diff --git a/docs/ansible.md b/docs/ansible.md index 4326dc90..326968b3 100644 --- a/docs/ansible.md +++ b/docs/ansible.md @@ -167,6 +167,7 @@ - [Ansible Collections 🌟](https://github.com/ansible-collections) - [Amazon AWS Collection 🌟](https://github.com/ansible-collections/amazon.aws) +- [Radware/radware-ansible: Radware Ansible Collection](https://github.com/Radware/radware-ansible) ## Red Hat Ansible Automation Platform diff --git a/docs/aws-security.md b/docs/aws-security.md index 61a38f0a..42b1704c 100644 --- a/docs/aws-security.md +++ b/docs/aws-security.md @@ -5,7 +5,8 @@ 3. [Policy as Code with AWS CDK and Open Policy Agent](#policy-as-code-with-aws-cdk-and-open-policy-agent) 4. [Payment Card Industry Data Security Standard compliance](#payment-card-industry-data-security-standard-compliance) 5. [AWS IAM](#aws-iam) - 1. [AWS IAM Anywhere](#aws-iam-anywhere) + 1. [Terraform IAM Policy Validator](#terraform-iam-policy-validator) + 2. [AWS IAM Anywhere](#aws-iam-anywhere) 6. [AWS Organizations](#aws-organizations) 7. [AWS Control Tower](#aws-control-tower) 8. [AWS Firewalls](#aws-firewalls) @@ -85,6 +86,10 @@ - [Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere 🌟](https://aws.amazon.com/blogs/security/extend-aws-iam-roles-to-workloads-outside-of-aws-with-iam-roles-anywhere/) **A secure way for on-premises servers, containers, or apps to obtain temporary AWS credentials and remove the need for creating and managing long-term AWS credentials** - [binx.io: Working with AWS Permission Policies 🌟](https://binx.io/2022/07/13/working-with-aws-permission-policies/) +### Terraform IAM Policy Validator + +- [awslabs/terraform-iam-policy-validator](https://github.com/awslabs/terraform-iam-policy-validator) A command line tool that validates AWS IAM Policies in a Terraform template against AWS IAM best practices. + ### AWS IAM Anywhere - [==jimmydqv.com: AWS IAM Anywhere== 🌟](https://jimmydqv.com/iam-anywhere/) diff --git a/docs/azure.md b/docs/azure.md index c85708a5..1220bc74 100644 --- a/docs/azure.md +++ b/docs/azure.md @@ -29,21 +29,23 @@ 20. [Azure Bicep](#azure-bicep) 21. [Azure Cross region Load Balancer](#azure-cross-region-load-balancer) 22. [Azure Traffic Manager](#azure-traffic-manager) -23. [Azure OpenVPN](#azure-openvpn) -24. [Azure Security](#azure-security) -25. [Data Ingestion. Azure Data Factory](#data-ingestion-azure-data-factory) -26. [WinGet Windows Package Manager CLI](#winget-windows-package-manager-cli) -27. [Windows 11](#windows-11) -28. [Azure API Management](#azure-api-management) -29. [Azure Container Apps](#azure-container-apps) -30. [Azure Container Instances](#azure-container-instances) -31. [Windows Server Container Host](#windows-server-container-host) -32. [Disaster Recovery](#disaster-recovery) -33. [Azure Samples (Boilerplates)](#azure-samples-boilerplates) -34. [Office 365](#office-365) -35. [Images](#images) -36. [Videos](#videos) -37. [Tweets](#tweets) +23. [Azure DNS](#azure-dns) +24. [Azure OpenVPN](#azure-openvpn) +25. [Azure Security](#azure-security) +26. [Data Ingestion. Azure Data Factory](#data-ingestion-azure-data-factory) +27. [WinGet Windows Package Manager CLI](#winget-windows-package-manager-cli) +28. [Windows 11](#windows-11) +29. [Azure API Management](#azure-api-management) +30. [Azure Container Apps](#azure-container-apps) +31. [Azure Container Instances](#azure-container-instances) +32. [Windows Server Container Host](#windows-server-container-host) +33. [Disaster Recovery](#disaster-recovery) +34. [Azure Samples (Boilerplates)](#azure-samples-boilerplates) +35. [Azure Healthcare Data Services](#azure-healthcare-data-services) +36. [Office 365](#office-365) +37. [Images](#images) +38. [Videos](#videos) +39. [Tweets](#tweets) ## Azure @@ -313,6 +315,10 @@ - [Azure Traffic Manager](https://docs.microsoft.com/azure/traffic-manager/) +## Azure DNS + +- [learn.microsoft.com: What is Azure DNS Private Resolver?](https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview) Azure DNS Private Resolver is a new service that enables you to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM based DNS servers. Customers will no longer need to provision IaaS based solutions on their Virtual Networks to resolve names registered on Azure Private DNS Zones and will be able to do conditional forwarding of domains back to on-prem, multi-cloud and public DNS servers. + ## Azure OpenVPN - [Create an Azure Active Directory tenant for P2S OpenVPN protocol connections](https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant) @@ -391,6 +397,14 @@ - [microsoft/azure-pipelines-yaml: Azure Pipelines YAML 🌟](https://github.com/microsoft/azure-pipelines-yaml/) YAML templates, samples, and community interaction for designing Azure Pipelines. - [microsoft/azure-pipelines-yaml: maven.yml](https://github.com/microsoft/azure-pipelines-yaml/blob/master/templates/maven.yml) +## Azure Healthcare Data Services + +- [Microsoft - DICOM Service](https://learn.microsoft.com/en-us/azure/healthcare-apis/dicom/) + - [github.com/microsoft/dicom-server](https://github.com/microsoft/dicom-server) OSS Implementation of DICOMweb standard + - [github.com/microsoft/fhir-server](https://github.com/microsoft/fhir-server) A service that implements the FHIR standard +- [Project InnerEye – Democratizing Medical Imaging AI](https://www.microsoft.com/en-us/research/project/medical-image-analysis/) + - [github.com/microsoft/InnerEye-Gateway](https://github.com/microsoft/InnerEye-Gateway) The InnerEye-Gateway is a Windows service that acts as a DICOM end point to run inference on https://github.com/microsoft/InnerEye-DeepLearning models. + ## Office 365 - [o365reports.com: Office 365 Reports](https://o365reports.com) diff --git a/docs/cloud-arch-diagrams.md b/docs/cloud-arch-diagrams.md index 1be00d2b..ddb8f40d 100644 --- a/docs/cloud-arch-diagrams.md +++ b/docs/cloud-arch-diagrams.md @@ -12,6 +12,7 @@ - [betterprogramming.pub: Solutions Architect Tips β€” The 5 Types of Architecture Diagrams](https://betterprogramming.pub/solutions-architect-tips-the-5-types-of-architecture-diagrams-eb0c11996f9e) The flow, service, persona, infrastructure, and developer diagram - [alibabacloud.com: How to Create an Effective Technical Architectural Diagram?](https://www.alibabacloud.com/blog/how-to-create-an-effective-technical-architectural-diagram_596100) - [learningdaily.dev: Software architecture diagramming and patterns](https://learningdaily.dev/software-architecture-diagramming-and-patterns-7d38999e7a12) + ## MultiCloud - [CloudSkew](https://www.cloudskew.com/) Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool @@ -66,6 +67,7 @@ - Perspective displays indicative costing data for the resources in your diagrams and works cross-account and cross-region. - Perspective is open source and has an open road map. Feel free to raise issues and contribute to future development! - [cfn-diagram 🌟](https://github.com/mhlabs/cfn-diagram) CLI tool to visualise CloudFormation/SAM/CDK stacks as visjs networks or draw.io diagrams. +- [==alanblackmore.medium.com: AWS Diagram Architecture==](https://alanblackmore.medium.com/aws-diagram-architecture-afb50ea569a4) ## Google Cloud Architecture Diagramming Tool diff --git a/docs/customer.md b/docs/customer.md index cb8539ed..2c9edb70 100644 --- a/docs/customer.md +++ b/docs/customer.md @@ -6,12 +6,13 @@ 2. [Audi](#audi) 3. [Volkswagen](#volkswagen) 4. [Mercedes Benz](#mercedes-benz) -5. [Carrefour Spain](#carrefour-spain) -6. [Decathlon](#decathlon) -7. [Deutsche Telekom](#deutsche-telekom) -8. [AstraZeneca](#astrazeneca) -9. [AI for Medical Imaging](#ai-for-medical-imaging) -10. [Videos](#videos) +5. [IDRA Group](#idra-group) +6. [Carrefour Spain](#carrefour-spain) +7. [Decathlon](#decathlon) +8. [Deutsche Telekom](#deutsche-telekom) +9. [AstraZeneca](#astrazeneca) +10. [AI for Medical Imaging](#ai-for-medical-imaging) +11. [Videos](#videos) ## BMW IT-Zentrum (Munich) @@ -61,6 +62,10 @@ - [genbeta.com: El software de los coches de Mercedes contiene cΓ³digo abierto y en vez de distribuirlo en GitHub usan un CD](https://www.genbeta.com/desarrollo/software-coches-mercedes-contiene-codigo-abierto-vez-distribuirlo-github-usan-cd) - [youtube: Keynote: 7 Years of Running Kubernetes for Mercedes-Benz - Jens Erat, Peter Mueller, Sabine Wolz](https://www.youtube.com/watch?v=UmbjwSK9b3I) +## IDRA Group + +- [teslarati.com: IDRA finishes 9,000-ton Giga Press; Tesla expecting it any day now](https://www.teslarati.com/idra-9000-ton-giga-press/) + ## Carrefour Spain - [Efficient Java in the cloud with Quarkus. Carrefour Spain’s test: Quarkus vs. Spring Boot](https://horizons.carrefour.com/efficient-java-in-the-cloud-with-quarkus) "This move will help our applications to become scalable, real time, resilient and, all in all, provide a better experience to our customers" @@ -97,6 +102,7 @@ + diff --git a/docs/demos.md b/docs/demos.md index a80a2602..b9ade2b0 100644 --- a/docs/demos.md +++ b/docs/demos.md @@ -7,25 +7,26 @@ 2. [Ansible and Ansible Tower](#ansible-and-ansible-tower) 3. [GitOps](#gitops) 5. [Kubernetes Demos](#kubernetes-demos) - 1. [Django on K8s](#django-on-k8s) - 2. [Postgres Operator](#postgres-operator) - 3. [CI/CD with SpringBoot for Kubernetes](#cicd-with-springboot-for-kubernetes) + 1. [Webhooks app](#webhooks-app) + 2. [Django on K8s](#django-on-k8s) + 3. [Postgres Operator](#postgres-operator) + 