service
+- kristhecodingunicorn.com: Setting Up OAuth 2.0 Authentication for Applications in AKS With NGINX and OAuth2 Proxy
+- azure.microsoft.com: Announcing the general availability of Azure CNI Overlay in Azure Kubernetes Service
- medium.com/@GiantSwarm: Deep Dive Into Kubernetes Networking in Azure Deep Dive Into Kubernetes Networking in Azure
- Calico with BGP
- Azure Container Network
@@ -8361,59 +8361,59 @@
- Best Option
-- returngis.net: Configurar más de un Application Gateway con AGIC para AKS
-- returngis.net: Azure Application Gateway con WAF y wildcard + Nginx Controller para AKS
+- returngis.net: Configurar más de un Application Gateway con AGIC para AKS
+- returngis.net: Azure Application Gateway con WAF y wildcard + Nginx Controller para AKS
- medium.com/@lfoster49203: Kubernetes on Azure: Setting up a cluster on Microsoft Azure (with Azure AKS)
- medium.com/@pauldotyu: Effortlessly Deploy to AKS with Open Source Tools Draft and Acorn
-- techcommunity.microsoft.com: How to install an AKS cluster with the Istio service mesh add-on via Bicep
+- techcommunity.microsoft.com: How to install an AKS cluster with the Istio service mesh add-on via Bicep
- adamtheautomator.com: Getting Started with the Azure Kubernetes Service (AKS) In this tutorial, you’ll learn how to get started with Microsoft Azure Kubernetes Service (AKS) using the Azure Portal and the Azure CLI
-- techcommunity.microsoft.com: Kubernetes External DNS for Azure DNS & AKS
+- techcommunity.microsoft.com: Kubernetes External DNS for Azure DNS & AKS
- medium.com/adessoturkey: Azure DevOps Agents on AKS with the kaniko Option In this article, you will learn how to build container images in your Azure DevOps agents using kaniko. kaniko doesn’t depend on a Docker daemon and executes each command within a Dockerfile completely in userspace.
-- techcommunity.microsoft.com: Securing Windows workloads on Azure Kubernetes Service with Calico
-- infoworld.com: Kubernetes cost management for the real world How much will Kubernetes cost to run? That question has become much easier to answer for Azure Kubernetes Service, thanks to OpenCost integration.
+- techcommunity.microsoft.com: Securing Windows workloads on Azure Kubernetes Service with Calico
+- infoworld.com: Kubernetes cost management for the real world How much will Kubernetes cost to run? That question has become much easier to answer for Azure Kubernetes Service, thanks to OpenCost integration.
- inder-devops.medium.com: AKS Networking Deep Dive: Kubenet vs Azure-CNI vs Azure-CNI (overlay) When deploying an AKS cluster, there are three networking models you can choose from:
- Kubenet
- Azure CNI
- Azure CNI Overlay networking
-- returngis.net: Desplegar AGIC en AKS utilizando workload identity
+- returngis.net: Desplegar AGIC en AKS utilizando workload identity
- learn.microsoft.com: Use Application Gateway Ingress Controller (AGIC) with a multitenant Azure Kubernetes Service
-- returngis.net: Exponer APIs en AKS a través de Azure API Management
-- techcommunity.microsoft.com: A Practical Guide to Zone Redundant AKS Clusters and Storage
+- returngis.net: Exponer APIs en AKS a través de Azure API Management
+- techcommunity.microsoft.com: A Practical Guide to Zone Redundant AKS Clusters and Storage
- learn.microsoft.com: AKS landing zone accelerator
-- piotrminkowski.com: Getting Started with Azure Kubernetes Service 🌟
-- techcommunity.microsoft.com: Simplifying Azure Kubernetes Service Authentication Part 2
-- learn.microsoft.com: Monitor Azure Kubernetes Service (AKS) control plane metrics (preview)
-- github.com/stephaneey/azure-and-k8s-architecture: Azure and K8s Architecture 🌟 The purpose of this repo is to share some real-world inspired Azure and K8s architecture diagrams, that may help organizations accelerate their adoption of Azure and K8s. Each diagram will be accompanied by a textual explanation with the key attention points.
+- piotrminkowski.com: Getting Started with Azure Kubernetes Service 🌟
+- techcommunity.microsoft.com: Simplifying Azure Kubernetes Service Authentication Part 2
+- learn.microsoft.com: Monitor Azure Kubernetes Service (AKS) control plane metrics (preview)
+- github.com/stephaneey/azure-and-k8s-architecture: Azure and K8s Architecture 🌟 The purpose of this repo is to share some real-world inspired Azure and K8s architecture diagrams, that may help organizations accelerate their adoption of Azure and K8s. Each diagram will be accompanied by a textual explanation with the key attention points.
