diff --git a/docs/GoogleCloudPlatform.md b/docs/GoogleCloudPlatform.md index 0e35dfbb..c1752e6a 100644 --- a/docs/GoogleCloudPlatform.md +++ b/docs/GoogleCloudPlatform.md @@ -60,6 +60,7 @@ - [cloud.google.com: What is Cloud Load Balancing?](https://cloud.google.com/blog/topics/developers-practitioners/what-cloud-load-balancing) - [cloud.google.com: Google Cloud Networking overview ๐ŸŒŸ๐ŸŒŸ](https://cloud.google.com/blog/topics/developers-practitioners/google-cloud-networking-overview) - [cloud.google.com: Service orchestration on Google Cloud](https://cloud.google.com/blog/topics/developers-practitioners/service-orchestration-google-cloud) +- [cloud.google.com: The next big evolution in serverless computing](https://cloud.google.com/blog/products/serverless/the-next-big-evolution-in-cloud-computing) ## Dev Library - [devlibrary.withgoogle.com ๐ŸŒŸ](https://devlibrary.withgoogle.com/) New open source content library from Google, a showcase of what developers like you have built with Google technologies. diff --git a/docs/aws.md b/docs/aws.md index 02018a2f..abb3d8be 100644 --- a/docs/aws.md +++ b/docs/aws.md @@ -368,6 +368,10 @@ You can filter by topic using the toolbar above. - [==venturebeat.com: Amazonโ€™s AWS expands free โ€˜egressโ€™ data transfer limits==](https://venturebeat.com/2021/11/25/amazons-aws-expands-free-egress-data-transfer-limits/) - [linux.slashdot.org: AWS Embraces Fedora Linux for Its Cloud-Based 'Amazon Linux'](https://linux.slashdot.org/story/21/11/27/0328223/aws-embraces-fedora-linux-for-its-cloud-based-amazon-linux) - [AWS announces the new **Amazon Inspector** for continual vulnerability management](https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-inspector-continual-vulnerability-management/) +- [techcrunch.com: AWS to launch over 30 new Local Zones internationally starting in 2022](https://techcrunch.com/2021/12/02/aws-to-launch-over-30-new-local-zones-starting-in-2022/) +- [==venturebeat.com: 6 big Kubernetes container security launches at AWS re:Invent 2021==](https://venturebeat.com/2021/12/03/6-big-kubernetes-container-security-launches-at-aws-reinvent-2021/) +- [forbes.com: AWS re:Invent - A Roundup Of Container Services Announcements](https://www.forbes.com/sites/janakirammsv/2021/12/03/aws-reinventa-roundup-of-container-services-announcements/) +- [==aws.amazon.com/blogs: Top Announcements of AWS re:Invent 2021==](https://aws.amazon.com/blogs/aws/top-announcements-of-aws-reinvent-2021/) ## AWS Management Console - [Working with the AWS Management Console](http://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/getting-started.html) diff --git a/docs/azure.md b/docs/azure.md index 8b77792b..b2d2f074 100644 --- a/docs/azure.md +++ b/docs/azure.md @@ -119,6 +119,8 @@ - [blog.guybarrette.com: Powershell prompt: How to display your current Kubernetes context using Oh-My-Posh 3 ๐ŸŒŸ](https://blog.guybarrette.com/powershell-prompt-how-to-display-your-current-kubernetes-context-using-oh-my-posh-3) - [jinwookim928.medium.com: Automation Script for Git Flow on PowerShell](https://jinwookim928.medium.com/automation-script-for-git-flow-on-powershell-70d0596f6da8) - [youtube: Azure PowerShell account management with Azure contexts | A Cloud Guru ๐ŸŒŸ](https://www.youtube.com/watch?v=PjiJsllKZrI&ab_channel=ACloudGuru) If you've been using Azure PowerShell, you might've noticed that when you launch a script, you'll need to authenticate. When you have multiple Azure subscriptions with their own resources, this makes account management difficult. Mark Mikula demonstrates how you can manage multiple Azure subscriptions through Azure Contexts in PowerShell +- [hackingarticles.in: PowerShell for Pentester: Windows Reverse Shell](https://www.hackingarticles.in/powershell-for-pentester-windows-reverse-shell/) Weโ€™ll explore how to acquire a reverse shell using Powershell scripts on the Windows platform. +- [hashicorp.com: Managing Terraform Cloud With PowerShell](https://www.hashicorp.com/resources/managing-terraform-cloud-with-powershell) ### Powershell repos - [Abhisheksinhacoder/collection-of-useful-scripts](https://github.com/Abhisheksinhacoder/collection-of-useful-scripts) diff --git a/docs/cheatsheets.md b/docs/cheatsheets.md index 972981b9..836823aa 100644 --- a/docs/cheatsheets.md +++ b/docs/cheatsheets.md @@ -93,6 +93,7 @@ ## Google Cloud Cheat Sheet - [The Google Cloud Developer's Cheat Sheet ๐ŸŒŸ](https://github.com/priyankavergadia/google-cloud-4-words) + ## API Cheatsheets - [freecodecamp.org: API Cheatsheet โ€“ What is an API, How it Works, and How to Choose the Right API Testing Tools ๐ŸŒŸ](https://www.freecodecamp.org/news/what-is-an-api-and-how-to-test-it/) @@ -151,6 +152,7 @@ * `kubectl logs -l app=my.app --tail=-1` * [cmcrowell.com/cheat-sheet ๐ŸŒŸ](https://cmcrowell.com/cheat-sheet/) * [mirantis.com: Kubernetes Cheat Sheet ๐ŸŒŸ](https://www.mirantis.com/blog/kubernetes-cheat-sheet/) +* [==komodor.com: The Ultimate Kubectl Cheat Sheet== ๐ŸŒŸ](https://komodor.com/learn/the-ultimate-kubectl-cheat-sheet/) ## Kubernetes Kustomize Cheat Sheet - [itnext.io: Kubernetes Kustomize Cheat Sheet](https://itnext.io/kubernetes-kustomize-cheat-sheet-8e2d31b74d8f) @@ -214,6 +216,8 @@ * [dev.to: A Git Cheat Sheet](https://dev.to/baransel/a-git-cheat-sheet-4mab) * [==geeksforgeeks.org: Essential Git Commands== ๐ŸŒŸ](https://www.geeksforgeeks.org/essential-git-commands/) * [dev.to: Git Cheat Sheet- 20 commands I Use Everyday | Tabassum Khanum](https://dev.to/codewithtee/git-cheat-sheet-20-commands-i-use-everyday-47h9) +* Find the first commit you ever made: ```git log --reverse``` +* [==joshnh/Git-Commands== ๐ŸŒŸ](https://github.com/joshnh/Git-Commands/blob/master/README.md) A list of commonly used Git commands ### Git Flow Cheat Sheets * [Git-flow cheatsheet](https://danielkummer.github.io/git-flow-cheatsheet/index.html) diff --git a/docs/cloud-arch-diagrams.md b/docs/cloud-arch-diagrams.md index 1d443aaa..2519ddb1 100644 --- a/docs/cloud-arch-diagrams.md +++ b/docs/cloud-arch-diagrams.md @@ -12,6 +12,7 @@ - [CloudSkew](https://www.cloudskew.com/) Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool - [PlantUML](https://plantuml.com/) - [draw.io](https://drawio-app.com/) + - [opensource.com: Open source mind mapping with Draw.io](https://opensource.com/article/21/12/open-source-mind-mapping-drawio) Next time you need to brainstorm, organize ideas, or plan a project, start with Draw.io. - [Isoflow](https://isoflow.io) Infrastructure Diagrams - [acloudguru.com: The top cloud diagramming tools, ranked](https://acloudguru.com/blog/engineering/the-top-cloud-diagramming-tools-ranked) - [redhat.com: 6 architectural diagramming tools for cloud infrastructure](https://www.redhat.com/architect/diagramming-tools-cloud-infrastructure) Communicating a vision for cloud computing requires meaningful diagrams of logical, physical, and every layer in between. Here are tools that will help make them. diff --git a/docs/demos.md b/docs/demos.md index 8cafc0fb..7f391e00 100644 --- a/docs/demos.md +++ b/docs/demos.md @@ -634,6 +634,9 @@ Grab them from here: [awesome-kubernetes/scripts](https://github.com/nubenetes/a ## Azure Samples - [github.com/Azure-Samples ๐ŸŒŸ](https://github.com/Azure-Samples) Microsoft Azure code samples and examples in .NET, Java, Python, Node.js, PHP and Ruby +- [doylestowncoder.com: Building CI/CD Pipelines with Azure Data Factory: Part 1](https://doylestowncoder.com/2021/11/29/building-ci-cd-pipelines-with-azure-data-factory-part-1/) + - [doylestowncoder.com: Building CI/CD Pipelines with Azure Data Factory: Part 2](https://doylestowncoder.com/2021/12/02/building-ci-cd-pipelines-with-azure-data-factory-part-2/) + - [doylestowncoder.com: Building CI/CD Pipelines with Azure Data Factory: Part 3](https://doylestowncoder.com/2021/12/05/building-ci-cd-pipelines-with-azure-data-factory-part-3/) ### Azure DevOps Demos. Azure DevOps Pipelines - [Azure DevOps Demo Generator ๐ŸŒŸ](https://azuredevopsdemogenerator.azurewebsites.net/) Azure DevOps Demo Generator helps you create projects on your Azure DevOps Organization with pre-populated sample content that includes source code, work items, iterations, service endpoints, build and release definitions based on a template you choose. The purpose of this system is to simplify