4. [CI/CD with SpringBoot for Kubernetes](#cicd-with-springboot-for-kubernetes) 1. [Deploy a Spring Boot Application to Openshift with Spring Cloud Kubernetes and Fabric 8 Maven Plugin](#deploy-a-spring-boot-application-to-openshift-with-spring-cloud-kubernetes-and-fabric-8-maven-plugin) 2. [Spring Initializr and k8s Initializer](#spring-initializr-and-k8s-initializer) - 4. [Kubernetes CKAD Example Exam Questions Practical Challenge Series](#kubernetes-ckad-example-exam-questions-practical-challenge-series) - 5. [Istio Service Mesh](#istio-service-mesh) - 6. [Envoy Service Mesh](#envoy-service-mesh) - 7. [Consul Service Mesh](#consul-service-mesh) - 8. [Kubernetes Network Policy Samples](#kubernetes-network-policy-samples) - 9. [Rancher](#rancher) - 10. [GitOps Workflow with Flux](#gitops-workflow-with-flux) - 11. [Amazon EKS. Deploy example microservices on EKS](#amazon-eks-deploy-example-microservices-on-eks) - 12. [Azure AKS](#azure-aks) - 13. [Google Kubernetes Engine GKE](#google-kubernetes-engine-gke) - 14. [Environments to learn and practice Kubernetes security](#environments-to-learn-and-practice-kubernetes-security) - 15. [Harbor Container Registry](#harbor-container-registry) - 16. [OPA Gatekeeper](#opa-gatekeeper) - 17. [Konveyor Move2Kube](#konveyor-move2kube) + 5. [Kubernetes CKAD Example Exam Questions Practical Challenge Series](#kubernetes-ckad-example-exam-questions-practical-challenge-series) + 6. [Istio Service Mesh](#istio-service-mesh) + 7. [Envoy Service Mesh](#envoy-service-mesh) + 8. [Consul Service Mesh](#consul-service-mesh) + 9. [Kubernetes Network Policy Samples](#kubernetes-network-policy-samples) + 10. [Rancher](#rancher) + 11. [GitOps Workflow with Flux](#gitops-workflow-with-flux) + 12. [Amazon EKS. Deploy example microservices on EKS](#amazon-eks-deploy-example-microservices-on-eks) + 13. [Azure AKS](#azure-aks) + 14. [Google Kubernetes Engine GKE](#google-kubernetes-engine-gke) + 15. [Environments to learn and practice Kubernetes security](#environments-to-learn-and-practice-kubernetes-security) + 16. [Harbor Container Registry](#harbor-container-registry) + 17. [OPA Gatekeeper](#opa-gatekeeper) + 18. [Konveyor Move2Kube](#konveyor-move2kube) 6. [Red Hat Demo Central](#red-hat-demo-central) 1. [Cloud Native Development Architectural Diagrams Demos](#cloud-native-development-architectural-diagrams-demos) 7. [OpenShift Demos](#openshift-demos) @@ -202,6 +203,12 @@ - [youtube: Deploy Docker image to Kubernetes Cluster | CI-CD for Azure Kubernetes Service | Mohamed Radwan - DevOps](https://www.youtube.com/watch?v=4DUhc0MjdUc&feature=youtu.be&ab_channel=MohamedRadwan-DevOps) - [howtoforge.com: How to deploy your first pod on a Kubernetes Cluster](https://www.howtoforge.com/how-to-deploy-your-first-pod-on-a-kubernetes-cluster/) +### Webhooks app + +- [==webhooks.app==](https://webhooks.app) Webhook endpoints available for your tests and demos. +- [itnext.io: Journey Of A Microservice Application In The Kubernetes World](https://itnext.io/journey-of-a-microservice-application-in-the-kubernetes-world-bdfe795532ef) Presentation of webhooks.app . TL;DR +==webhooks.app is an open source application following the microservice architecture. Its purpose is to provide a webhook endpoint for demos. In this series of articles, I will present the application and several steps I used (and will use) to have it running in production in a Kubernetes cluster.== + ### Django on K8s - [digitalocean.com: How To Deploy a Scalable and Secure Django Application with Kubernetes](https://www.digitalocean.com/community/tutorials/how-to-deploy-a-scalable-and-secure-django-application-with-kubernetes) @@ -867,6 +874,7 @@ Grab them from here: [awesome-kubernetes/scripts](https://github.com/nubenetes/a - [codeproject.com: Making a Simple Data Pipeline Part 4: CI/CD with GitHub Actions](https://www.codeproject.com/Articles/5320647/Making-a-Simple-Data-Pipeline-Part-4-CI-CD-with-Gi) - [levelup.gitconnected.com: GitOps: CI/CD using GitHub Actions and ArgoCD on Kubernetes](https://levelup.gitconnected.com/gitops-ci-cd-using-github-actions-and-argocd-on-kubernetes-909d85d37746) Deploying Helm Charts on AWS EKS Cluster using ArgoCD and GitOps. - [freecodecamp.org: How to Setup a CI/CD Pipeline with GitHub Actions and AWS](https://www.freecodecamp.org/news/how-to-setup-a-ci-cd-pipeline-with-github-actions-and-aws/) +- [nicwortel.nl: Continuous deployment to Kubernetes with GitHub Actions](https://nicwortel.nl/blog/2022/05/27/continuous-deployment-to-kubernetes-with-github-actions) In this article, you will learn how to use GitHub Actions to automatically test, build and deploy your Docker images to Kubernetes on every commit to the main branch ### RedHat GitHub Actions diff --git a/docs/devops.md b/docs/devops.md index 1cf53deb..aec7a444 100644 --- a/docs/devops.md +++ b/docs/devops.md @@ -1,4 +1,5 @@ -# DevOps +# DevOps + 1. [Introduction to Digital Business Transformation](#introduction-to-digital-business-transformation) 2. [Automation Glossary](#automation-glossary) 3. [Blogs](#blogs) @@ -33,6 +34,10 @@ 27. [Videos](#videos) 28. [Tweets](#tweets) +
+
Jimmy Sax Β· Una Matina Jimmy Sax
+
+ ## Introduction to Digital Business Transformation - [What Is AIOps, BizDevOps, CloudOps, DevOps, ITOps, NoOps? A Gentle Introduction to Digital Business Transformation 🌟](https://stxnext.com/blog/2019/04/25/aiops-bizdevops-cloudops-devops-itops-noops-introduction-digital-business-transformation/) diff --git a/docs/devsecops.md b/docs/devsecops.md index 18d11ad7..e764eb62 100644 --- a/docs/devsecops.md +++ b/docs/devsecops.md @@ -1,4 +1,5 @@ -# DevSecOps and Security. Container Security +# DevSecOps and Security. Container + 1. [Introduction](#introduction) 2. [Kubernetes Security Compliance Frameworks](#kubernetes-security-compliance-frameworks) 3. [Zero Trust Security](#zero-trust-security) @@ -8,6 +9,7 @@ 6. [16 Gates](#16-gates) 7. [Kubernetes Threat Modelling](#kubernetes-threat-modelling) 8. [Kubernetes Config Security Threats](#kubernetes-config-security-threats) + 1. [Kubernetes Ingress Security](#kubernetes-ingress-security) 9. [Security Linting on Kubernetes](#security-linting-on-kubernetes) 10. [IaC and Security](#iac-and-security) 11. [Multi-Level Security (MLS) vs Multi-Category Security (MCS). Make Secure Pipelines with Podman and Containers](#multi-level-security-mls-vs-multi-category-security-mcs-make-secure-pipelines-with-podman-and-containers) @@ -254,9 +256,13 @@ ## Kubernetes Config Security Threats - [cncf.io: Identifying Kubernetes Config Security Threats: Pods Running as Root](https://www.cncf.io/blog/2020/06/16/identifying-kubernetes-config-security-threats-pods-running-as-root/) -- [mirantis.com: Introduction to Istio Ingress: The easy way to manage incoming Kubernetes app traffic](https://www.mirantis.com/blog/introduction-to-istio-ingress-the-easy-way-to-manage-incoming-kubernetes-app-traffic/) Leaving your cluster exposed can be risky. That's why you need Istio Ingress, which only exposes the part that handles incoming traffic & allows routing rules based on routes, headers, IP addresses and more. - [thenewstack.io: How Kubernetes vulnerabilities have shifted since the first attacks](https://thenewstack.io/how-kubernetes-vulnerabilities-have-shifted-since-the-first-api-attacks/) +### Kubernetes Ingress Security + +- [mirantis.com: Introduction to Istio Ingress: The easy way to manage incoming Kubernetes app traffic](https://www.mirantis.com/blog/introduction-to-istio-ingress-the-easy-way-to-manage-incoming-kubernetes-app-traffic/) Leaving your cluster exposed can be risky. That's why you need Istio Ingress, which only exposes the part that handles incoming traffic & allows routing rules based on routes, headers, IP addresses and more. +- [==armosec.io: How to secure Kubernetes Ingress?==](https://www.armosec.io/blog/kubernetes-ingress-security/) This article will look into how you can secure Ingress resources via adding TLS to Ingress and then procuring TLS/SSL certificates. + ## Security Linting on Kubernetes - [kubeLinter 🌟](https://github.com/stackrox/kube-linter) KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices. diff --git a/docs/docker.md b/docs/docker.md index 44296401..1cd1039f 100644 --- a/docs/docker.md +++ b/docs/docker.md @@ -242,6 +242,7 @@ PHP Docker Image for Cloud Native Deployments (and Kubernetes) - [Creating the best Linux Development experience on Windows & WSL 2](https://www.docker.com/blog/creating-the-best-linux-development-experience-on-windows-wsl-2/) - [andrewlock.net: Installing Docker Desktop for Windows and WSL 2](https://andrewlock.net/installing-docker-desktop-for-windows/) +- [medium.com/@adeelsubhan25: How to setup and build Docker Images on Windows](https://medium.com/@adeelsubhan25/how-to-setup-and-build-docker-images-on-windows-baf252152aca) ## Docker and Docker Swarm Cheat sheets diff --git a/docs/flux.md b/docs/flux.md index 59b1fc4c..24e76b17 100644 --- a/docs/flux.md +++ b/docs/flux.md @@ -1,5 +1,10 @@ # Flux. The GitOps operator for Kubernetes +1. [Introduction](#introduction) +2. [Templates](#templates) + +## Introduction + - [Flux](https://fluxcd.io/) The GitOps operator for Kubernetes - [docs.fluxcd.io](https://docs.fluxcd.io/) - [github: Flux](https://github.com/fluxcd/flux) @@ -33,3 +38,7 @@ - [==flux-subsystem-argo.github.io: GitOps Terraform Resources with Argo CD and