-- techcommunity.microsoft.com: Running GPU accelerated workloads with NVIDIA GPU Operator on AKS 🌟
-- dinantpaardenkooper.nl: Azure Day with Kubernetes Within this blog, I want to give an overview of all the feature which where shared at KubeCon Europe 2024 that becomes available in General Availability, Technical Preview or End of Support by Microsoft. This information can be found at Microsoft Azure Updates.
+- techcommunity.microsoft.com: Running GPU accelerated workloads with NVIDIA GPU Operator on AKS 🌟
+- dinantpaardenkooper.nl: Azure Day with Kubernetes Within this blog, I want to give an overview of all the feature which where shared at KubeCon Europe 2024 that becomes available in General Availability, Technical Preview or End of Support by Microsoft. This information can be found at Microsoft Azure Updates.
- youtube: Day -25 | No Dockerfile, No K8s Manifests | Setup CI/CD in 5 minutes for any programming language This video is part of Azure Zero to Hero (Free Azure Course including Azure DevOps). In this video of Automated CI/CD Pipeline Generator. You will learn how to setup and implement automated CI/CD deployment on the AKS platform of Azure. No Dockerfile, No Kubernetes manifests, No CI/CD Pipeline. Everything is generated automatically for you. Best way to start learning CI/CD and automated deployments. This makes life of DevOps Engineers extremely easy.
- medium.com/@anjkeesari: Install Grafana Loki-Stack Helmchart in Azure Kubernetes Services (AKS)
-- pixelrobots.co.uk: Exploring Azure Kubernetes Service’s Node Autoprovision: A Deep Dive into the Latest Public Preview Feature
+- pixelrobots.co.uk: Exploring Azure Kubernetes Service’s Node Autoprovision: A Deep Dive into the Latest Public Preview Feature
- Node Autoprovision (NAP) in AKS is a game-changer for managing node pools. As your workloads expand and diversify in complexity, needing various CPU, memory, and capability configurations, managing your VM configurations can become quite daunting. This is where NAP steps in.
- NAP dynamically decides the optimal VM configuration for your pending pod resource requirements, ensuring that your workloads run efficiently and cost-effectively. This feature is rooted in the open-source Karpenter project, and its implementation in AKS is also open-source.
-- techcommunity.microsoft.com: Advanced Network Observability for your Azure Kubernetes Service clusters through Azure Monitor
-- learn.microsoft.com: Deploy AKS and API Management with mTLS
+- techcommunity.microsoft.com: Advanced Network Observability for your Azure Kubernetes Service clusters through Azure Monitor
+- learn.microsoft.com: Deploy AKS and API Management with mTLS
- blog.stackademic.com: Advanced End-to-End DevSecOps Kubernetes Three-Tier Project using Azure AKS, fluxCD, Prometheus, Grafana, and GitLab
- faun.pub: External Secret Operator on AKS (with Terraform) for Azure Key Vault Integration (with Workload Identity)
-- techcommunity.microsoft.com: Leveraging Azure Copilot for Azure Kubernetes Services (AKS)
+- techcommunity.microsoft.com: Leveraging Azure Copilot for Azure Kubernetes Services (AKS)
AKS Releases
AKS Lite
-- thenewstack.io: Microsoft Takes Kubernetes to the Edge with AKS Lite At it Ignite conference, Microsoft announced that a public preview of Azure Kubernetes Service (AKS) on Windows IoT and Windows devices, known as AKS lite, will be available next month.
+- thenewstack.io: Microsoft Takes Kubernetes to the Edge with AKS Lite At it Ignite conference, Microsoft announced that a public preview of Azure Kubernetes Service (AKS) on Windows IoT and Windows devices, known as AKS lite, will be available next month.
Draft 2 on AKS
- Azure/Draft 🌟
-- blog.baeke.info: Trying out Draft 2 on AKS
+- blog.baeke.info: Trying out Draft 2 on AKS
GKE Google Kubernetes Engine
@@ -8422,23 +8422,23 @@
- Fetches all Primitive and Predefined GCP IAM Roles
-- Using new traffic control features in External HTTP(S) load balancer
-- Setting up NodeLocal DNSCache
-- Looking ahead as GKE, the original managed Kubernetes, turns 5
+- Using new traffic control features in External HTTP(S) load balancer
+- Setting up NodeLocal DNSCache
+- Looking ahead as GKE, the original managed Kubernetes, turns 5
- blog.doit-intl.com: How to Set Up Multi-Cluster Load Balancing with GKE
- codeburst.io: Google Kubernetes Engine Logging by Example
- cloud.google.com: Discover and invoke services across clusters with GKE multi-cluster services
- Introducing GKE Autopilot: a revolution in managed Kubernetes 🌟
-- techcrunch.com: Google Cloud puts its Kubernetes Engine on autopilot
-- zdnet.com: Google introduces GKE Autopilot for hands-off Kubernetes The new GKE Autopilot, generally available now, steps up the level of automation involved in Kubernetes management, down to eliminating all node management.