working with the [Azure Devops hands-on-labs ๐ŸŒŸ](https://www.azuredevopslabs.com/), demos and other education material provided by the Microsoft Azure Marketing team. @@ -663,6 +666,7 @@ Grab them from here: [awesome-kubernetes/scripts](https://github.com/nubenetes/a - [Salaboy/From Monolith to K8s](https://github.com/Salaboy/from-monolith-to-k8s) Workshop-style guide for rearchitecting a Java Monolith application to a Cloud Native architecture running in Kubernetes - [dyser/kubernetes-intro](https://github.com/dsyer/kubernetes-intro) - [piomin/sample-spring-microservices-kubernetes: Microservices with Spring Boot and Spring Cloud on Kubernetes Demo Project - piotrminkowski.com ๐ŸŒŸ](https://github.com/piomin/sample-spring-microservices-kubernetes) sample spring boot application that uses some features provided by spring cloud kubernetes, spring cloud ribbon and zuul proxy deployed on Kubernetes +- [==piomin/sample-spring-microservices-new: Microservices with Spring Cloud Advanced Demo Project==](https://github.com/piomin/sample-spring-microservices-new) I have just updated my sample microservices repository to the latest versions of SpringBoot (2.6.1), SpringCloud, and Java (17). The previously used versions were Java 8 and Spring Boot 2.0.6. Demo for Spring Boot 2 and Spring Cloud microservices with distributed configuration (Spring Cloud Config), service discovery (Eureka), API gateway (Spring Cloud Gateway, Zuul), Swagger2 API documentation, logs correlation using Spring Cloud Sleuth and many more. ## Quarkus Demos - [Develop and test a Quarkus client on Red Hat CodeReady Containers with Red Hat Data Grid 8.0](https://developers.redhat.com/blog/2020/06/19/develop-and-test-a-quarkus-client-on-red-hat-codeready-containers-with-red-hat-data-grid-8-0/) @@ -699,6 +703,7 @@ Grab them from here: [awesome-kubernetes/scripts](https://github.com/nubenetes/a - [fsgeorgee.medium.com: Growing out of Heroku to Terraform, Docker and AWS](https://fsgeorgee.medium.com/growing-out-of-heroku-to-terraform-docker-and-aws-69e66df4132d) - [StarpTech/k-andy](https://github.com/StarpTech/k-andy) This terraform module will install a High Availability K3s Cluster with Embedded DB in a private network on Hetzner Cloud. - [adamtheautomator.com: How To Build a Database Instance with Terraform and AWS RDS](https://adamtheautomator.com/terraform-aws-rds/) +- [BishopFox/iam-vulnerable](https://github.com/BishopFox/iam-vulnerable) Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS account. Within minutes, you can start learning how to identify and exploit vulnerable IAM configurations that allow for privilege escalation. ## Prometheus and Grafana - [docker-compose-tpg: Telegraf + Prometheus + Grafana Local Testing Environments](https://github.com/xiaopeng163/docker-compose-tpg) Setup learning environment for Telegraf, Prometheus and Grafana with docker-compose. (include SNMP simulators). diff --git a/docs/devel-sites.md b/docs/devel-sites.md index 682f8046..8d69ab38 100644 --- a/docs/devel-sites.md +++ b/docs/devel-sites.md @@ -22,6 +22,7 @@ - [==dzone.com: Software Engineering Best Practices That High-Performing Teams Follow==](https://dzone.com/articles/software-engineering-best-practices-that-high-perf) - [geeksforgeeks.org: 7 Most In-Demand and High Paying Programming Jobs](https://www.geeksforgeeks.org/7-most-in-demand-and-high-paying-programming-jobs/) - [analyticsinsight.net: Top 10 programming languages to learn for better job opportunities in 2022](https://www.analyticsinsight.net/top-10-programming-languages-to-learn-for-better-job-opportunities-in-2022/) +- [dev.to: ๐Ÿš€10 Trending projects on GitHub for web developers - 3rd December 2021](https://dev.to/iainfreestone/10-trending-projects-on-github-for-web-developers-3rd-december-2021-12f5) ## Developer Tools - [dev.to: 15 Developer Tools to Make You Super Productive](https://dev.to/sourcegraph/15-developer-tools-to-make-you-super-productive-2g0a) diff --git a/docs/developerportals.md b/docs/developerportals.md index 5a731634..cd8e6e71 100644 --- a/docs/developerportals.md +++ b/docs/developerportals.md @@ -98,6 +98,7 @@ - [openshift.com: Modern Application Development With Kong Konnect Enterprise and Red Hat OpenShift](https://www.openshift.com/blog/modern-application-development-with-kong-konnect-enterprise-and-red-hat-openshift) - [medium: KONG โ€” The Microservice API Gateway](https://medium.com/@far3ns/kong-the-microservice-api-gateway-526c4ca0cfa6) - [medium: Running services with Knative & Kong](https://medium.com/nerd-for-tech/running-services-with-knative-kong-3135c0d94dfa) +- [==dzone: Breaking Up a Monolithic Database with Kong==](https://dzone.com/articles/breaking-up-a-monolithic-database-with-kong) If your microservice design results in a very large API or multiple services accessing a single database, check out why Kong Gateway should be part of your project. ### Tyk API Manager - [Tyk API Manager](https://tyk.io/) diff --git a/docs/devops.md b/docs/devops.md index 123d8a2f..76db603b 100644 --- a/docs/devops.md +++ b/docs/devops.md @@ -40,6 +40,7 @@ - [medium: 6 key areas to improve your DevOps performance](https://medium.com/codex/6-key-areas-to-improve-your-devops-performance-f4c4226feb25) - [redhat.com: Why IT automation training is a smart way to boost your career](https://www.redhat.com/sysadmin/it-automation-training) Make the path to automation more efficient with training that translates into immediate business impacts. - [about.gitlab.com: Soft skills are the key to your DevOps career advancement](https://about.gitlab.com/blog/2021/11/30/soft-skills-are-the-key-to-your-devops-career-advancement) +- [salesforceben.com: 5 DevOps Concepts You Need to Know](https://www.salesforceben.com/5-devops-concepts-you-need-to-know/) ## Automation Glossary - [Red Hat automation glossary ๐ŸŒŸ](https://www.redhat.com/en/blog/red-hat-automation-glossary) diff --git a/docs/devsecops.md b/docs/devsecops.md index 9bb0a686..f035dbd7 100644 --- a/docs/devsecops.md +++ b/docs/devsecops.md @@ -10,6 +10,7 @@ - [IaC and Security](#iac-and-security) - [Multi-Level Security (MLS) vs Multi-Category Security (MCS). Make Secure Pipelines with Podman and Containers](#multi-level-security-mls-vs-multi-category-security-mcs-make-secure-pipelines-with-podman-and-containers) - [Project Calico](#project-calico) +- [The Falco Project](#the-falco-project) - [Security Patterns for Microservice Architectures](#security-patterns-for-microservice-architectures) - [Anchore Container Security Solutions for DevSecOps](#anchore-container-security-solutions-for-devsecops) - [Twistlock and Threat Stack Container Security](#twistlock-and-threat-stack-container-security) @@ -39,6 +40,7 @@ - [Alternatives with Kubernetes External Secrets](#alternatives-with-kubernetes-external-secrets) - [Serverless Security Best Practices](#serverless-security-best-practices) - [Docker Images & Container Security](#docker-images--container-security) + - [Sigstore](#sigstore) - [Container security best practices](#container-security-best-practices) - [Pod Security Policies](#pod-security-policies) - [Kubernetes Network Policies](#kubernetes-network-policies) @@ -130,6 +132,7 @@ - [devops.com: Tips for a Successful DevSecOps Life Cycle](https://devops.com/tips-for-a-successful-devsecops-life-cycle/) - [blog.aquasec.com: Advanced Persistent Threat Techniques Used in Container Attacks](https://blog.aquasec.com/advanced-persistent-threat-techniques-container-attacks) In this blog, you will explore advanced persistent threat techniques used in container attacks, learn how rootkits work, and how adversaries are using them to attack cloud native environments. - [thenewstack.io: 5 Misconceptions About DevSecOps](https://thenewstack.io/5-misconceptions-about-devsecops/) +- [thenewstack.io: Why Cloud Native Systems Demand a Zero Trust Approach](https://thenewstack.io/why-cloud-native-systems-demand-a-zero-trust-approach/) ## Zero Trust Security - [dzone.com: What Is Zero Trust Security?](https://dzone.com/articles/what-is-zero-trust-security) Zero Trust security is an IT security framework that treats everyone and everything to be hostile (in a good way!). @@ -182,6 +185,10 @@ * [Project Calico](https://www.projectcalico.org/) Secure networking for the cloud