Flux Subsystem for Argo==](https://flux-subsystem-argo.github.io/website/tutorials/terraform/) This is a tutorial to show how could we use Flux Subsystem for Argo (FSA) to bring the Terraform management feature from the Flux world to your Argo CD UI. In order to do so, we need Weave GitOps Terraform Controller to help us reconcile our Terraform resources. - [blog.ediri.io: Flux With Buckets: Is This Still GitOps?](https://blog.ediri.io/flux-with-buckets-is-this-still-gitops) How to use the Flux Bucket component with AWS S3 with Civo and Pulumi. Flux Bucket is a simple way to deploy your kubernetes manifests to a S3 bucket and then use Flux to deploy them - [dirien/pulumi-civo-flux-bucket](https://github.com/dirien/pulumi-civo-flux-bucket) + +## Templates + +- [github.com/onedr0p/flux-cluster-template: Template for deploying k3s backed by Flux](https://github.com/onedr0p/flux-cluster-template) Highly opinionated template for deploying a single Kubernetes (k3s) cluster with Ansible and Terraform backed by Flux, SOPS, GitHub Actions, Renovate and more! diff --git a/docs/gitops.md b/docs/gitops.md index 260ba821..0e8174bc 100644 --- a/docs/gitops.md +++ b/docs/gitops.md @@ -2,8 +2,9 @@ 1. [Introduction](#introduction) 2. [GitOps Working Group](#gitops-working-group) -3. [Git Repositories Structures](#git-repositories-structures) -4. [GitOps Tools](#gitops-tools) +3. [OpenGitOps Project](#opengitops-project) +4. [Git Repositories Structures](#git-repositories-structures) +5. [GitOps Tools](#gitops-tools) 1. [Flux. The GitOps Operator for Kubernetes](#flux-the-gitops-operator-for-kubernetes) 2. [Kustomize. Kubernetes native configuration management](#kustomize-kubernetes-native-configuration-management) 3. [Flagger](#flagger) @@ -16,16 +17,20 @@ 10. [OpenShift Applier](#openshift-applier) 11. [HashiCorp Waypoint](#hashicorp-waypoint) 12. [Weave GitOps](#weave-gitops) -5. [GitOps Frameworks](#gitops-frameworks) -6. [Kubernetes Platforms and GitOps](#kubernetes-platforms-and-gitops) +6. [GitOps Frameworks](#gitops-frameworks) +7. [Kubernetes Platforms and GitOps](#kubernetes-platforms-and-gitops) 1. [OpenShift GitOps](#openshift-gitops) 2. [AWS Kubernetes](#aws-kubernetes) 3. [Weave Kubernetes Platform](#weave-kubernetes-platform) 4. [Ubuntu Charmed Kubernetes](#ubuntu-charmed-kubernetes) -7. [APIOps](#apiops) -8. [Images](#images) -9. [Tweets](#tweets) -10. [Videos](#videos) +8. [APIOps](#apiops) +9. [Images](#images) +10. [Tweets](#tweets) +11. [Videos](#videos) + +
+
Alemix Donofrio Β· Jimmy Sax - Time
+
## Introduction @@ -175,6 +180,10 @@ - Software Agents (implement automated configuration management for the resource) - Closed loop (build the delivery pipeline for integration testing for resource changes) +## OpenGitOps Project + +- [github.com/open-gitops/project 🌟](https://github.com/open-gitops/project) OpenGitOps is a CNCF Sandbox project to define a vendor-neutral, principle-led meaning of GitOps. This will establish a foundation for interoperability between tools, conformance, and certification through lasting programs, documents, and code. + ## Git Repositories Structures - [==dzone: GitOps: How to Ops Your Git the Right Way== 🌟](https://dzone.com/articles/gitops-how-to-ops-your-git-the-right-way) In this article we’ll look into the specifics of creating Git repositories structures β€Šβ€” β€Šthe very core of the GitOps approach. diff --git a/docs/golang.md b/docs/golang.md index a0246709..9a140279 100644 --- a/docs/golang.md +++ b/docs/golang.md @@ -14,6 +14,7 @@ 12. [Dockerfile for go](#dockerfile-for-go) 13. [Videos](#videos) 14. [Tweets](#tweets) + ## Introduction - [golang.org](https://golang.org/) @@ -50,6 +51,7 @@ - [miguelmota/golang-for-nodejs-developers](https://github.com/miguelmota/golang-for-nodejs-developers) Examples of Golang compared to Node.js for learning - [blog.logrocket.com: Building a simple app with Go and PostgreSQL](https://blog.logrocket.com/building-simple-app-go-postgresql/) - [datastation.multiprocess.io: Speeding up Go's builtin JSON encoder up to 55% for large arrays of objects](https://datastation.multiprocess.io/blog/2022-03-03-improving-go-json-encoding-performance-for-large-arrays-of-objects.html) +- [betterprogramming.pub: Writing My First Microservice Using Go](https://betterprogramming.pub/my-first-microservice-using-golang-c5cf69f1376d) ## Design Patterns diff --git a/docs/helm.md b/docs/helm.md index 990e7539..4da9d6f8 100644 --- a/docs/helm.md +++ b/docs/helm.md @@ -104,6 +104,7 @@ - Deleting the state - [dev.to: HULL Tutorial 01: Introducing HULL, the Helm Universal Layer Library](https://dev.to/gre9ory/hull-tutorial-01-introducing-hull-the-helm-universal-layer-library-4njb) - [medium.com/@lasithih927: Helm on Kubernetes - Zero to Hero in 5 Minutes 🌟](https://medium.com/@lasithih927/helm-zero-to-hero-4cab17fac38e) A Helm cheat sheet for getting your desired application installed on a Kubernetes cluster with the config you need in no time. Even if you haven’t heard of Helm before! This will take you from zero to hero. +- [==medium.com/codex: Simplifying Kubernetes Deployments With Helm Package Manager== 🌟](https://medium.com/codex/simplifying-kubernetes-deployments-with-helm-package-manager-bf834c51818d) ## Helm Plugins diff --git a/docs/introduction.md b/docs/introduction.md index 7b5a9136..208e337e 100644 --- a/docs/introduction.md +++ b/docs/introduction.md @@ -46,6 +46,10 @@ 43. [Videos](#videos) 44. [Tweets](#tweets) +
+
RAYMOND MNT Β· Jimmy Sax - Parga (Oriental sax ).mp3
+
+ ## Introduction - [developers.redhat.com: Why Kubernetes is The New Application Server](https://developers.redhat.com/blog/2018/06/28/why-kubernetes-is-the-new-application-server/) @@ -219,6 +223,8 @@ - [medium.com/@nadinCodeHat: HTTP based Microservices is a bad idea 🌟](https://medium.com/@nadinCodeHat/http-based-microservices-is-a-bad-idea-670d3db29ca6) - [medium.com/qe-unit: Microservices β€” Do You Need Them? Are You Ready? 🌟](https://medium.com/qe-unit/the-microservices-adoption-roadmap-e37f3f32877) - [alibabacloud.com: Getting Started with Kubernetes | Deep Dive into Kubernetes Core Concepts](https://www.alibabacloud.com/blog/getting-started-with-kubernetes-%7C-deep-dive-into-kubernetes-core-concepts_595896) +- [micahlerner.com: Automatic Reliability Testing For Cluster Management Controllers](https://www.micahlerner.com/2022/07/24/automatic-reliability-testing-for-cluster-management-controllers.html) +- [cloudnativeislamabad.hashnode.dev: Virtualization vs Containerization](https://cloudnativeislamabad.hashnode.dev/virtualization-vs-containerization) Virtual Machines vs Docker ## Solution Architect. IT Architecture Frameworks @@ -238,7 +244,7 @@ ## Service-Oriented Arhitecture vs Event-Driven Architecture -- [==eventstore.com: Service-Oriented Architecture vs Event-Driven Architecture== 🌟](https://www.eventstore.com/blog/service-oriented-architecture-vs-event-driven-architecture) **SOA vs EDA: which should you use? Best article about EventSourcing CQRS related patterns and usages. A close-to-a-must-read for those who wants to clarify and understand better.** +- [==eventstore.com: Service-Oriented Architecture vs Event-Driven Architecture== 🌟](https://www.eventstore.com/blog/service-oriented-architecture-vs-event-driven-architecture) __SOA vs EDA: which should you use? Best article about EventSourcing CQRS related patterns and usages. A close-to-a-must-read for those who wants to clarify and understand better.__ ## Cloud Native @@ -268,6 +274,8 @@ - [maheshwari-bittu.medium.com: Why Event-Driven Architecture (EDA) is needed? 🌟](https://maheshwari-bittu.medium.com/why-event-driven-architecture-eda-is-needed-fac2f00f25a8) - [medium.com/rocco-scaramuzzi-tech: Event-Driven Microservice Architecture, don’t use only events but use commands too!](https://medium.com/rocco-scaramuzzi-tech/event-driven-microservice-architecture-dont-use-only-events-but-use-commands-too-b8694d370436) - [deeptimittalblogger.medium.com: Event driven architecture](https://deeptimittalblogger.medium.com/event-driven-architecture-111f504a8cbc) +- [medium.com/mcdonalds-technical-blog: Behind the scenes: McDonald’s event-driven architecture](https://medium.com/mcdonalds-technical-blog/behind-the-scenes-mcdonalds-event-driven-architecture-51a6542c0d86) We explore our journey of developing a unified platform enabling real-time, event-driven architectures. + - [medium.com/mcdonalds-technical-blog: McDonald’s event-driven architecture: The data journey and how it works](https://medium.com/mcdonalds-technical-blog/mcdonalds-event-driven-architecture-the-data-journey-and-how-it-works-4591d108821f) ## Multi-Tenancy Architecture diff --git a/docs/istio.md b/docs/istio.md index 82e885dc..bdeb8f37 100644 --- a/docs/istio.md +++ b/docs/istio.md @@ -4,15 +4,16 @@ 2. [API Access Control](#api-access-control) 3. [Maistra Istio](#maistra-istio) 4. [Admiral](#admiral) -5. [Kiali project, observability for the Istio service mesh](#kiali-project-observability-for-the-istio-service-mesh) -6. [Jaeger tracing. Open source, end-to-end distributed tracing](#jaeger-tracing-open-source-end-to-end-distributed-tracing) -7. [Envoy micro proxy](#envoy-micro-proxy) -8. [Kibana](#kibana) -9. [AWS App Mesh](#aws-app-mesh) -10. [Istio and AWS EKS](#istio-and-aws-eks) -11. [Istio Tools](#istio-tools) -12. [Videos](#videos) -13. [Tweets](#tweets) +5. [Ambient Mesh - Istio