+- techcrunch.com: Google Cloud puts its Kubernetes Engine on autopilot
+- zdnet.com: Google introduces GKE Autopilot for hands-off Kubernetes The new GKE Autopilot, generally available now, steps up the level of automation involved in Kubernetes management, down to eliminating all node management.
- thenewstack.io: Google’s New ‘Autopilot’ for Kubernetes
-- cloud.google.com: GKE Autopilot 🌟
+- cloud.google.com: GKE Autopilot 🌟
- medium: How to provision Kubernetes Cluster in GCP Cloud (K8s)? 🌟
-- youtube: GKE Autopilot - Fully Managed Kubernetes Service From Google 🌟
-- insights.project-a.com: Using GitHub Actions to deploy to Kubernetes in GKE 🌟
+- youtube: GKE Autopilot - Fully Managed Kubernetes Service From Google 🌟
+- insights.project-a.com: Using GitHub Actions to deploy to Kubernetes in GKE 🌟
- faun.pub: How to automate the setup of a Kubernetes cluster on GCP Using Ansible to install, setup, and configure a Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP).
-- Kubernetes Cloud DNS GCP now makes it easy to query DNS for Kubernetes services across multiple clusters from anywhere inside the VPC! The less stuff users have to run in their clusters, the more they can use for their own apps. It was always problematic to make users admin their own DNS.
-- seroter.com: Using the new Google Cloud Config Controller to provision and manage cloud services via the Kubernetes Resource Model I look at a new managed service that provisions cloud-native services as if they were k8s resources.
+- Kubernetes Cloud DNS GCP now makes it easy to query DNS for Kubernetes services across multiple clusters from anywhere inside the VPC! The less stuff users have to run in their clusters, the more they can use for their own apps. It was always problematic to make users admin their own DNS.
+- seroter.com: Using the new Google Cloud Config Controller to provision and manage cloud services via the Kubernetes Resource Model I look at a new managed service that provisions cloud-native services as if they were k8s resources.
- cloud.google.com: Announcing Backup for GKE: the easiest way to protect GKE workloads 🌟
- Features of Google Kubernetes Engine that NO other K8s provider has or are rapidly copying:
- Autopilot
@@ -8449,7 +8449,7 @@
- cloud.google.com: Announcing Spot Pods for GKE Autopilot—save on fault tolerant workloads
-- acloudguru.com: GKE ludicrous speed! GKE Image Streaming speeds up container starts
+- acloudguru.com: GKE ludicrous speed! GKE Image Streaming speeds up container starts
- cloud.google.com: How to do multi-cluster Kubernetes in the real world—one GKE shop’s approach
- cloud.google.com: Know more, spend less: how GKE cost optimization insights help you optimize Kubernetes
- medium.com/@glen.yu: Getting started with eBPF and Cilium on GKE Through Cilium, users can add functionality such as encryption and L7 network policy enforcement previously only available in a service mesh — but without the operational complexity of having to manage one.
@@ -8483,12 +8483,12 @@
IKS IBM Cloud Kubernetes Service
Linode Kubernetes Engine LKE
-- Linode Kubernetes Engine (LKE)
+- Linode Kubernetes Engine (LKE)
- medium: Create Kubernetes Cluster Using Linode LKE
- dev.to: Practical Introduction to Kubernetes Autoscaling Tools with Linode Kubernetes Engine 🌟 In this article you will practice scaling apps with the:
- Horizontal Pod Autoscaler
@@ -8500,28 +8500,28 @@
DOKS Digital Ocean Kubernetes
-- docs.digitalocean.com: Kubernetes on DigitalOcean
-- digitalocean.com: Automating GitOps and Continuous Delivery With DigitalOcean Kubernetes (Terraform, Helm and Flux)
+- docs.digitalocean.com: Kubernetes on DigitalOcean
+- digitalocean.com: Automating GitOps and Continuous Delivery With DigitalOcean Kubernetes (Terraform, Helm and Flux)
- blog.ediri.io: DigitalOcean Kubernetes Challenge Deploy a GitOps CI/CD implementation
-- digitalocean.com: Kubernetes for startups: Why, when, and how to adopt
+- digitalocean.com: Kubernetes for startups: Why, when, and how to adopt
Oracle Cloud Kubernetes
-- arnoldgalovics.com: GitHub Actions CI/CD For Oracle Cloud Kubernetes Learn how to create a private container registry with Terraform and deploy a 4 node Kubernetes cluster for free on Oracle Cloud. Then, use GitHub Actions to build ARM Docker containers for your nodes.