native era * [thenewstack.io: Project Calico: Kubernetes Security as SaaS](https://thenewstack.io/project-calico-kubernetes-security-as-saas/) +## The Falco Project +- [Falco.org](https://falco.org) Cloud-Native runtime security +- [==sysdig.com: Getting started with runtime security and Falco==](https://sysdig.com/blog/intro-runtime-security-falco/) + ## Security Patterns for Microservice Architectures - [Security Patterns for Microservice Architectures](https://developer.okta.com/blog/2020/03/23/microservice-security-patterns) @@ -226,6 +233,7 @@ - [medium: Verify Container Image Signatures in Kubernetes using Notary or Cosign or both](https://medium.com/sse-blog/verify-container-image-signatures-in-kubernetes-using-notary-or-cosign-or-both-c25d9e79ec45) Connaisseur v2.0 adds support for multiple keys and signature solutions. - [infracloud.io: How to Secure Containers with Cosign and Distroless Images](https://www.infracloud.io/blogs/secure-containers-cosign-distroless-images/) - [appvia.io: Tutorial: Keyless Sign and Verify Your Container Images With Cosign](https://www.appvia.io/blog/tutorial-keyless-sign-and-verify-your-container-images) +- [==github.blog: Safeguard your containers with new container signing capability in GitHub Actions (cosign)==](https://github.blog/2021-12-06-safeguard-container-signing-capability-actions/) ## GitHub security - [GitHub security: what does it take to protect your company from credentials leaking on GitHub? ๐ŸŒŸ](https://blog.gitguardian.com/github-security/) @@ -324,6 +332,8 @@ - [hashicorp.com: A Kubernetes User's Guide to HashiCorp Nomad Secret Management](https://www.hashicorp.com/blog/a-kubernetes-user-s-guide-to-hashicorp-nomad-secret-management) Learn how secrets management in Kubernetes compares to HashiCorp Nomad, and see why HashiCorp Vault is a powerful solution for both. - [igorzhivilo.com: Scheduled backup of Vault secrets with Jenkins on Kubernetes](https://igorzhivilo.com/vault/scheduled-backup-vault-secrets/) If you ever wondered how to save the secrets of HashiCorp's Vault on a daily basis. - [hashicorp.com: HashiCorp Vault Use Cases and Best Practices on Azure](https://www.hashicorp.com/blog/hashicorp-vault-use-cases-and-best-practices-on-azure) +- [==medium: Install Hashicorp Vault on Kubernetes using Helm - Part 1== | Marco Franssen](https://marcofranssen.nl/install-hashicorp-vault-on-kubernetes-using-helm-part-1) + - [==medium: Install Hashicorp Vault on Kubernetes using Helm โ€” Part 2== | Marco Franssen](https://medium.com/@marco.franssen/install-hashicorp-vault-on-kubernetes-using-helm-part-2-d612cf6c0c91) #### HashiCorp Vault Agent - [Vault Agent ๐ŸŒŸ](https://www.vaultproject.io/docs/agent) @@ -379,11 +389,14 @@ - [docs.microsoft.com: Introduction to Azure Defender for container registries](https://docs.microsoft.com/en-us/azure/security-center/defender-for-container-registries-introduction#when-are-images-scanned) Defender for Container Registries Continuous Image Scan for vulnerabilities is now available for General Availability (GA) - [techbeacon.com: 17 open-source container security tools ๐ŸŒŸ](https://techbeacon.com/security/17-open-source-container-security-tools) - [about.gitlab.com: How to secure your container images with GitLab and Grype](https://about.gitlab.com/blog/2021/07/28/secure-container-images-with-gitlab-and-grype/) - [grype: a vulnerability scanner for container images and filesystems](https://github.com/anchore/grype) -- [sigstore.dev](https://www.sigstore.dev/) A new standard for signing, verifying and protecting software. Making sure your softwareโ€™s what it claims to be. - - [youtube: Hands-on Introduction to sigstore | Rawkode Live](https://www.youtube.com/watch?v=fZfd4orrn8Y&ab_channel=RawkodeAcademy) In this tutorial, youโ€™ll learn how to sign and verify container images with co-sign, with and without a private key. - [GoogleContainerTools/container-structure-test](https://github.com/GoogleContainerTools/container-structure-test) validate the structure of your container images - [dynatrace.com: Container security: What it is, why itโ€™s tricky, and how to do it right](https://www.dynatrace.com/news/blog/what-is-container-security/) +### Sigstore +- [sigstore.dev](https://www.sigstore.dev/) A new standard for signing, verifying and protecting software. Making sure your softwareโ€™s what it claims to be. + - [youtube: Hands-on Introduction to sigstore | Rawkode Live](https://www.youtube.com/watch?v=fZfd4orrn8Y&ab_channel=RawkodeAcademy) In this tutorial, youโ€™ll learn how to sign and verify container images with co-sign, with and without a private key. +- [==opensource.com: Sign and verify container images with this open source tool (sigstore)==](https://opensource.com/article/21/12/sigstore-container-images) The sigstore project aims at securing supply chain technology. + ### Container security best practices - [sysdig.com: Container security best practices: Ultimate guide ๐ŸŒŸ](https://sysdig.com/blog/container-security-best-practices) diff --git a/docs/docker.md b/docs/docker.md index 9a0c631b..2aaa6c84 100644 --- a/docs/docker.md +++ b/docs/docker.md @@ -119,6 +119,7 @@ * [==dev.to: Top 8 Docker Best Practices for using Docker in Production== ๐ŸŒŸ](https://dev.to/techworld_with_nana/top-8-docker-best-practices-for-using-docker-in-production-1m39) * [cloudsavvyit.com: How (and Why) to Run Docker Inside Docker](https://www.cloudsavvyit.com/14890/how-and-why-to-run-docker-inside-docker/) * [cloudsavvyit.com: Whatโ€™s the Difference Between Exposing and Publishing a Docker Port?](https://www.cloudsavvyit.com/14880/whats-the-difference-between-exposing-and-publishing-a-docker-port/) +* [==clavinjune.dev: Working With Remote Docker Using Docker Context==](https://clavinjune.dev/en/blogs/working-with-remote-docker-using-docker-context/) This is a cheatsheet for working with docker context to connect remote docker locally. Might help you to work with remote docker without manually SSH to the remote server. ## Docker Swarm - [linkedin.com: Docker Series : Docker Swarm - Lionel GURRET](https://www.linkedin.com/pulse/docker-series-swarm-lionel-gurret/) diff --git a/docs/git.md b/docs/git.md index bd0af5a1..641dd510 100644 --- a/docs/git.md +++ b/docs/git.md @@ -1,5 +1,6 @@ # Git and Patterns for Managing Source Code Branches. Merge BOTs - [Git Distributed Version-Control System](#git-distributed-version-control-system) +- [Git and GitHub Backup](#git-and-github-backup) - [Cherry-picking](#cherry-picking) - [Git Submodules](#git-submodules) - [Git Interview Questions](#git-interview-questions) @@ -150,11 +151,16 @@ * [c-sharpcorner.com: Top 15 Git Commands With Examples For Every Developers๐Ÿ’ช](https://www.c-sharpcorner.com/article/top-15-git-commands-with-examples-for-every-developers/) * [==cloudsavvyit.com: Should You Use HTTPS or SSH For Git?== ๐ŸŒŸ](https://www.cloudsavvyit.com/14822/should-you-use-https-or-ssh-for-git/) * [cloudsavvyit.com: How to Move Changes to Another Branch in Git](https://www.cloudsavvyit.com/14710/how-to-move-changes-to-another-branch-in-git/) -* [dzone.com: Git Clone Command vs. GitHub Backup - Best Practices](https://dzone.com/articles/git-clone-command-vs-github-backup-best-practices) Git clone command vs. GitHub backup - what you should know to keep your git repositories and metadata safe and sound. Check in-depth analysis. * [==marklodato.github.io: A Visual Git Reference== ๐ŸŒŸ](https://marklodato.github.io/visual-git-guide/index-en.html) * [dev.to: Get lazy with lazygit](https://dev.to/tahsinature/get-lazy-with-lazygit-4h37) * [levelup.gitconnected.com: Top 30 Git Commands You Should Know To Master Git CLI](https://levelup.gitconnected.com/top-30-git-commands-you-should-know-to-master-git-cli-f04e041779bc) Learn the most essential Git commands to boost your productivity, and become a master in managing the GitHub repositories. +## Git and GitHub Backup +- [backhub.co](https://www.backhub.co/) Reliable GitHub repository backup, set up in minutes +- [devops.com: Make GitHub Backups Part of Your Development Process](https://devops.com/make-github-backups-part-of-your-development-process/) +- [dzone.com: Git Clone Command vs. GitHub Backup - Best Practices](https://dzone.com/articles/git-clone-command-vs-github-backup-best-practices) Git