Data Plane](#ambient-mesh---istio-data-plane) +6. [Kiali project, observability for the Istio service mesh](#kiali-project-observability-for-the-istio-service-mesh) +7. [Jaeger tracing. Open source, end-to-end distributed tracing](#jaeger-tracing-open-source-end-to-end-distributed-tracing) +8. [Envoy micro proxy](#envoy-micro-proxy) +9. [Kibana](#kibana) +10. [AWS App Mesh](#aws-app-mesh) +11. [Istio and AWS EKS](#istio-and-aws-eks) +12. [Istio Tools](#istio-tools) +13. [Videos](#videos) +14. [Tweets](#tweets) ## Docs @@ -114,6 +115,10 @@ IstioMesh, PrometheusIO, Flux v2 & Flagger. - [istio-ecosystem/admiral](https://github.com/istio-ecosystem/admiral) Admiral provides automatic configuration and service discovery for multicluster Istio service mesh. Istio has a very robust set of multi-cluster capabilities. Managing this configuration across multiple clusters at scale is challenging. Admiral takes an opinionated view on this configuration and provides automatic provisioning and syncing across clusters. This removes the complexity for developers and mesh operators. +## Ambient Mesh - Istio Data Plane + +- [istio.io: Introducing Ambient Mesh](https://istio.io/latest/blog/2022/introducing-ambient-mesh/) A new dataplane mode for Istio without sidecars. + ## Kiali project, observability for the Istio service mesh - [kiali.io](https://www.kiali.io/) diff --git a/docs/jenkins.md b/docs/jenkins.md index 8ffcb781..efa19393 100644 --- a/docs/jenkins.md +++ b/docs/jenkins.md @@ -151,6 +151,7 @@ jenkinsci CloudBees' advice is to use build tool features when possible (Maven/G - [==youtube: Tech World with Nana - Jenkins Tutorial for Beginners==](https://www.youtube.com/playlist?list=PLy7NrYWoggjw_LIiDK1LXdNN82uYuuuiC) - [==camunda.com: How We Overcame Long-Running Job Limitations in Jenkins Declarative Pipelines==](https://camunda.com/blog/2022/02/how-we-overcame-long-running-job-limitations-in-jenkins-declarative-pipelines/) - [==aws.amazon.com: Jenkins high availability and disaster recovery on AWS== 🌟](https://aws.amazon.com/blogs/devops/jenkins-high-availability-and-disaster-recovery-on-aws/) +- [blog.searce.com: Jenkins Distributed Cluster Using Dynamic Build Agents On GKE](https://blog.searce.com/jenkins-distributed-cluster-using-dynamic-build-agents-on-gke-e2262a59dcb3) In this article, you'll learn how to build a distributed Jenkins cluster on GKE and autoscale the Jenkins agents to process more jobs. ## Jenkins Is The Way @@ -158,7 +159,7 @@ jenkinsci CloudBees' advice is to use build tool features when possible (Maven/G - [jenkinsistheway.io: Financial Transactions Simplified With Faster Build Cycles 🌟](https://jenkinsistheway.io/user-story/jenkins-is-the-way-to-fintech-excellence/) After integrating Jenkins, this FinTech’s financial transaction product quality is improved and 3X simpler. - [jenkinsistheway.io: Advanced Declarative Pipelines for Workflow and Decision Automation Platform 🌟](https://jenkinsistheway.io/user-story/to-build-ci-cd-that-fits-advanced-and-unique-use-cases/) - [jenkinsistheway.io: Alert Management](https://jenkinsistheway.io/user-story/jenkins-is-the-way-to-improve-solution-development/) A Jenkins-based tool receives pipeline alerts and, in turn, determines who to notify. -- [jenkinsistheway.io: Jenkins is the way to DevSecOps. Cybersecurity CI/CD](https://jenkinsistheway.io/user-story/to-devsecops/) A cumbersome legacy process for building, testing and releasing software is a huge challenge for a global cybersecurity company that has to stay ahead of hackers, fraudsters and trends in cybercrime. +- [jenkinsistheway.io: Jenkins is the way to DevSecOps. Cybersecurity CI/CD](https://jenkinsistheway.io/user-story/to-devsecops/) A cumbersome legacy process for building, testing and releasing software is a huge challenge for a global cybersecurity company that has to stay ahead of hackers, fraudsters and trends in cybercrime.
[![Jenkins Is The Way](images/Jenkins-is-the-Way.png)](https://jenkinsistheway.io) diff --git a/docs/kubernetes-alternatives.md b/docs/kubernetes-alternatives.md index af8d9fb6..3055b7ee 100644 --- a/docs/kubernetes-alternatives.md +++ b/docs/kubernetes-alternatives.md @@ -74,6 +74,7 @@ - [linkedin.com: Docker Series : Docker Swarm - Lionel GURRET](https://www.linkedin.com/pulse/docker-series-swarm-lionel-gurret/) - [cloudsavvyit.com: What is Docker Swarm Mode and When Should You Use It?](https://www.cloudsavvyit.com/13049/what-is-docker-swarm-mode-and-when-should-you-use-it/) - [==swarmlet/swarmlet: Swarmlet==](https://github.com/swarmlet/swarmlet) A self-hosted, open-source Platform as a Service that enables easy swarm deployments, load balancing, automatic SSL, metrics, analytics and more. +- [thinksys.com: Docker Swarm vs. Kubernetes: Comparison 2022](https://www.thinksys.com/devops/docker-swarm-vs-kubernetes-comparison/) ## Simplenetes @@ -83,6 +84,7 @@ - [blog.opstree.com: A Comparison Between Various Container Orchestration Services! (ECS vs Kubernetes)](https://blog.opstree.com/2021/06/21/a-comparison-between-various-container-orchestration-services-ecs-vs-kubernetes/) - [itprotoday.com: 4 Alternatives to Kubernetes Container Orchestrator](https://www.itprotoday.com/hybrid-cloud-and-multicloud/4-alternatives-kubernetes-container-orchestrator) While nearly nine out of 10 organizations use Kubernetes, there are alternatives to consider if looking for a container orchestrator in 2022. +- [portainer.io: Kubernetes vs Docker Swarm vs Nomad - the orchestrator wars continue?](https://www.portainer.io/blog/orchestrator-wars-continue) ## Images diff --git a/docs/kubernetes-autoscaling.md b/docs/kubernetes-autoscaling.md index 49fdce12..1d670d40 100644 --- a/docs/kubernetes-autoscaling.md +++ b/docs/kubernetes-autoscaling.md @@ -3,6 +3,7 @@ 1. [Introduction](#introduction) 2. [Cluster Autoscaler Kubernetes Tool](#cluster-autoscaler-kubernetes-tool) 3. [HPA and VPA](#hpa-and-vpa) + 1. [Kubernetes Scale to Zero](#kubernetes-scale-to-zero) 4. [Cluster Autoscaler and Helm](#cluster-autoscaler-and-helm) 5. [KEDA Kubernetes-based Event-Driven Autoscaler](#keda-kubernetes-based-event-driven-autoscaler) 6. [Cluster Autoscaler and DockerHub](#cluster-autoscaler-and-dockerhub) @@ -85,6 +86,12 @@ - [medium.com/@kewynakshlley: Performance evaluation of the autoscaling strategies vertical and horizontal using Kubernetes](https://medium.com/@kewynakshlley/performance-evaluation-of-the-autoscaling-strategies-vertical-and-horizontal-using-kubernetes-42d9a1663e6b) Scalable applications may adopt horizontal or vertical autoscaling to dynamically provision resources in the cloud. To help to choose the best strategy, this work aims to compare the performance of horizontal and vertical autoscaling in Kubernetes. Through measurement experiments using synthetic load to a web application, the horizontal was shown more efficient, reacting faster to the load variation and resulting in a lower impact on the application response time. - [itnext.io: Stupid Simple Scalability](https://itnext.io/stupid-simple-scalability-dc4a7fbe67d6) - [faun.pub: Scaling Your Application Using Kubernetes - Harness | Pavan Belagatti](https://faun.pub/scaling-your-application-using-kubernetes-9ad0d6bcf0d6) +- [dnastacio.medium.com: Infinite scaling with containers and Kubernetes](https://dnastacio.medium.com/kubernetes-resources-1a1fa1e72dcf) The article starts with a recap of Kubernetes resource management and its core concepts of requests and limits. Then it discusses those static limits in the realm of pod autoscalers, such as HPA, VPA, and KPA. + +### Kubernetes Scale to Zero + +- [dzone: Scale to Zero With Kubernetes with KEDA and/or Knative](https://dzone.com/articles/scale-to-zero-with-kubernetes) This article reviews how Kubernetes provides the platform capabilities for dynamic deployment, scaling, and management in Cloud-native applications. +- [==dev.to/danielepolencic: Request-based autoscaling in Kubernetes: scaling to zero==](https://dev.to/danielepolencic/request-based-autoscaling-in-kubernetes-scaling-to-zero-2i73) ## Cluster Autoscaler and Helm diff --git a/docs/kubernetes-client-libraries.md b/docs/kubernetes-client-libraries.md index 738029d2..88b7642d 100644 --- a/docs/kubernetes-client-libraries.md +++ b/docs/kubernetes-client-libraries.md @@ -36,6 +36,12 @@ - [github.com/kubernetes-client/python-base](https://github.com/kubernetes-client/python-base) - [==medium.com/@dimitrijevskiv: Monitor Kubernetes pod status from a Jenkins pipeline==](https://medium.com/@dimitrijevskiv/monitor-kubernetes-pod-status-from-a-jenkins-pipeline-e25c744d944d) - [blog.devgenius.io: Automate Kubernetes With Python 🌟](https://blog.devgenius.io/automate-kubernetes-with-python-2150c290afe7) The Kubernetes Python module is a very powerful client that allows you to easily automate interactions with a Kubernetes cluster. +- [martinheinz.dev/blog/73: Automate All the Boring Kubernetes Operations with Python 🌟](https://martinheinz.dev/blog/73) In this article, you will look at how you can leverage the Kubernetes Python Client library to automate any tasks. Examples: + - Triggering a rollout + - Scaling a deployment + - Applying taints + - Retrieving metrics + - Backing up all resources in a namespace ## Java Clients for Kubernetes diff --git a/docs/kubernetes-networking.md b/docs/kubernetes-networking.md index fc2f2365..005348f2 100644 --- a/docs/kubernetes-networking.md +++ b/docs/kubernetes-networking.md @@ -131,6 +131,7 @@ - Intra pod networking & pause container - Kubernetes networking model - [==dev.to: Tune up your Kubernetes Application Performance with a small DNS Configuration==](https://dev.to/imjoseangel/tune-up-your-kubernetes-application-performance-with-a-small-dns-configuration-1o46) +- [medium.com/@mehmetodabashi: Kubernetes networking and service object: Understanding ClusterIp and nodePort with hands on study](https://medium.com/@mehmetodabashi/kubernetes-networking-and-service-object-understanding-clusterip-and-nodeport-with-hands-on-study-90cfeaf66e8c) ## NetworkPolicy diff --git a/docs/kubernetes-on-premise.md b/docs/kubernetes-on-premise.md index 21801479..a76062eb 100644 --- a/docs/kubernetes-on-premise.md +++ b/docs/kubernetes-on-premise.md @@ -14,9 +14,10 @@ 12. [ClusterAPI](#clusterapi) 13. [Microk8s](#microk8s) 14. [k8s-tew](#k8s-tew) -15. [Zarf. DevSecOps for Air Gap Systems](#zarf-devsecops-for-air-gap-systems) -16. [Kubernetes Operating Systems](#kubernetes-operating-systems) -17. [Kubernetes Distributions](#kubernetes-distributions) +15. [Project Neco](#project-neco) +16. [Zarf. DevSecOps for Air Gap Systems](#zarf-devsecops-for-air-gap-systems) +17. [Kubernetes Operating Systems](#kubernetes-operating-systems) +18. [Kubernetes Distributions](#kubernetes-distributions) 1. [Red Hat OpenShift](#red-hat-openshift) 2. [Rancher](#rancher) 3. [Weave Kubernetes Platform](#weave-kubernetes-platform) @@ -151,16 +152,21 @@ $ sudo mv kops-linux-amd64 /usr/local/bin/kops - [MicroK8s & Kubernetes security benchmark from CIS](https://github.com/didier-durand/microk8s-kube-bench) - [cloudsavvyit.com: How to run your own kubernetes cluster with Microk8s](https://www.cloudsavvyit.com/13024/how-to-run-your-own-kubernetes-cluster-with-microk8s) - [thenewstack.io: Deploy Microk8s and the Kubernetes Dashboard for K8s Development](https://thenewstack.io/deploy-microk8s-and-the-kubernetes-dashboard-for-k8s-development/) +- [thenewstack.io: Deploy a Kubernetes Cluster on Ubuntu Server with Microk8s](https://thenewstack.io/deploy-a-kubernetes-cluster-on-ubuntu-server-with-microk8s/) ## k8s-tew - [**k8s-tew**](https://github.com/darxkies/k8s-tew) Kubernetes is a fairly complex project. For a newbie it is hard to understand and also to use. While [Kelsey Hightower’s Kubernetes The Hard Way](https://github.com/kelseyhightower/kubernetes-the-hard-way), on which this project is based, helps a lot to understand Kubernetes, it is optimized for the use with Google Cloud Platform. +## Project Neco + +- [cybozu-go/neco](https://github.com/cybozu-go/neco) Neco is a project to build and maintain highly automated on-premise data centers using Kubernetes. A Neco data center consists of a few (from 3 to 5) management servers called boot servers and thousands of servers for Kubernetes clusters. + ## Zarf. DevSecOps for Air Gap Systems - [defenseunicorns/zarf](https://github.com/defenseunicorns/zarf) DevSecOps for Air Gap & Limited-Connection Systems. Zarf massively simplifies the setup & administration of kubernetes clusters, cyber systems & workloads that support DevSecOps "across the air gap". -## Kubernetes Operating Systems +## Kubernetes Operating Systems - [kubedex.com: Kubernetes Operating Systems 🌟](https://kubedex.com/kubernetes-operating-systems/) @@ -168,7 +174,7 @@ $ sudo mv kops-linux-amd64 /usr/local/bin/kops - [acloudguru.com: Which Kubernetes distribution is right for you?](https://acloudguru.com/blog/engineering/which-kubernetes-distribution-is-right-for-you) -### Red Hat OpenShift +### Red Hat OpenShift - [Openshift Container Platform](openshift.md) - [OKD](https://www.okd.io/) The Community Distribution of Kubernetes that powers Red Hat OpenShift diff --git a/docs/kubernetes-operators-controllers.md b/docs/kubernetes-operators-controllers.md index b79044ea..9b85bfd7 100644 --- a/docs/kubernetes-operators-controllers.md +++ b/docs/kubernetes-operators-controllers.md @@ -117,6 +117,7 @@ - Don't have a live-reload feature - Use `subPath` while mounting a ConfigMap or Secret - Use Projected Volumes +- [==faun.pub: A Definitive guide to Kubernetes Operator β€” The crawl!==](https://faun.pub/a-definitive-guide-to-kubernetes-operator-the-crawl-7647b278c28b) ## Creating Kubernetes operator using Kubebuilder diff --git a/docs/kubernetes-security.md b/docs/kubernetes-security.md index 3c02b1c6..607580ac 100644 --- a/docs/kubernetes-security.md +++ b/docs/kubernetes-security.md @@ -24,6 +24,7 @@ 16. [Security Profiles Operator](#security-profiles-operator) 17. [EKS Security](#eks-security) 18. [CVE](#cve) + 1. [Official Kubernetes CVE Feed](#official-kubernetes-cve-feed) 19. [Videos](#videos) 20. [Tweets](#tweets) @@ -227,6 +228,11 @@ - [==cloud.redhat.com: A Guide to Secrets Management with GitOps and Kubernetes== 🌟](https://cloud.redhat.com/blog/a-guide-to-secrets-management-with-gitops-and-kubernetes) **This article will discuss two architectural approaches to managing secrets with GitOps: encrypted secrets stored in Git and storing a reference to secrets in Git** - [itnext.io: Vault cluster with auto unseal on Kubernetes](https://itnext.io/vault-cluster-with-auto-unseal-on-kubernetes-8e469f9cdcfd) - [pjame-fb.medium.com: Kubernetes Secrets from Secrets Manager using External Secrets Operators](https://pjame-fb.medium.com/kubernetes-secrets-from-secrets-manager-using-external-secrets-operators-4819562c3b02) In this article, you will learn how to store your credentials in the Secrets Manager and automatically retrieve them for creating Kubernetes Secrets using External Secrets. +- [mixi-developers.mixi.co.jp: Comparing External Secrets Operator with Secret Storage CSI as Kubernetes External Secrets is Deprecated](https://mixi-developers.mixi.co.jp/compare-eso-with-secret-csi-402bf37f20bc?gi=a7ce4398a8d7) In this article, you will compare the External Secrets Operator with Secret Storage CSI for using external secrets in a Kubernetes cluster. You will compare: + - Architecture + - Authorization management + - Resource usage + - GitOps friendliness ## Encrypting the certificate for Kubernetes. SSL certificates with Let's Encrypt in Kubernetes Ingress via cert-manager @@ -272,6 +278,7 @@ - [==learnk8s.io/rbac-kubernetes: Limiting access to Kubernetes resources with RBAC== 🌟](https://learnk8s.io/rbac-kubernetes) - [==medium.com/@danielepolencic: How does RBAC work in kubernetes== 🌟](https://medium.com/@danielepolencic/how-does-rbac-work-in-kubernetes-d50dd34771ca) A short and visual thread on how Kubernetes RBAC works in Kubernetes - [==dominik-tornow.medium.com: Inside Kubernetes RBAC==](https://dominik-tornow.medium.com/inside-kubernetes-rbac-9988b08a738a) +- [==medium.com/@jtdv01: Kubernetes Authorization and Role Based Access Controls== 🌟](https://medium.com/@jtdv01/kubernetes-authorization-and-role-based-access-controls-ca0b7acc17a4) ### Tools @@ -390,6 +397,11 @@ Kubernetes supports several authentication methods out-of-the-box, such as X.509 - [hackerone.com: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces](https://hackerone.com/reports/1249583) - [blog.lightspin.io: NGINX Custom Snippets CVE-2021-25742](https://blog.lightspin.io/nginx-custom-snippets-cve-2021-25742) +### Official Kubernetes CVE Feed + +- [==kubernetes.io: Official CVE Feed== 🌟](https://kubernetes.io/docs/reference/issues-security/official-cve-feed/) +- [kubernetes.io: Announcing the Auto-refreshing Official Kubernetes CVE Feed](https://kubernetes.io/blog/2022/09/12/k8s-cve-feed-alpha/) + ## Videos ??? note "Click to expand!" diff --git a/docs/kubernetes-storage.md b/docs/kubernetes-storage.md index 04d7872a..8b678b92 100644 --- a/docs/kubernetes-storage.md +++ b/docs/kubernetes-storage.md @@ -21,14 +21,16 @@ 13. [MinIO](#minio) 14. [NetApp Data Store](#netapp-data-store) 15. [Stork Storage Operator](#stork-storage-operator) + 16. [Curve - OpenCurve](#curve---opencurve) 7. [OpenShift Container Storage Operator (OCS)](#openshift-container-storage-operator-ocs) 1. [OCS 3 (OpenShift 3)](#ocs-3-openshift-3) 2. [OCS 4 (OpenShift 4)](#ocs-4-openshift-4) 8. [Kubestr](#kubestr) 9. [VolSync](#volsync) -10. [Images](#images) -11. [Tweets](#tweets) -12. [Videos](#videos) +10. [Discoblocks](#discoblocks) +11. [Images](#images) +12. [Tweets](#tweets) +13. [Videos](#videos) ## Introduction @@ -185,6 +187,10 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3. - [libopenstorage/stork: Stork - Storage Operator Runtime for Kubernetes](https://github.com/libopenstorage/stork) Stork - Storage Orchestration Runtime for Kubernetes +### Curve - OpenCurve + +- [Curve: opencurve.io](https://opencurve.io) Curve is a high-performance, lightweight-operation, cloud-native open source distributed storage system for Kubernetes/OpenStack. Curve can also be used as a cloud storage middleware using S3-compatible object storage as a data storage engine. + ## OpenShift Container Storage Operator (OCS) - [State of OpenShift Container Storage](https://www.openshift.com/blog/state-of-openshift-container-storage-eran-tamir-and-duncan-hardie-red-hat) @@ -219,7 +225,11 @@ edge. MinIO is software-defined and is 100% open source under GNU AGPL v3. ## VolSync - [VolSync 🌟](https://github.com/backube/volsync) Asynchronous data replication for Kubernetes volumes. VolSync asynchronously replicates Kubernetes persistent volumes between clusters