+- arnoldgalovics.com: GitHub Actions CI/CD For Oracle Cloud Kubernetes Learn how to create a private container registry with Terraform and deploy a 4 node Kubernetes cluster for free on Oracle Cloud. Then, use GitHub Actions to build ARM Docker containers for your nodes.
Provisioning cloud resources (AWS, GCP, Azure) in Kubernetes
-- learnk8s.io: Provisioning cloud resources (AWS, GCP, Azure) in Kubernetes
+- learnk8s.io: Provisioning cloud resources (AWS, GCP, Azure) in Kubernetes
Kubesphere
-- kubesphere.io The Kubernetes platform tailored for hybrid multicloud. KubeSphere is a distributed operating system managing cloud native applications with Kubernetes as its kernel, and provides plug-and-play architecture for the seamless integration of third-party applications to boost its ecosystem.
+- kubesphere.io The Kubernetes platform tailored for hybrid multicloud. KubeSphere is a distributed operating system managing cloud native applications with Kubernetes as its kernel, and provides plug-and-play architecture for the seamless integration of third-party applications to boost its ecosystem.
- kubekey The Next-gen Installer: Installing Kubernetes and KubeSphere v3.0.0 fastly, flexibly and easily
-- kubesphere.io: Scaling a Kubernetes Cluster: One of the Best Practices for Using KubeKey
+- kubesphere.io: Scaling a Kubernetes Cluster: One of the Best Practices for Using KubeKey
- itnext.io: Adding Master Nodes to Achieve HA: One of the Best Practices for Using KubeKey
- youtube: Create a Jenkins Pipeline on Kubernetes with CI/CD Pipeline Template in KubeSphere Two built-in Jenkins pipeline templates are available in KubeSphere 3.1. DevOps team can generate CICD or customize the workflow as you need by simple drag-and-drop.
- itnext.io: KubeSphere: A New Pluggable Kubernetes Application Management Platform
@@ -8533,11 +8533,11 @@
Tools for multi-cloud Kubernetes management
-- Banzai Cloud 🌟
-- Kubernetes node pool upgrades with Banzai Pipeline
+- Banzai Cloud 🌟
-- Compare tools for multi-cloud Kubernetes management 🌟
+- Compare tools for multi-cloud Kubernetes management 🌟
- NetApp Kubernetes Service – formerly StackPointCloud
- Cloudify
- Terraform
diff --git a/matrix-table.html b/matrix-table.html
index 2eff3727..c844a3b6 100644
--- a/matrix-table.html
+++ b/matrix-table.html
@@ -7616,10 +7616,10 @@
Kubernetes Distributions & Installers Matrix Table
-- atodorov.me: Comparing Kubernetes managed services across Digital Ocean, Scaleway, OVHCloud and Linode
-- Learnk8s: Comparison of Kubernetes Managed Services 🌟 Learnk8s has compared Managed Kubernetes Services and put up online a nice sheet displaying best-breed cloud services and their Managed K8s offerings. Look for Price, Quotas, Security, etc.
+- atodorov.me: Comparing Kubernetes managed services across Digital Ocean, Scaleway, OVHCloud and Linode
+- Learnk8s: Comparison of Kubernetes Managed Services 🌟 Learnk8s has compared Managed Kubernetes Services and put up online a nice sheet displaying best-breed cloud services and their Managed K8s offerings. Look for Price, Quotas, Security, etc.
- Learnk8s: Comparison of Kubernetes Ingress controllers 🌟 Daniele Polencic: “What’s the best Kubernetes Ingress Controller? There is not a simple answer as some controllers are better suited for APIs, others require less maintenance, etc. To make sense of all the options, we’ve expanded the comparison of the Ingress controllers to include 16 Ingress controllers and several other missing features such as Hot Reloading, Proxy Protocol, Cert manager integration, etc.”
-- itprotoday.com: Who’s Winning in the Container Software Market 🌟 Thanks to its container customer training, the $1 billion container software market is Red Hat’s to lose. Where do the other players stand?
+- itprotoday.com: Who’s Winning in the Container Software Market 🌟 Thanks to its container customer training, the $1 billion container software market is Red Hat’s to lose. Where do the other players stand?