clone command vs. GitHub backup - what you should know to keep your git repositories and metadata safe and sound. Check in-depth analysis. +- [dev.to: 3 Ways to Backup Your Code (Even If You Donโ€™t Know Git)](https://dev.to/github/3-ways-to-backup-your-code-even-if-you-dont-know-git-1o5l) + ## Cherry-picking * [opensource.com: 3 reasons I use the Git cherry-pick command](https://opensource.com/article/21/3/git-cherry-pick) Cherry-picking solves a lot of problems in Git repositories. Here are three ways to fix your mistakes with git cherry-pick. * [jmfloreszazo.com: GIT Mejores prรกcticas: CHERRY-PICKING](https://jmfloreszazo.com/git-mejores-practicas-cherry-picking/) @@ -354,9 +360,7 @@ git push origin -f * [github.blog: Improving how we deploy GitHub](https://github.blog/2021-01-25-improving-how-we-deploy-github/) * [github.blog: Deployment reliability at GitHub](https://github.blog/2021-02-03-deployment-reliability-at-github/) * [github.blog: Extending GitOps to reliability-as-code with GitHub and StackPulse](https://github.blog/2021-02-04-extending-gitops-to-reliability-as-code-with-github-and-stackpulse/) -* [backhub.co](https://www.backhub.co/) Reliable GitHub repository backup, set up in minutes * [GitHub public roadmap ๐ŸŒŸ](https://github.com/github/roadmap) -* [devops.com: Make GitHub Backups Part of Your Development Process](https://devops.com/make-github-backups-part-of-your-development-process/) * [github.blog: Solving the innersource discovery problem - Discoverability](https://github.blog/2021-03-23-solving-the-innersource-discovery-problem/) * [devopstips.net: Create, Host and Share Docker Images with GitHub Packages](https://devopstips.net/create-host-and-share-docker-images-with-github-packages) * [blog.gruntwork.io: Introducing git-xargs: an open source tool to update multiple GitHub repos](https://blog.gruntwork.io/introducing-git-xargs-an-open-source-tool-to-update-multiple-github-repos-753f9f3675ec) @@ -386,6 +390,8 @@ git push origin -f * [==dev.to: Learn how to use Git and GitHub in a team like a pro==](https://dev.to/colocodes/learn-how-to-use-git-and-github-in-a-team-like-a-pro-2dk7) * [==dev.to: Learn how to use Git and GitHub in a team like a pro (part 2)==](https://dev.to/colocodes/learn-how-to-use-git-and-github-in-a-team-like-a-pro-part-2-11j) * [==dev.to: Git and GitHub for beginners==](https://dev.to/ericawanja/git-and-github-for-beginners-33a0) +* [==adamtheautomator.com: How to Manage GitHub Actions Environment Variables and Secrets==](https://adamtheautomator.com/github-actions-environment-variables/) +* [dev.to: Introduction to Git and GitHub](https://dev.to/estherwanjiru/introduction-to-git-and-github-25ei) ### GitHub Lab - [==lab.github.com== ๐ŸŒŸ](https://lab.github.com) With GitHub Learning Lab, grow your skills by completing fun, realistic projects. Get advice and helpful feedback from our friendly Learning Lab bot. @@ -452,6 +458,7 @@ git push origin -f * [gmaster](https://gmaster.io/) * [Visual Studio Code (Git Extensions)](visual-studio.md) * [Visual Studio Online](https://visualstudio.microsoft.com/services/visual-studio-codespaces/) +* [git-lfs/git-lfs: Git Large File Storage](https://github.com/git-lfs/git-lfs) Git extension for versioning large files ### Semantic-release. CI/CD semantic release workflow (semantic Versioning, commit format and releases) * [semantic-release.gitbook.io ๐ŸŒŸ](https://semantic-release.gitbook.io/semantic-release/) Semantic-release automates the whole package release workflow including: determining the next version number, generating the release notes and publishing the package. diff --git a/docs/gitops.md b/docs/gitops.md index 64287b73..7d8f1747 100644 --- a/docs/gitops.md +++ b/docs/gitops.md @@ -44,9 +44,9 @@ - [medium: GitOps : The Next Big Thing for DevOps and Automation!](https://medium.com/searce/gitops-the-next-big-thing-for-devops-and-automation-2a9597e51559) If you have similar questions like: โ€œWhatโ€™s GitOps?โ€, โ€œWhy we are moving towards this?โ€, โ€œHow and when one can implement this strategy in now running environment?โ€, โ€œWhat are the tools it included?โ€ then you have landed on the right page. - [thenewstack.io: Understanding GitOps: The Latest Tools and Philosophies](https://thenewstack.io/understanding-gitops-the-latest-tools-and-philosophies/) - [samiyaakhtar.medium.com: GitOps Observability โ€” Visualizing the journey of a container](https://samiyaakhtar.medium.com/gitops-observability-visualizing-the-journey-of-a-container-5f6ef1f3c9d2) -- [clickittech.com: What is GitOps? ๐ŸŒŸ](https://www.clickittech.com/devops/what-is-gitops) +- [==clickittech.com: What is GitOps?== ๐ŸŒŸ](https://www.clickittech.com/devops/what-is-gitops) - [blog.container-solutions.com: 11 Reasons for Adopting GitOps](https://blog.container-solutions.com/why-adopt-gitops) -- [opensource.com: GitOps vs. DevOps: What's the difference? ๐ŸŒŸ](https://opensource.com/article/21/3/gitops) Get to know GitOps, an evolved form of DevOps. +- [==opensource.com: GitOps vs. DevOps: What's the difference?== ๐ŸŒŸ](https://opensource.com/article/21/3/gitops) Get to know GitOps, an evolved form of DevOps. - [geekflare.com: An Introduction to GitOps](https://geekflare.com/gitops-introduction/) - [thenewstack.io: GitOps Use Cases You May Not Have Considered](https://thenewstack.io/gitops-use-cases-you-may-not-have-considered/) - [kumomind.medium.com: Should I consider the GitOps methodology?](https://kumomind.medium.com/should-i-consider-the-gitops-methodology-f49e042b8c22) @@ -112,6 +112,7 @@ - [thenewstack.io: GitOps and the Cheap Cloud Myth](https://thenewstack.io/repatriation-or-cloud-what-we-need-is-control/) - [==redhat.com: Comparing GitOps implementation patterns: Pros and cons==](https://www.redhat.com/architect/gitops-implementation-patterns) The CI/CD Controller pattern and the SCM Controller pattern take different approaches to automating application deployment from source code management. - [==developer.ibm.com: GitOps: Best practices for the real world==](https://developer.ibm.com/blogs/gitops-best-practices-for-the-real-world) +- [==chrisshort.net: GitOps: An implementation of DevOps==](https://chrisshort.net/gitops-an-implementation-of-devops/) GitOps is a prescriptive way of implementing DevOps. You will not succeed in using GitOps if you haven't embraced some DevOps philosophies along the way.
[![gitops in a nutshell](images/GitOps-in-a-nutshell.png)](https://www.unifiedguru.com/gitops-and-the-cloud-operating-model-vmware-cloud-community/) @@ -146,6 +147,13 @@ - [blog.container-solutions.com: FluxCD, ArgoCD or Jenkins X: Which Is the Right GitOps Tool for You? ๐ŸŒŸ](https://blog.container-solutions.com/fluxcd-argocd-jenkins-x-gitops-tools) - [cloudogu.com: Automation Assistants: GitOps tools in comparison ๐ŸŒŸ](https://cloudogu.com/en/blog/gitops-tools) - [shipa.io: From Terraform to GitOps to Pulumi ๐ŸŒŸ](https://shipa.io/2021/10/from-terraform-to-gitops-to-pulumi/) +- [==vimeo.com: Weaveworks - Hybrid and Multi-Cloud Strategies for Kubernetes with GitOps==](https://vimeo.com/516520492) One of the biggest advantages Kubernetes has to offer is that it is agnostic to infrastructure and capable of managing diverse workloads running on different compute resources. This allows organizations to manage multiple developer platforms, who can operate across many environments such as on premise, hybrid and multiple clouds. + - Streamlined processes and automation is pivotal for operations when managing clusters at scale and maintaining security and policy checks. Paul Curtis, Principal Solutions Architect will demonstrate GitOps and Weave Kubernetes Platform in a hybrid and multi-cloud setup. + - Learn how to: + - Use model-driven automation to increases reliability and stability across environments + - Simplify multi-cluster management with GitOps + - Enable developers to push code to production daily (self-service) + - Improve utilization and capacity management through Kubernetes platforms on cloud and on-premise infrastructure
[![gitops pipeline](images/gitops-pipeline.png)](https://www.unifiedguru.com/gitops-and-the-cloud-operating-model-vmware-cloud-community/) @@ -247,6 +255,9 @@
+ + +

Hybrid and Multi-Cloud Strategies for Kubernetes with GitOps from Weaveworks on Vimeo.