using either rsync or rclone. It also supports creating backups of persistent volumes via restic. -- [next.redhat.com: Introducing VolSync: your data, anywhere](https://next.redhat.com/2021/08/23/introducing-volsync-your-data-anywhere/) VolSync, a new storage-agnostic utility for exporting and importing objects from one Kubernetes namespace to another, even across clusters! +- [next.redhat.com: Introducing VolSync: your data, anywhere](https://next.redhat.com/2021/08/23/introducing-volsync-your-data-anywhere/) VolSync, a new storage-agnostic utility for exporting and importing objects from one Kubernetes namespace to another, even across clusters! + +## Discoblocks + +- [Discoblocks: ondat.io/discoblocks](https://www.ondat.io/discoblocks) - [github.com/ondat/discoblocks](https://github.com/ondat/discoblocks) Discoblocks is an open-source declarative disk configuration system for Kubernetes helping to automate CRUD (Create, Read, Update, Delete) operations for cloud disk device resources attached to Kubernetes cluster nodes. ## Images diff --git a/docs/kubernetes-tools.md b/docs/kubernetes-tools.md index a148775e..587f0bf2 100644 --- a/docs/kubernetes-tools.md +++ b/docs/kubernetes-tools.md @@ -527,6 +527,7 @@ - [medium.com/@michaeljguarino: How we Created an in-Browser Kubernetes Experience](https://medium.com/@michaeljguarino/how-we-created-an-in-browser-kubernetes-experience-58c065cda803) - [pan-net-security/kcount](https://github.com/pan-net-security/kcount) kcount counts Kubernetes objects across namespaces and clusters. It can be used as a CLI tool or as a daemon (service) exposing Prometheus metrics. - [cloudtty/cloudtty: A Kubernetes Cloud Shell (Web Terminal) Operator](https://github.com/cloudtty/cloudtty) A Friendly Kubernetes CloudShell (Web Terminal) ! +- [jthomperoo/k8shorizmetrics](https://github.com/jthomperoo/k8shorizmetrics) k8shorizmetrics is a library that provides the internal workings of the Kubernetes Horizontal Pod Autoscaler (HPA) wrapped up in a simple API. The project allows querying metrics just as the HPA does, and also running the calculations. ## Penetration Testing Tools diff --git a/docs/kubernetes-troubleshooting.md b/docs/kubernetes-troubleshooting.md index 3122805d..cf720c32 100644 --- a/docs/kubernetes-troubleshooting.md +++ b/docs/kubernetes-troubleshooting.md @@ -8,9 +8,11 @@ 6. [OOM Kills](#oom-kills) 7. [Stuck Namespace](#stuck-namespace) 8. [Debugging Techniques and Strategies. Debugging with ephemeral containers](#debugging-techniques-and-strategies-debugging-with-ephemeral-containers) -9. [Slides](#slides) -10. [Images](#images) -11. [Tweets](#tweets) +9. [Troubleshooting Tools](#troubleshooting-tools) + 1. [Komodor](#komodor) +10. [Slides](#slides) +11. [Images](#images) +12. [Tweets](#tweets) ## Introduction @@ -25,7 +27,6 @@ - [levelup.gitconnected.com: 5 tips for troubleshooting apps on Kubernetes](https://levelup.gitconnected.com/5-tips-for-troubleshooting-apps-on-kubernetes-835b6b539c24) - [medium: Common Kubernetes Errors Made by Beginners [2021] 🌟](https://medium.com/nerd-for-tech/common-kubernetes-errors-made-by-beginners-274b50e18a01) - [cloud.redhat.com: Troubleshooting Sandboxed Containers Operator](https://cloud.redhat.com/blog/sandboxed-containers-operator-from-zero-to-hero-the-hard-way-part-2) -- [komodor.com: Kubernetes Troubleshooting: The Complete Guide](https://komodor.com/learn/kubernetes-troubleshooting-the-complete-guide/) - [andydote.co.uk: The Problem with CPUs and Kubernetes](https://andydote.co.uk/2021/06/02/os-cpus-and-kubernetes/) - [kinvolk.io: Investigating Kubernetes performance issues with BPF](https://kinvolk.io/blog/2020/04/inside-kinvolk-labs-investigating-kubernetes-performance-issues-with-bpf/) - [medium: Better Debugging Environment for your Micro-Services](https://medium.com/@moshe.beladev.mb/better-debugging-environment-for-your-micro-services-9420a71b8a37) @@ -118,6 +119,13 @@ - [==heka-ai.medium.com: Introduction to Debugging: locally and live on Kubernetes with VSCode== 🌟](https://heka-ai.medium.com/introduction-to-debugging-locally-and-live-on-kubernetes-8c8ecd3acbaa) In this article, you'll learn how to debug your code in real-time on a Pod running on Kubernetes using VS Code - [iximiuz.com: Kubernetes Ephemeral Containers and kubectl debug Command 🌟](https://iximiuz.com/en/posts/kubernetes-ephemeral-containers/) Learn how to use Ephemeral Containers to debug Kubernetes workloads with and without the kubectl debug command +## Troubleshooting Tools + +### Komodor + +- [==komodor.com==](https://komodor.com) Turn troubleshooting chaos into clarity. Komodor is an observability tool that gives you insight into what’s happening with your clusters and workloads. It integrates tools that we all use, like Datadog, Okta, LaunchDarkly, and PagerDuty. +- [==komodor.com: Kubernetes Troubleshooting: The Complete Guide== 🌟](https://komodor.com/learn/kubernetes-troubleshooting-the-complete-guide/) + ## Slides ??? note "Click to expand!" diff --git a/docs/kubernetes.md b/docs/kubernetes.md index 061209a2..7bdf2f66 100644 --- a/docs/kubernetes.md +++ b/docs/kubernetes.md @@ -103,6 +103,10 @@ 30. [Tweets 2](#tweets-2) 31. [Memes](#memes) +
+
Hugo Boomin ⚑️ πŸ”₯ πŸ’₯ Β· Jimmy Sax - Live At Nikki Beach St Tropez (Opus - Eric Prydz)
+
+ ## Introduction - [Wikipedia.org: Kubernetes](https://en.wikipedia.org/wiki/Kubernetes) @@ -224,6 +228,8 @@ - [==myhistoryfeed.medium.com: Kubernetes Terminologies You Should Know!== 🌟🌟🌟](https://myhistoryfeed.medium.com/kubernetes-terminologies-you-should-know-d5372718006b) - [medium.com/@litombeg: Kubernetes High-Level Architecture](https://medium.com/@litombeg/kubernetes-high-level-architecture-8a39456c2023) - [Top 5 kubernetes challenges and their solutions](https://middleware.io/blog/kubernetes-challenges-and-solutions/) +- [==jaffarshaik.medium.com: Kubernetes Architecture and components== 🌟](https://jaffarshaik.medium.com/kubernetes-architecture-and-components-bf637dbd0526) +- [syedasadrazadevops.medium.com: Deep Dive Into Kubernetes: Who to run pod, node container in Kubernetes (K8s)](https://syedasadrazadevops.medium.com/deep-dive-into-kubernetes-way-to-know-about-kubernetes-6a423c262b61) ### Kubernetes Jobs Market @@ -371,7 +377,6 @@ - [devopscube.com: 10 Key Considerations for Kubernetes Cluster Design & Setup 🌟](https://devopscube.com/key-considerations-kubernetes-cluster-design-setup/) - [blog.pixielabs.ai: Building Kubernetes Native SaaS applications: iterating quickly by deploying in-cluster data planes](https://blog.pixielabs.ai/hybrid-architecture/hybrid-architecture/) - [itnext.io: CKS Exam Series #9 RBAC v2](https://itnext.io/cks-exam-series-9-rbac-v2-23ee24dd77cd) Kubernetes CKS Example Exam Question Series -- [dzone: Scale to Zero With Kubernetes with KEDA and/or Knative](https://dzone.com/articles/scale-to-zero-with-kubernetes) This article reviews how Kubernetes provides the platform capabilities for dynamic deployment, scaling, and management in Cloud-native applications. - [infoq.com: Experts Discuss Top Kubernetes Trends and Production Challenges](https://www.infoq.com/articles/kubernetes-trends-and-challenges/) - [blog.appstack.one: How to run Ghost blog inside Kubernetes](https://blog.appstack.one/how-to-run-ghost-blog-inside-kubernetes/) - [learnk8s.io: Scaling Celery workers with RabbitMQ on Kubernetes](https://learnk8s.io/scaling-celery-rabbitmq-kubernetes) In this article, you will explore how to use Kubernetes and KEDA to scale Celery workers based on the number of messages in a RabbitMQ queue. @@ -686,6 +691,7 @@ - [blog.devgenius.io: K8s β€” Pod Life Cycle (Part 2)](https://blog.devgenius.io/k8s-pod-life-cycle-part-2-eb7de7fb507f) In this article you'll learn Pod status, restart strategy, container initialization, Hooks for Pod, Pod Health check and resource configuration. - [betterprogramming.pub: Understanding Kubernetes Multi-Container Pod Patterns](https://betterprogramming.pub/understanding-kubernetes-multi-container-pod-patterns-577f74690aee) A guide to Sidecar, Ambassador, and Adapter patterns with hands-on examples. - [medium.com/@danielaaronw: K8s Pod Anti-affinity](https://medium.com/@danielaaronw/k8s-pod-anti-affinity-dd2667a20c5f) How to ensure high availability when scheduling pods on a kubernetes cluster. +- [mouliveera.medium.com: How to update configmap on POD without restart](https://mouliveera.medium.com/how-to-update-configmap-on-pod-without-restart-be3c0b4433af) #### Kubernetes ConfigMaps @@ -857,6 +863,7 @@ - [blog.devgenius.io: Kubernetes Blue-Green Deployment](https://blog.devgenius.io/kubernetes-blue-green-deployment-a69ed17cd4cd) - [prakashkumar0301.medium.com: Blue-Green Deployment with Kubernetes](https://prakashkumar0301.medium.com/blue-green-deployment-with-kubernetes-a37a534a2ef4) - [emirayhan.medium.com: Kubernetes (k8s) Deployment Strategies](https://emirayhan.medium.com/kubernetes-k8s-deployment-strategies-eb3a0f5cbc49) +- [faun.pub: Kubernetes Deployment Strategies](https://faun.pub/kubernetes-deployment-strategies-f36e7e4d2be) In this post, we will delve into Kubernetes (K8s) deployment concepts and some common strategies, looking at the advantages and disadvantages of each. A suitable deployment strategy enables you to minimize downtime, enhance your customer experience, and increase reliability when releasing your application. ### Kubernetes API @@ -1553,6 +1560,8 @@

When it comes to YAML manifests for Kubernetes, is it Best Practice to create individual YAML files for each object (namespace, secret, configmap, deployment, statefulset...) or do people put everything in the one YAML?

— Michael Cade (@MichaelCade1) August 11, 2022

It's funny: everyone thinks CPU requests are only used for scheduling (WRONG) and memory requests determine who gets OOMKilled (WRONG) but it's actually the opposite!

At runtime, memory requests do nothing, but CPU requests DO.#kubernetes is funny like that

— Natan Yellin (@aantn) August 27, 2022
+ +

Reducing infrastructure costs boils down to turning apps off when you don't use them

That's easy to do manually, but how to turn them on automatically when you need them?

You can do so with a scale-to-zero strategy

Let me show you how to implement it in Kubernetes pic.twitter.com/YDqbAQlWUK

— Daniele Polencic (@danielepolencic) September 12, 2022
@@ -1582,6 +1591,8 @@

Container orchestration competition pic.twitter.com/JPDu4BWhgZ

— memenetes (@memenetes) March 28, 2022

Watching devs using Kubernetes pic.twitter.com/uxGr2bP98c

— memenetes (@memenetes) April 4, 2022
+ +

When you are the only one that knows Kubernetes and are asked to help pic.twitter.com/VIomvubkkj