diff --git a/docs/grafana.md b/docs/grafana.md index ee01ebe0..c1499161 100644 --- a/docs/grafana.md +++ b/docs/grafana.md @@ -24,6 +24,7 @@ * [grafana.com: What's new in Grafana Cloud for July 2021: Traces, live streaming, Kubernetes and Docker integrations, and more](https://grafana.com/blog/2021/07/06/whats-new-in-grafana-cloud-for-july-2021-traces-live-streaming-kubernetes-and-docker-integrations-and-more/) * [thenewstack.io: Grafana Is Not Worried About AWS Commercialization](https://thenewstack.io/grafana-is-not-worried-about-aws-commercialization/) * [grafana.com: Introducing the AWS CloudWatch integration, Grafana Cloud's first fully managed integration](https://grafana.com/blog/2021/11/17/2021/11/17/grafana-aws-cloudwatch-integration/) Latest integration available in Grafana Cloud: the AWS CloudWatch metrics integration, the first of our fully managed integrations that makes it simple to connect and visualize your data in Grafana. +* [grafana.com: Testing shift left observability with the Grafana Stack, OpenTelemetry, and k6](https://grafana.com/blog/2021/12/06/testing-shift-left-observability-with-the-grafana-stack-opentelemetry-and-k6/) ## Grafana Dashboards * [Grafana Dashboards](https://grafana.com/grafana/dashboards) diff --git a/docs/helm.md b/docs/helm.md index 4561df2c..3ed31d4c 100644 --- a/docs/helm.md +++ b/docs/helm.md @@ -75,6 +75,8 @@ * [bridgecrew.io: Applying Kubernetes security best practices to Helm charts](https://bridgecrew.io/blog/applying-kubernetes-security-best-practices-to-helm-charts/) * [dzone.com: Deploy a Java application using Helm, Part 1 (OpenShift) ๐ŸŒŸ](https://dzone.com/articles/deploy-a-java-application-using-helm-part-1) * [codefresh.io: Using Helm with GitOps ๐ŸŒŸ](https://codefresh.io/helm-tutorial/using-helm-with-gitops/) +* [==medium: Test Helm Release in Production Environment with Zero Downtime== ๐ŸŒŸ](https://medium.com/@deejiw/test-helm-release-in-production-environment-with-zero-downtime-400c5d41ecdf) Helm has been very popular for Kubernetes production. However, to ensure consistency across releases, today we are going to learn how to test deployment on production environment without any interruption with production pods. +* [==learn.hashicorp.com: Deploy a Helm-based application automatically with GitOps==](https://learn.hashicorp.com/tutorials/waypoint/gitops-helm-deployment) ## Helm Plugins * [Helm Diff Plugin ๐ŸŒŸ](https://github.com/databus23/helm-diff) A helm plugin that shows a diff explaining what a helm upgrade would change diff --git a/docs/java_frameworks.md b/docs/java_frameworks.md index cc3d06b5..f7edbf8a 100644 --- a/docs/java_frameworks.md +++ b/docs/java_frameworks.md @@ -163,6 +163,7 @@ optimizing Enterprise Java for the microservices architecture. * [piotrminkowski.com: Spring Boot Tips, Tricks and Techniques](https://piotrminkowski.com/2021/01/13/spring-boot-tips-tricks-and-techniques/) * [javatechonline.com: How To Work With Apache Kafka In Spring Boot?](https://javatechonline.com/how-to-work-with-apache-kafka-in-spring-boot/) * [dzone: How To Run the Spring Boot Application as a Stand-Alone Java Application](https://dzone.com/articles/how-to-run-the-spring-boot-application-as-a-stand) In this Spring Boot video tutorial, take a closer look at how to run the Spring Boot application as a stand-alone Java application and RESTful Web Services. +* [==medium: Multi-Tenancy Implementation using Spring Boot + Hibernate== ๐ŸŒŸ](https://medium.com/swlh/multi-tenancy-implementation-using-spring-boot-hibernate-6a8e3ecb251a) #### SpringBoot with Docker * [spring.io: spring boot with docker](https://spring.io/guides/gs/spring-boot-docker/) diff --git a/docs/jenkins.md b/docs/jenkins.md index e61c7358..03f71ba0 100644 --- a/docs/jenkins.md +++ b/docs/jenkins.md @@ -507,6 +507,7 @@ jenkinsci CloudBees' advice is to use build tool features when possible (Maven/G * [Blue Ocean Pipeline Editor](https://plugins.jenkins.io/blueocean-pipeline-editor/) * [AWS Kinesis Consumer](https://plugins.jenkins.io/aws-kinesis-consumer/) * [Cucumber reports](https://plugins.jenkins.io/cucumber-reports) +* [NPM and Yarn Wrapper and Steps](https://plugins.jenkins.io/npm-yarn-wrapper-steps) ### Plugin Development. Jenkins Plugin Parent POM 4.0 - [Plugin Development](https://www.jenkins.io/doc/developer/plugin-development/) @@ -568,6 +569,8 @@ jenkinsci CloudBees' advice is to use build tool features when possible (Maven/G * [github PR: Enable to provide telemetry data to OpenTelemetry Collector](https://github.com/jenkinsci/remoting-opentelemetry-plugin/pull/40) Great step forward for the troubleshooting of JenkinsCI Agents with the visualization of the "Jenkins Remoting Keep Alive" messages as distributed traces * [influxdb-plugin](https://github.com/jenkinsci/influxdb-plugin) Jenkins plugin to send build metrics into InfluxDB * [youtube.com: CloudBeesTV - How to Monitor Jenkins With Grafana and Prometheus ๐ŸŒŸ](https://www.youtube.com/watch?v=3H9eNIf9KZs&ab_channel=CloudBeesTV) +* [==jenkins-infra/jenkins-usage-stats== ๐ŸŒŸ](https://github.com/jenkins-infra/jenkins-usage-stats) Jenkins usage statistics reports generator. jenkins-usage-stats handles importing daily Jenkins usage reports into a database, and generating monthly reports from that data. + * [==stats.jenkins.io== ๐ŸŒŸ](http://stats.jenkins.io) Jenkins infra-statistics ## Externalizing Fingerprint Storage for Jenkins - New FingerprintStorage API to build external fingerprint storage plugins. diff --git a/docs/kubernetes-alternatives.md b/docs/kubernetes-alternatives.md index cc6c5a3a..ea8a79af 100644 --- a/docs/kubernetes-alternatives.md +++ b/docs/kubernetes-alternatives.md @@ -31,6 +31,7 @@ * [atodorov.me: Why you should take a look at Nomad before jumping on Kubernetes](https://atodorov.me/2021/02/27/why-you-should-take-a-look-at-nomad-before-jumping-on-kubernetes) * [thenewstack.io: Conductor: Why We Migrated from Kubernetes to Nomad](https://thenewstack.io/conductor-why-we-migrated-from-kubernetes-to-nomad/) "After examining the Kubernetes source code, we realized that the default Kubernetes autoscaler is not designed for batch jobs, which typically have a low tolerance for delay." * [imaginarycloud.com: Nomad VS. Kubernetes: Container Orchestration Tools Compared](https://www.imaginarycloud.com/blog/nomad-vs-kubernetes/) +* [nomadproject.io: An alternative to Kubernetes](https://www.nomadproject.io/docs/nomad-vs-kubernetes/alternative) ## Portainer * [Portainer](https://www.portainer.io/) Making Docker management easy diff --git a/docs/kubernetes-monitoring.md b/docs/kubernetes-monitoring.md index 79091739..7197288b 100644 --- a/docs/kubernetes-monitoring.md +++ b/docs/kubernetes-monitoring.md @@ -3,6 +3,8 @@ - [Kubernetes Logging](#kubernetes-logging) - [SLOs in Kubernetes](#slos-in-kubernetes) - [ECK Elastic Cloud on Kubernetes](#eck-elastic-cloud-on-kubernetes) +- [Telegraf Operator](#telegraf-operator) +- [Monitoring Certificates Expiration](#monitoring-certificates-expiration) ## Introduction * [kube-prometheus](https://github.com/prometheus-operator/kube-prometheus) Use Prometheus to monitor Kubernetes and applications running on Kubernetes. This repository collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. @@ -47,3 +49,9 @@ ## ECK Elastic Cloud on Kubernetes - [elastic.co: How to configure Elastic Cloud on Kubernetes with SAML and hot-warm-cold architecture](https://www.elastic.co/es/blog/how-to-configure-elastic-cloud-on-kubernetes-with-saml-and-hot-warm-cold-architecture) Elastic Cloud on Kubernetes (ECK) is an easy way to get the Elastic Stack up and running on top of Kubernetes. Thatโ€™s because ECK automates the deployment, provisioning, management, and setup of Elasticsearch, Kibana, Beats, and more. + +## Telegraf Operator +- [influxdata.com: Expand Kubernetes Monitoring with Telegraf Operator](https://www.influxdata.com/blog/expand-kubernetes-monitoring-telegraf-operator) + +## Monitoring Certificates Expiration +- [itnext.io: Monitoring Certificates Expiration in Kubernetes with X.509 Exporter](https://itnext.io/monitoring-certificates-expiration-in-kubernetes-with-x-509-exporter-8030b69f611d) diff --git a/docs/kubernetes-networking.md b/docs/kubernetes-networking.md index 0912f94a..e843d9ee 100644 --- a/docs/kubernetes-networking.md +++ b/docs/kubernetes-networking.md @@ -90,6 +90,7 @@ * [ithands-on.com: Kubernetes 101 : Changing a service