— memenetes (@memenetes) September 12, 2022
diff --git a/docs/managed-kubernetes-in-public-cloud.md b/docs/managed-kubernetes-in-public-cloud.md index eba4a367..84eb21f3 100644 --- a/docs/managed-kubernetes-in-public-cloud.md +++ b/docs/managed-kubernetes-in-public-cloud.md @@ -110,7 +110,7 @@ - [AWS Load Balancer Controller 🌟](https://kubernetes-sigs.github.io/aws-load-balancer-controller) - [Updating a managed node group](https://docs.aws.amazon.com/eks/latest/userguide/update-managed-node-group.html) amazon eks managed node groups now supports parallel node upgrades - [particule.io: Create Kubernetes federated clusters on AWS](https://particule.io/en/blog/aws-federated-eks/) -- [==aws.github.io/aws-eks-best-practices== 🌟](https://aws.github.io/aws-eks-best-practices/) +- [==aws.github.io/aws-eks-best-practices== 🌟](https://aws.github.io/aws-eks-best-practices/) __The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS.__ - [aws.github.io/aws-eks-best-practices: Networking in EKS](https://aws.github.io/aws-eks-best-practices/reliability/docs/networkmanagement) - [betterprogramming.pub: Amazon EKS Is Eating My IPs!](https://betterprogramming.pub/amazon-eks-is-eating-my-ips-e18ea057e045) Understand how AWS EKS manages IP addresses and what you can do about it - [engineering.salesforce.com: Optimizing EKS networking for scale](https://engineering.salesforce.com/optimizing-eks-networking-for-scale-1325706c8f6d) @@ -158,11 +158,13 @@ - [dev.to: One technique to save your AWS EKS IP addresses 10x](https://dev.to/timtsoitt/one-technique-to-save-your-aws-eks-ip-addresses-10x-2ocn) To increase the number of available IP addresses in your EKS cluster you can: - Assign address prefixes to your ENI and - Enable the CNI custom networking feature -- [aws.amazon.com: Autoscaling EKS on Fargate with custom metrics](https://aws.amazon.com/blogs/containers/autoscaling-eks-on-fargate-with-custom-metrics/) Autoscaling is an approach to automatically scale up or down workloads based on the resource usage. In Kubernetes, the Horizontal Pod Autoscaler (HPA) can scale pods based on observed CPU utilization and memory usage. Starting with Kubernetes 1.7, an aggregation layer was introduced that allows third-party applications to extend the Kubernetes API by registering themselves as API add-ons. Such an add-on can implement the Custom Metrics API and enable HPA access to arbitrary metrics. What follows is a step-by-step guide on configuring HPA with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate. +- [aws.amazon.com: Autoscaling EKS on Fargate with custom metrics](https://aws.amazon.com/blogs/containers/autoscaling-eks-on-fargate-with-custom-metrics/) What follows is a step-by-step guide on configuring the Horizontal Pod Autoscaler with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate. + - Autoscaling is an approach to automatically scale up or down workloads based on the resource usage. In Kubernetes, the Horizontal Pod Autoscaler (HPA) can scale pods based on observed CPU utilization and memory usage. Starting with Kubernetes 1.7, an aggregation layer was introduced that allows third-party applications to extend the Kubernetes API by registering themselves as API add-ons. Such an add-on can implement the Custom Metrics API and enable HPA access to arbitrary metrics. What follows is a step-by-step guide on configuring HPA with metrics provided by Prometheus to automatically scale pods running on Amazon EKS on AWS Fargate. - [==opssorry.substack.com: GitOps: A Simple Approach to using AWS Secrets Manager with Kubernetes== 🌟](https://opssorry.substack.com/p/gitops-a-simple-approach-to-using) - [medium.com/scout24-engineering: How did we upgrade our EKS clusters from 1.15 to 1.22 without K8s knowledge?](https://medium.com/scout24-engineering/how-did-we-upgrade-our-eks-clusters-from-1-15-to-1-22-without-k8s-knowledge-2c96c1a94cc1) - [==aws.github.io/aws-eks-best-practices: Amazon EKS Best Practices Guides== 🌟🌟🌟](https://aws.github.io/aws-eks-best-practices/networking/index/) **Welcome to the EKS Best Practices Guides. The primary goal of this project is to offer a set of best practices for day 2 operations for Amazon EKS. We elected to publish this guidance to GitHub so we could iterate quickly, provide timely and effective recommendations for variety of concerns, and easily incorporate suggestions from the broader community.** - - [==Amazon EKS Best Practices Guide for Networking==](https://aws.github.io/aws-eks-best-practices/networking/index/) Intro to Amazon VPC Container Network Interface (VPC CNI) in the context of Kubernetes cluster networking. VPC CNI is the default networking plugin supported by EKS. The VPC CNI is highly configurable to support different use cases. + - [==Amazon EKS Best Practices Guide for Networking==](https://aws.github.io/aws-eks-best-practices/networking/index/) Intro to Amazon VPC Container Network Interface (VPC CNI) in the context of Kubernetes cluster networking. VPC CNI is the default networking plugin supported by EKS. The VPC CNI is highly configurable to support different use cases. +- [medium.com/@chandranathmondal: ==Self-service Amazon EKS Cluster provisioning with Kubernetes configuration applied== 🌟](https://medium.com/@chandranathmondal/self-service-amazon-eks-cluster-provisioning-with-kubernetes-configuration-applied-372bce839d7) ### EKS and IaC with Crossplane diff --git a/docs/message-queue.md b/docs/message-queue.md index 2acf4f08..10b361bf 100644 --- a/docs/message-queue.md +++ b/docs/message-queue.md @@ -344,6 +344,8 @@ comsysto about their usage of Debezium, touching on many details like outbox pat - [medium.com/altitudehq: Kafka retries and maintaining the order of retry events 🌟](https://medium.com/altitudehq/kafka-retries-and-maintain-order-of-retry-events-313482044351) - [medium.com/cloudnesil: Kafka Streams State Store at Scale](https://medium.com/cloudnesil/kafka-streams-state-store-at-scale-390d9717b42a) Managing Interactive Queries on multiple application instances Alternative solutions and their comparisons. - [towardsdev.com: Performance Testing Your Kubernetes Kafka Cluster](https://towardsdev.com/performance-testing-your-kubernetes-kafka-cluster-95f6e7d8dfc5) In this article, you will learn how to benchmark Apache Kafka instances running on Kubernetes against parallel loads. +- [==medium.com/@hardiktaneja_99752: Lessons after running Kafka in production== 🌟](https://medium.com/@hardiktaneja_99752/lessons-after-running-kafka-in-production-626974ffd700) TLDR: Have atleast as many paritions (P) as max number of consumers(C), but number of partitions should always be multiple of number of consumers. P = n * C, n =1,2,3… +- [==betterprogramming.pub: Monitoring Kafka Applications β€” Implementing Healthchecks and Tracking Lag==](https://betterprogramming.pub/monitoring-kafkaapplications-implementing-healthchecks-and-tracking-lag-3976cc6f00d5) For KafkaConsumer, Streams, Spring-Kafka, Kafka-Connect #### Kafka Tools diff --git a/docs/mlops.md b/docs/mlops.md index 95ea7a41..346f43d5 100644 --- a/docs/mlops.md +++ b/docs/mlops.md @@ -8,12 +8,14 @@ 6. [Azure ML](#azure-ml) 7. [KServe Cloud Native Model Server](#kserve-cloud-native-model-server) 8. [Data Science](#data-science) -9. [Other Tools](#other-tools) -10. [Samples](#samples) -11. [ML Courses](#ml-courses) -12. [ML Competitions and Challenges](#ml-competitions-and-challenges) -13. [Polls](#polls) -14. [Tweets](#tweets) +9. [Machine Learning workloads in kubernetes using Nix and NVIDIA](#machine-learning-workloads-in-kubernetes-using-nix-and-nvidia) +10. [Other Tools](#other-tools) +11. [Samples](#samples) +12. [ML Courses](#ml-courses) +13. [ML Competitions and Challenges](#ml-competitions-and-challenges) +14. [Polls](#polls) +15. [Tweets](#tweets) + ## Introduction. MLOps - [cd.foundation: Announcing the CD Foundation MLOps SIG](https://cd.foundation/blog/2020/02/11/announcing-the-cd-foundation-mlops-sig/) @@ -108,6 +110,12 @@ - [towardsdatascience.com: From DevOps to MLOPS: Integrate Machine Learning Models using Jenkins and Docker](https://towardsdatascience.com/from-devops-to-mlops-integrate-machine-learning-models-using-jenkins-and-docker-79034dbedf1) How to automate data science code with Jenkins and Docker: MLOps = ML + DEV + OPS - [towardsdatascience.com: How to Structure a Data Science Project for Readability and Transparency](https://towardsdatascience.com/how-to-structure-a-data-science-project-for-readability-and-transparency-360c6716800) And How to Create One in One Line of Code +## Machine Learning workloads in kubernetes using Nix and NVIDIA + +- [canvatechblog.com: Supporting GPU-accelerated Machine Learning with Kubernetes and Nix](https://canvatechblog.com/supporting-gpu-accelerated-machine-learning-with-kubernetes-and-nix-7c1da8e42f61) In this article, you'll learn how to package and run machine learning workloads in Kubernetes using Nix and NVIDIA + - [Nix](https://nixos.org/manual/nix/stable/) + - [github.com/NVIDIA/nvidia-docker: NVIDIA/nvidia-docker/volumes.go](https://github.com/NVIDIA/nvidia-docker/blob/8c0eeba474cace48fdb8216f518063db2bd2d4d1/tools/src/nvidia/volumes.go#L103) NVIDIA’s documentation is disappointingly evasive on what the β€œdriver” is, but we find a good answer in their official source code. + ## Other Tools - [bodywork-ml/bodywork-core: Bodywork](https://github.com/bodywork-ml/bodywork-core) is a command line tool that deploys machine learning pipelines to Kubernetes. It takes care of everything to do with containers and orchestration, so that you don't have to. **It is a more lightweight and simpler alternative when compared to tools like KubeFlow** diff --git a/docs/monitoring.md b/docs/monitoring.md index a9307043..0bab7ded 100644 --- a/docs/monitoring.md +++ b/docs/monitoring.md @@ -368,7 +368,8 @@ done - [==logz.io: Beginner’s Guide to OpenTelemetry== 🌟](https://logz.io/learn/opentelemetry-guide/) - [timescale.com: Kubernetes Observability in One Command: How to Generate and Store OpenTelemetry Traces Automatically](https://www.timescale.com/blog/generate-and-store-opentelemetry-traces-automatically/) If your microservices are written in languages currently supported by the OpenTelemetry Operator, you can start collecting and storing traces with minimal manual work. Learn how to do so with the tobs stack in Kubernetes. - [trstringer.com: Observability with OpenTelemetry Part 1 - Introduction](https://trstringer.com/otel-part1-intro/) -- A major component of theΒ [OpenTelemetry specification](https://github.com/open-telemetry/opentelemetry-specification)Β is **distributed tracing**.Β  + - [medium.com/apache-apisix: End-to-end tracing with OpenTelemetry](https://medium.com/apache-apisix/end-to-end-tracing-opentelemetry-a50fceafed74) +- A major component of theΒ [OpenTelemetry specification](https://github.com/open-telemetry/opentelemetry-specification)Β is **distributed tracing**. - **Tracing** is about analyzing, recording, and describing transactions. - **Distributed Tracing:** Troubleshooting requests between interconnected cloud-based microservices can’t always be done with logs and metrics alone. This is where distributed tracing comes into play: It provides developers with a detailed view of individual requests as they β€œhop” through a system of microservices. With **distributed tracing** you can: - Trace the path of a request as it travels across a complex system. diff --git a/docs/postman.md b/docs/postman.md index a4e95fff..c1f2e30b 100644 --- a/docs/postman.md +++ b/docs/postman.md @@ -2,8 +2,9 @@ 1. [Introduction](#introduction) 2. [Newman](#newman) -3. [KIE Server and Drools](#kie-server-and-drools) -4. [Alternatives. Rest Assured](#alternatives-rest-assured) +3. [Pynt API Security](#pynt-api-security) +4. [KIE Server and Drools](#kie-server-and-drools) +5. [Alternatives. Rest Assured](#alternatives-rest-assured) ## Introduction @@ -34,6 +35,10 @@ - [Newman](https://github.com/postmanlabs/newman) is a command-line collection runner for Postman - [blog.balasundar.com: Run Postman collections using Newman and Python](https://blog.balasundar.com/run-postman-collections-using-newman-and-python) +## Pynt API Security + +- [==Postman Pynt== 🌟](https://www.postman.com/pynt-io/workspace/pynt/overview) Pynt is a free API security solution which generates automated security tests from your existing functional test collection in a few minutes + ## KIE Server and Drools - [Drools](https://www.drools.org/) diff --git a/docs/python.md b/docs/python.md index b4b1294f..7bf6c225 100644 --- a/docs/python.md +++ b/docs/python.md @@ -232,6 +232,7 @@ - [==realpython.com/learning-paths: Python Learning Paths== 🌟🌟🌟](https://realpython.com/learning-paths/) Take your coding skills to the next level with Real Python’s accelerated study plans for beginner, intermediate, and advanced Python developers. - [superfastpython.com: Threading vs Multiprocessing in Python](https://superfastpython.com/threading-vs-multiprocessing-in-python/) - [betterprogramming.pub: Python List Comprehensions Are More Powerful Than You Might Think](https://betterprogramming.pub/python-list-comprehensions-are-more-powerful-than-you-might-think-3363a90e5bb0) Write better list comprehensions with the help of these unknown features and tricks +- [medium.com/@yonatanzunger: Advanced Python: Achieving High Performance with Code Generation 🌟🌟](https://medium.com/@yonatanzunger/advanced-python-achieving-high-performance-with-code-generation-796b177ec79) ## PHP vs Python diff --git a/docs/securityascode.md b/docs/securityascode.md index 5b486ce9..1f467fed 100644 --- a/docs/securityascode.md +++ b/docs/securityascode.md @@ -126,6 +126,13 @@ 4. Graceful shutdown - be able to handle a sigterm in kubernetes - [medium.com/compass-true-north: Governing Multi-Tenant Kubernetes Clusters with Kyverno](https://medium.com/compass-true-north/governing-multi-tenant-kubernetes-clusters-with-kyverno-3e11ba4a64ad) +- [medium.com/@haseebshaukat2: Kyverno β€” Policy Engine for Kubernetes | Muhammad Haseeb Shaukat](https://medium.com/@haseebshaukat2/kyverno-policy-engine-for-kubernetes-b49f3fac43b9) +- [youtube: The Rise of Kubernetes Policy Engine | Ep 57](https://www.youtube.com/watch?v=0TvhTXddRGE&t=12s) Learn how to prepare for Pod Security Policies removal in Kubernetes V1.25 with Kyverno 1.8: + - YAML signing and verification + - Pod security admission integrations + - Clone multiple resources + - OpenTelemetry + - Multi-tenancy ### Kyverno E-Learning diff --git a/docs/servicemesh.md b/docs/servicemesh.md index 2e5c3e46..3e404fa4 100644 --- a/docs/servicemesh.md +++ b/docs/servicemesh.md @@ -65,7 +65,8 @@ - [==devops.com: How Are API Management and Service Mesh Different?==](https://devops.com/how-are-api-management-and-service-mesh-different/) - [devops.com: When to Use API Management and Service Mesh Together](https://devops.com/when-to-use-api-management-and-service-mesh-together/) - [infoq.com: Deploying Service Mesh in Production](https://www.infoq.com/presentations/adopting-service-mesh/) -- [infoq.com: The Top-Five Challenges of Running a Service Mesh in an Enterprise 🌟](https://www.infoq.com/presentations/5-challenges-mesh/) +- [infoq.com: The Top-Five Challenges of Running a Service Mesh in an Enterprise 🌟](https://www.infoq.com/presentations/5-challenges-mesh/) +- [medium.com/elca-it: Service Mesh Performance Evaluation β€” Istio, Linkerd, Kuma and Consul](https://medium.com/elca-it/service-mesh-performance-evaluation-istio-linkerd-kuma-and-consul-d8a89390d630) ## Service Mesh and API Gateways @@ -120,6 +121,7 @@ - [linkerd.io: Announcing automated multi-cluster failover for Kubernetes](https://linkerd.io/2022/03/09/announcing-automated-multi-cluster-failover-for-kubernetes/) - [thenewstack.io: Is Linkerd Winning the Service Mesh Race?](https://thenewstack.io/is-linkerd-winning-the-service-mesh-race/) - [medium.com/attest-product-and-technology: Debugging mislabelled route metrics from Linkerd](https://medium.com/attest-product-and-technology/debugging-mislabelled-route-metrics-from-linkerd-dda47fdff04a) +- [buoyant.io: Upgrading to Linkerd 2.12: Zero-trust-ready route-based policy, Gateway API, access logging](https://buoyant.io/service-mesh-academy/upgrading-to-linkerd-2-12) In this webinar, you'll hear all about the Linkerd 2.12 release and what you need to know to upgrade. This massive release introduces route-based policy to Linkerd, allowing users to define and enforce authorization policies based on HTTP paths or gRPC methods in a fully zero-trust way. It also introduces support for iptables-nft and Apache-style access logging, authorizes all probes by default (even in default-deny clusters), and includes a host of other improvements and performance enhancements. ## Maesh Service Mesh @@ -137,12 +139,13 @@ - [L7 Internal HTTP(S) Load Balancing overview](https://cloud.google.com/load-balancing/docs/l7-internal/) -## Envoy Proxy Service Mesh +## Envoy Proxy Service Mesh - [Envoy](https://www.envoyproxy.io/) - [Examining Load Balancing Algorithms with Envoy](https://blog.envoyproxy.io/examining-load-balancing-algorithms-with-envoy-1be643ea121c) - [solo.io: Why the control plane matters. Control planes are different than data planes. Separating the control plane from data plane 🌟](https://www.solo.io/blog/why-the-control-plane-matters/) - [ekglue - Envoy/Kubernetes glue](https://github.com/jrockway/ekglue) Glue the Kubernetes API to Envoy's xDS APIs +- [amalaruja.medium.com: Basic HTTP Routing Strategies with Envoy](https://amalaruja.medium.com/basic-http-routing-strategies-with-envoy-376be42559eb) ### xDS protocol (Envoy's Discovery Service Protocol)