type](https://www.ithands-on.com/2021/09/kubernetes-101-changing-service-type.html) If we realize that our service, a ClusterIP doesn't suit our needs anymore, we could change its type to a nodePort service for example. * [cloud.redhat.com: Global Load Balancer Approaches ๐ŸŒŸ](https://cloud.redhat.com/blog/global-load-balancer-approaches) * [==loft.sh: Kubernetes NGINX Ingress: 10 Useful Configuration Options== ๐ŸŒŸ](https://loft.sh/blog/kubernetes-nginx-ingress-10-useful-configuration-options) Kubernetes Ingress is the object that provides routing rules into your cluster. To best serve traffic to your app, you need to correctly configure it. This is an incredible article from loft.sh with 10 useful options for configuring NginX Ingress +* [==technos.medium.com: Kubernetes Services for Absolute Beginners โ€” NodePort== ๐ŸŒŸ](https://technos.medium.com/kubernetes-services-for-absolute-beginners-nodeport-139b7060fe3) ## Nginx Ingress controller * [tech2fun.net: K8s Nginx Ingress Handling TLS Traffic and Using Pod Readiness Probes](https://tech2fun.net/k8s-nginx-ingress-handling-tls-traffic-and-using-pod-readiness-probes/) diff --git a/docs/kubernetes-on-premise.md b/docs/kubernetes-on-premise.md index 9c1a7a58..b01af9e6 100644 --- a/docs/kubernetes-on-premise.md +++ b/docs/kubernetes-on-premise.md @@ -115,6 +115,7 @@ $ sudo mv kops-linux-amd64 /usr/local/bin/kops - [thenewstack.io: Provision Bare-Metal Kubernetes with the Cluster API](https://thenewstack.io/provision-bare-metal-kubernetes-with-the-cluster-api/) - [cncf.io: Kubernetes Cluster API reaches production readiness with version 1.0](https://www.cncf.io/blog/2021/10/06/kubernetes-cluster-api-reaches-production-readiness-with-version-1-0/) - [weaveworks/cluster-api-provider-existinginfra](https://github.com/weaveworks/cluster-api-provider-existinginfra) Manage existing infrastructure with Cluster API using this provider. A Cluster API v1alpha3 Infrastructure Provider for already-provisioned hosts running Linux. This controller is split out from and used by weaveworks/wksctl. +- [==piotrminkowski.com: Create and Manage Kubernetes Clusters with Cluster API and ArgoCD==](https://piotrminkowski.com/2021/12/03/create-kubernetes-clusters-with-cluster-api-and-argocd/) ## Microk8s - [**Microk8s**](https://microk8s.io/) diff --git a/docs/kubernetes-releases.md b/docs/kubernetes-releases.md index 0597168c..3da385ad 100644 --- a/docs/kubernetes-releases.md +++ b/docs/kubernetes-releases.md @@ -32,4 +32,5 @@ * [kubernetes.io: Kubernetes Memory Manager moves to beta](https://kubernetes.io/blog/2021/08/11/kubernetes-1-22-feature-memory-manager-moves-to-beta/) * [kubernetes.io: Dockershim removal is coming. Are you ready?](https://kubernetes.io/blog/2021/11/12/are-you-ready-for-dockershim-removal) * [medium: Kubernetes v1.22 ends Cloud Provider LoadBalancer lock-in](https://medium.com/thermokline/kubernetes-v1-22-ends-cloud-provider-loadbalancer-lock-in-80ed7907695e) Users of Cloud Provider provisioned Kubernetes have been locked into using the Cloud providers LoadBalancers for external access to their applications. This changed in v1.22, a new feature called LoadBalancer class allows 3rd party solutions to selected as an alternative to the default Cloud LoadBalancer. -* [sysdig.com: Kubernetes 1.23 โ€“ Whatโ€™s new?](https://sysdig.com/blog/kubernetes-1-23-whats-new/) \ No newline at end of file +* [sysdig.com: Kubernetes 1.23 โ€“ Whatโ€™s new?](https://sysdig.com/blog/kubernetes-1-23-whats-new/) +* [armosec.io: Kubernetes version 1.23 is out โ€“ everything you should know](https://www.armosec.io/blog/kubernetes-version-1-23-is-out-everything-you-should-know) \ No newline at end of file diff --git a/docs/kubernetes-security.md b/docs/kubernetes-security.md index 9eaebab9..e4e8aeba 100644 --- a/docs/kubernetes-security.md +++ b/docs/kubernetes-security.md @@ -14,6 +14,7 @@ - [Implementing a custom Kubernetes authentication method](#implementing-a-custom-kubernetes-authentication-method) - [Pod Security Policies (SCCs - Security Context Constraints in OpenShift)](#pod-security-policies-sccs---security-context-constraints-in-openshift) - [EKS Security](#eks-security) +- [CVE](#cve) - [Tweets](#tweets) ## Introduction @@ -230,6 +231,10 @@ Kubernetes supports several authentication methods out-of-the-box, such as X.509 * [EKS Best Practices Guide for Security ๐ŸŒŸ](https://aws.github.io/aws-eks-best-practices/iam/) * [medium.com: Securing Kubernetes Dashboard on EKS with Pomerium](https://medium.com/dev-genius/securing-kubernetes-dashboard-on-eks-with-pomerium-e98c47610e2f) +## CVE +- [hackerone.com: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces](https://hackerone.com/reports/1249583) +- [blog.lightspin.io: NGINX Custom Snippets CVE-2021-25742](https://blog.lightspin.io/nginx-custom-snippets-cve-2021-25742) + ## Tweets
Click to expand! diff --git a/docs/kubernetes-tools.md b/docs/kubernetes-tools.md index 558641f3..f76d2d15 100644 --- a/docs/kubernetes-tools.md +++ b/docs/kubernetes-tools.md @@ -417,6 +417,8 @@ * [witchery-project/witchery](https://github.com/witchery-project/witchery) build distroless images with alpine tools * [==knight42/kubectl-blame: kubectl-blame: git-like blame for kubectl==](https://github.com/knight42/kubectl-blame) Show who edited resource fields. A useful opensource tool that comes as a plugin to show who modified attributes in kubernetes resource fields. * [curiefense/curiefense](https://github.com/curiefense/curiefense) Curiefense extends Envoy proxy to defend against a variety of threats, including SQL and command injection, cross site scripting (XSS), account takeovers (ATOs) and more +* [==kubernetes-sigs/node-feature-discovery: Node feature discovery for Kubernetes==](https://github.com/kubernetes-sigs/node-feature-discovery) Welcome to Node Feature Discovery โ€“ a Kubernetes add-on for detecting hardware features and system configuration! +* [grpc-ecosystem/grpc-gateway: gRPC-Gateway](https://github.com/grpc-ecosystem/grpc-gateway) gRPC to JSON proxy generator following the gRPC HTTP spec ## Penetration Testing Tools * [intellipaat.com: What is Penetration Testing?](https://intellipaat.com/blog/what-is-penetration-testing) Penetration testing is otherwise referred to as pen testing. This blog on โ€˜What is Penetration Testing? - Types, Phases, Tools Explainedโ€™ discusses in detail what pen testing is and how it works, the numerous tools involved in this field, and so on. This blog aims to give you an insight into pen testing and how Ethical Hackers use it for the purpose of Cyber Security. Letโ€™s dive right in. @@ -567,6 +569,7 @@ ## AWS Karpenter kubernetes Autoscaler - [==Karpenter==](https://karpenter.sh/) Just-in-time Nodes for Any Kubernetes Cluster. __Karpenter simplifies Kubernetes infrastructure with the right nodes at the right time.__ Karpenter automatically launches just the right compute resources to handle your cluster's applications. It is designed to let you take full advantage of the cloud with fast and simple compute provisioning for Kubernetes clusters. - [techcrunch.com: AWS launches Karpenter, an open source autoscaler for Kubernetes clusters](https://techcrunch.com/2021/11/30/aws-launches-karpenter-an-open-source-autoscaler-for-kubernetes-clusters/) +- [itnext.io: Karpenter: Open-Source, High-Performance Kubernetes Cluster Autoscaler](https://itnext.io/karpenter-open-source-high-performance-kubernetes-cluster-autoscaler-d56e3ab06aae) ## Kuby (easy deployments of Ruby Rails App) - [Kuby](https://getkuby.io/) Deploy Your Rails App the Easy Way. Kuby is a convention-over-configuration approach to deploying Rails apps. It makes the power of Docker and Kubernetes accessible to the average Rails developer without requiring a devops black belt. diff --git a/docs/kubernetes.md b/docs/kubernetes.md index 28dda608..ab1f8826 100644 --- a/docs/kubernetes.md +++ b/docs/kubernetes.md @@ -81,6 +81,7 @@ - [KubeCarrier](#kubecarrier) - [Red Hat Operator Lifecycle Manager (OLM)](#red-hat-operator-lifecycle-manager-olm) - [Istio Service Mesh](#istio-service-mesh) +- [Multi-Regional Architecture](#multi-regional-architecture) - [Kubernetes Scripts](#kubernetes-scripts) - [Kubernetes and Ansible](#kubernetes-and-ansible) - [Spot instances in Kubernetes](#spot-instances-in-kubernetes) @@ -225,6 +226,7 @@ - [kubernetespodcast.com](https://kubernetespodcast.com/) #### Kubernetes Blogs +- [nativecloud.dev](https://nativecloud.dev) - [learnk8s.io/blog](https://learnk8s.io/blog) - [kubermatic.com](https://www.kubermatic.com/categories/kubernetes/) - [containerjournal.com](https://containerjournal.com) @@ -471,6 +473,8 @@ * [vxav.fr: Interacting with containerd runtime for kubernetes](https://www.vxav.fr/2021-09-13-interacting-with-containerd-runtime-for-kubernetes/) * [medium: Exploring Kubernetes Node Architecture](https://medium.com/nerd-for-tech/exploring-kubernetes-node-architecture-3a36df6ae034) * [mayankshah.dev: Demystifying kube-proxy](https://mayankshah.dev/blog/demystifying-kube-proxy/) +* [arthurchiao.art: Cracking kubernetes node proxy (aka kube-proxy)](https://arthurchiao.art/blog/cracking-k8s-node-proxy/) This post analyzes the Kubernetes node proxy model, and provides 5 demo implementations (within couples of lines of code) of the model, each based on different tech-stacks (userspace/iptables/ipvs/tc-ebpf/sock-ebpf). +* [blog.brujordet.no: Using custom hardware in kubernetes](https://blog.brujordet.no/post/homelab/using_custom_hardware_in_kubernetes/) ### kubeconfig * [medium: Mastering the KUBECONFIG file](https://medium.com/@ahmetb/mastering-kubeconfig-4e447aa32c75) @@ -528,6 +532,7 @@ * [dustinspecker.com: IPVS: How Kubernetes Services Direct Traffic to Pods](https://dustinspecker.com/posts/ipvs-how-kubernetes-services-direct-traffic-to-pods/) * [returngis.net: Organizar los pods en Kubernetes usando taints y tolerations](https://www.returngis.net/2020/06/organizar-los-pods-en-kubernetes-usando-taints-y-tolerations/) * [==medium: How to Schedule Pods on Nodes in Kubernetes==](https://medium.com/@knoldus/how-to-schedule-pods-on-nodes-in-kubernetes-af321d8ea5d) +* [==medium: Kubernetes: Evenly Distribution of Pods Across Cluster Nodes== |Puru Tuladhar](https://medium.com/geekculture/kubernetes-distributing-pods-evenly-across-cluster-c6bdc9b49699) #### Kubernetes ConfigMaps * [medium: ConfigMaps in Kubernetes: how they work and what you should remember ๐ŸŒŸ](https://medium.com/flant-com/configmaps-in-kubernetes-f9f6d0081dcb) @@ -1106,6 +1111,9 @@ ### Istio Service Mesh - [Istio](https://istio.io/) +## Multi-Regional Architecture +- [engineering.monday.com: monday.comโ€™s Multi-Regional Architecture: A Deep Dive](https://engineering.monday.com/monday-coms-multi-regional-architecture-a-deep-dive/) Building a global SaaS platform requires lots of preparation, deep evaluation of your request routes and a truckload of R&D cooperation. Here's how we did it + ## Kubernetes Scripts - [Kubernetes Scripts](https://github.com/eldada/kubernetes-scripts) - [Get applied and effective apiVersion from Kubernetes objects](https://gist.github.com/ninlil/affbf7514d4e74c7634e77f47e172236) @@ -1210,6 +1218,7 @@ +
diff --git a/docs/linux.md b/docs/linux.md index 16fb59c1..e8a8ae4d 100644 --- a/docs/linux.md +++ b/docs/linux.md @@ -204,6 +204,7 @@ - [dev.to: Useful Tmux Configuration Examples](https://dev.to/iggredible/useful-tmux-configuration-examples-k3g) - [betterprogramming.pub: How to Use tmuxp to Manage Your tmux Session](https://betterprogramming.pub/how-to-use-tmuxp-to-manage-your-tmux-session-614b6d42d6b6) Take control of your tmux sessions. - [opensource.com: Linux tips for using cron to schedule tasks](https://opensource.com/article/21/11/cron-linux) Schedule backups, file cleanups, and other tasks by using this simple yet powerful Linux command-line tool. Download our new cron cheat sheet. +- [opensource.com: 7 handy tricks for using the Linux wget command](https://opensource.com/article/21/10/linux-wget-command) Download files from the internet in your Linux terminal. Get the most out of the wget command with our new cheat sheet. ## Guestfish - [Guestfish](https://libguestfs.org/guestfish.1.html) diff --git a/docs/managed-kubernetes-in-public-cloud.md b/docs/managed-kubernetes-in-public-cloud.md index 62a130ea..7fadc123 100644 --- a/docs/managed-kubernetes-in-public-cloud.md +++ b/docs/managed-kubernetes-in-public-cloud.md @@ -187,6 +187,7 @@ - [azurecloudai.blog: Deploy Azure Kubernetes Service (AKS) to a preexisting VNET](https://azurecloudai.blog/2019/09/27/deploy-azure-kubernetes-service-aks-to-a-preexisting-vnet/) - [tigera.io: Turbocharging AKS networking with Calico eBPF](https://www.tigera.io/blog/turbocharging-aks-networking-with-calico-ebpf/) - [akhilsharma.work: How to list Azure RBAC Roles to Secure AKS Clusters](https://akhilsharma.work/how-to-list-azure-rbac-roles-to-secure-aks-clusters/) +- [tigera.io: Calico WireGuard support with Azure CNI](https://www.tigera.io/blog/calico-wireguard-support-with-azure-cni/) Last June, Tigera announced a first for Kubernetes: supporting open-source WireGuard for encrypting data in transit within your cluster. We never like to sit still, so we have been working hard on some exciting new features for this technology, the first of which is support for WireGuard on AKS using the Azure CNI. ## GKE Google Kubernetes Engine - [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine) diff --git a/docs/ocp4.md b/docs/ocp4.md index 7297eed7..738c277f 100644 --- a/docs/ocp4.md +++ b/docs/ocp4.md @@ -170,6 +170,7 @@ * [aws.amazon.com: Red Hat OpenShift Service on AWS: architecture and networking](https://aws.amazon.com/es/blogs/containers/red-hat-openshift-service-on-aws-architecture-and-networking/) * [openshift.com: Using VPC Peering to Connect an OpenShift Service on an AWS (ROSA) Cluster to an Amazon RDS MySQL Database in a Different VPC](https://www.openshift.com/blog/using-vpc-peering-to-connect-an-openshift-service-on-an-aws-rosa-cluster-to-an-amazon-rds-mysql-database-in-a-different-vpc) * [blog.vizuri.com: Red Hat OpenShift Service on AWS (ROSA) Positions OpenShift for Mainstream Adoption](https://blog.vizuri.com/red-hat-openshift-service-on-aws-rosa-positions-openshift-for-mainstream-adoption) +* [==cloud.redhat.com: Scale your application containers on Red Hat OpenShift Service on AWS (ROSA) clusters using Amazon EFS storage==](https://cloud.redhat.com/blog/scale-your-application-containers-on-red-hat-openshift-service-on-aws-rosa-clusters-using-amazon-efs-storage)
[![OCP 4 Architecture](images/ocp4_arch.png)](https://www.openshift.com/blog/enterprise-kubernetes-with-openshift-part-one) diff --git a/docs/oraclecloud.md b/docs/oraclecloud.md index f5a86a7e..80e9500f 100644 --- a/docs/oraclecloud.md +++ b/docs/oraclecloud.md @@ -2,6 +2,9 @@ - [Oracle Cloud Infrastructure (OCI)](https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Concepts/baremetalintro.htm) - [github.com/oracle](https://github.com/oracle) +## Oracle RAC +- [blogs.oracle.com: Oracle RAC on Docker - Now with Full Production Support](https://blogs.oracle.com/maa/post/oracle-rac-on-docker-now-with-full-production-support) + ## Oracle Container Engine for Kubernetes (OKE) - [Oracle Container Engine for Kubernetes (OKE)](https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengoverview.htm) - [blogs.oracle.com: Announcing private Kubernetes clusters](https://blogs.oracle.com/cloud-infrastructure/announcing-private-kubernetes-clusters) \ No newline at end of file diff --git a/docs/other-awesome-lists.md b/docs/other-awesome-lists.md index e712710a..0424348f 100644 --- a/docs/other-awesome-lists.md +++ b/docs/other-awesome-lists.md @@ -61,6 +61,7 @@ - [Tech Interview Handbook](https://github.com/yangshun/tech-interview-handbook) Materials to help you rock your next coding interview - [hashicorp.com: HashiCorp Learning Resources Reference Guide ๐ŸŒŸ](https://www.hashicorp.com/blog/hashicorp-learning-resources-reference-guide) Read this curated list of HashiCorp learning resources to help practitioners and organizations better understand the cloud operating model. - [awesomeopensource.com: The Top 110 Cidr Open Source Projects on Github](https://awesomeopensource.com/projects/cidr) +- [==unixorn/awesome-zsh-plugins==](https://github.com/unixorn/awesome-zsh-plugins) A collection of ZSH frameworks, plugins, themes and tutorials. ### Project Management - [Awesome Project Management](https://github.com/shahedbd/awesome-project-management) - [Awesome Agile](https://github.com/lorabv/awesome-agile) diff --git a/docs/performance-testing-with-jenkins-and-jmeter.md b/docs/performance-testing-with-jenkins-and-jmeter.md index 318c98d6..2e26b02b 100644 --- a/docs/performance-testing-with-jenkins-and-jmeter.md +++ b/docs/performance-testing-with-jenkins-and-jmeter.md @@ -80,6 +80,7 @@ - [docs.microsoft.com: Azure Load Testing](https://docs.microsoft.com/azure/load-testing/) - [azure.microsoft.com: Introducing Azure Load Testing: Optimize app performance at scale](https://azure.microsoft.com/en-us/blog/introducing-azure-load-testing-optimize-app-performance-at-scale/) - [venturebeat.com: Microsoft launches fully managed Azure Load Testing service](https://venturebeat.com/2021/11/30/microsoft-launches-fully-managed-azure-load-testing-service/) +- [infoq.com: Microsoft Introduces a Fully-Managed Azure Load Testing Service in Preview](https://www.infoq.com/news/2021/12/azure-load-testing-preview/) ## Alternatives * [webpagetest.org](https://webpagetest.org/) diff --git a/docs/project-management-methodology.md b/docs/project-management-methodology.md index ad85bfd0..2a37f218 100644 --- a/docs/project-management-methodology.md +++ b/docs/project-management-methodology.md @@ -117,6 +117,7 @@ - [lavanguardia.com: Los estilos de liderazgo mรกs apreciados por los empleados](https://www.lavanguardia.com/vivo/20211113/7856878/cualidades-mas-valoran-empleados-jefe-pmv.html) - [businessinsider.es: "Estoy atrapado en unos hรกbitos poco saludables y me siento abrumado por todo lo que tengo que hacer, ยฟcรณmo puedo aprender a decir no?"](https://www.businessinsider.es/tan-dificil-decir-no-jefe-965459) - [businessinsider.es: Asรญ es como tu educaciรณn te ha moldeado sutilmente para que nunca consigas ascender en el trabajo](https://www.businessinsider.es/razon-nunca-consigues-ascender-trabajo-conseguir-mejor-sueldo-970737) +- [euroresidentes.com: La intimidaciรณn verbal en la empresa](https://www.euroresidentes.com/empresa/exito-empresarial/la-intimidacin-verbal-en-la-empresa) ## Bunch of images ??? note "Click to expand!" diff --git a/docs/prometheus.md b/docs/prometheus.md index bf3eea9b..10f6c61a 100644 --- a/docs/prometheus.md +++ b/docs/prometheus.md @@ -120,6 +120,7 @@ * [source.coveo.com: Prometheus at scale](https://source.coveo.com/2021/11/11/prometheus-at-scale/) Check out how Coveo uses Thanos and Prometheus. * [medium.com: Prometheus HA with Thanos Sidecar Or Receiver?](https://medium.com/infracloud-technologies/prometheus-ha-with-thanos-sidecar-or-receiver-2c8d0e585ff1) In this blog post, you will go through the two different approaches for integrating Thanos Metrics with prometheus in Kubernetes environments. +* [==prometheus.io: Comparison to Alternatives== ๐ŸŒŸ](https://prometheus.io/docs/introduction/comparison/)
[![prometheus architecture](images/prometheus-architecture.png)](https://github.com/prometheus/prometheus) diff --git a/docs/python.md b/docs/python.md index 239ec3c4..d29e4775 100644 --- a/docs/python.md +++ b/docs/python.md @@ -177,6 +177,10 @@ - [blog.varunsingh.in: 5 Python Tricks That Made Me A Good Python Developer](https://blog.varunsingh.in/5-python-tricks-that-made-me-a-good-python-developer) - [makeuseof.com: 11 Useful Python One-Liners You Must Know](https://www.makeuseof.com/useful-python-one-liners-you-must-know/) Python One-Liners can help you perform complex tasks with just one line of Python code. Here are some of the most useful ones to know! - [dev.to: Installing Python in Ubuntu 20.04](https://dev.to/jkariukidev/installing-python-in-ubuntu-2004-4nf8) +- [redhat.com: Packaging applications to install on other machines with Python](https://www.redhat.com/sysadmin/packaging-applications-python) Use a virtual environment, pip, and setuptools to package applications with their dependencies for smooth installation on other computers. +- [redhat.com: Writing and unit testing a Python application to query the RPM database](https://www.redhat.com/sysadmin/query-rpm-database-python) +- [thenewstack.io: More Python for Non-Programmers](https://thenewstack.io/more-python-for-non-programmers/) +- [==python.plainenglish.io: How to Perform Read and Write Operations on JSON Files in Python==](https://python.plainenglish.io/how-to-perform-read-and-write-operations-on-json-files-in-python-a5bac724320d) A simple guide to handle JSON files in Python. ## PHP vs Python - [geekflare.com: PHP vs Python: A Comprehensive Comparison](https://geekflare.com/php-vs-python-comparison) diff --git a/docs/qa.md b/docs/qa.md index 4a83aedb..bb71abd9 100644 --- a/docs/qa.md +++ b/docs/qa.md @@ -80,6 +80,7 @@ the #1 test automation community. * [convert.com: Top 10 A/B Testing Tools That Are Good for the Next 5 Years (Vetted by Features, Privacy, Maturity & Price)](https://www.convert.com/blog/a-b-testing/a-b-testing-tools-2022-beyond/) * [==K6 Cloud==](https://k6.io/cloud/) Managed performance testing for engineering teams * [grafana.com: How to build performance tests into your CI pipeline with k6, GitHub Actions, and Grafana](https://grafana.com/blog/2021/11/29/how-to-build-performance-tests-into-your-ci-pipeline-with-k6-github-actions-and-grafana/) +* [==circleci.com: Unit testing vs integration testing== ๐ŸŒŸ](https://circleci.com/blog/unit-testing-vs-integration-testing/) ## Performance Testing - [devops.com: Best Practices for Application Performance Testing](https://devops.com/best-practices-for-application-performance-testing/) diff --git a/docs/rancher.md b/docs/rancher.md index 458910bc..8bf8085f 100644 --- a/docs/rancher.md +++ b/docs/rancher.md @@ -94,6 +94,7 @@ * [dev.to: All about k3s - Lightweight Kubernetes ๐ŸŒŸ](https://dev.to/abhinavd26/all-about-k3s-lightweight-kubernetes-3ell) * [gabrieltanner.org: Setting up a HA Kubernetes cluster using K3S](https://gabrieltanner.org/blog/ha-kubernetes-cluster-using-k3s) In this article, you will set up your own high availability K3S cluster and create a basic Kubernetes deployment. The tutorial will show how to set up all the resources manually and you will learn how to automate it with the official Ansible script. * [nativecloud.dev: Scale out your Raspberry-Pi Kubernetes cluster to the cloud](https://nativecloud.dev/scale-out-your-raspberry-pi-k3s-cluster-to-the-cloud/) Using Gardener Machine-Controller-Manager and Tailscale to extend a local Raspberry-Pi K3s cluster with cloud instances. +* [blog.nootch.net: Kubernetes at Home With K3s](https://blog.nootch.net/post/kubernetes-at-home-with-k3s/) ### K3s Tools - [tinyzimmer/k3p](https://github.com/tinyzimmer/k3p) A k3s packager and installer, primarily intended for airgapped deployments diff --git a/docs/visual-studio.md b/docs/visual-studio.md index dfe980c1..eb32e45e 100644 --- a/docs/visual-studio.md +++ b/docs/visual-studio.md @@ -94,6 +94,7 @@ A simple extension to make indentation more readable * [Python in Visual Studio Code โ€“ October 2020 Release. Debugpy 1.0](https://devblogs.microsoft.com/python/python-in-visual-studio-code-october-2020-release/) * [betterprogramming.pub: The Best VS Code Extensions to Supercharge Your Git](https://betterprogramming.pub/the-best-vs-code-extensions-to-supercharge-your-git-5d5ab3f64f64) Yes, thereโ€™s more than GitLens! * [dzone.com: 10 VS Code Extensions to Fight Technical Debt](https://dzone.com/articles/10-vs-code-extensions-to-fight-technical-debt) The best engineering teams Iโ€™ve talked to use the right tools to continuously refactor code, improve their codebase communication, and address technical debt. +* [dev.to: Superb VSCode extensions changing your coding life](https://dev.to/duckinm/superb-vscode-extensions-changing-your-coding-life-2cmb) #### More Extensions * [Prettier ESLint](https://marketplace.visualstudio.com/items?itemName=rvest.vs-code-prettier-eslint) Extension to format JavaScript code using prettier-eslint package diff --git a/docs/web-servers.md b/docs/web-servers.md index 319a6c2e..4103f9a9 100644 --- a/docs/web-servers.md +++ b/docs/web-servers.md @@ -32,6 +32,7 @@ - [NGINXConfig ๐ŸŒŸ๐ŸŒŸ](https://www.digitalocean.com/community/tools/nginx) The easiest way to configure a performant, secure, and stable NGINX server. - [How To Use the Official NGINX Docker Image](https://www.docker.com/blog/how-to-use-the-official-nginx-docker-image/) - [medium: Using Nginx-Ingress as a Static Cache for Assets Inside Kubernetes](https://medium.com/@vdboor/using-nginx-ingress-as-a-static-cache-91bc27be04a1) Optimizing Nginx on Kubernetes Without a Adding a Cloud CDN. +- [==freecodecamp.org: The NGINX Handbook== ๐ŸŒŸ](https://www.freecodecamp.org/news/the-nginx-handbook/) ### Nginx Unit - [unit.nginx.org](https://unit.nginx.org) open source multi-language application server