From c6eb032b6e08841b7ed99bc88ad916116497654a Mon Sep 17 00:00:00 2001 From: Inaki Fernandez Date: Fri, 25 Jun 2021 18:39:18 +0200 Subject: [PATCH] june 25th --- docs/ansible.md | 1 + docs/databases.md | 1 + docs/gitops.md | 1 + docs/jenkins-alternatives.md | 1 + docs/kubernetes-tools.md | 1 + docs/kubernetes.md | 2 ++ docs/linux.md | 1 + docs/monitoring.md | 7 +++++++ docs/ocp4.md | 1 + docs/project-management-tools.md | 12 ++++++------ docs/securityascode.md | 2 ++ 11 files changed, 24 insertions(+), 6 deletions(-) diff --git a/docs/ansible.md b/docs/ansible.md index 1a859cda..d18e8c4d 100644 --- a/docs/ansible.md +++ b/docs/ansible.md @@ -122,6 +122,7 @@ * [linuxtechi.com: How to Use Loops in Ansible Playbook](https://www.linuxtechi.com/how-to-use-loops-in-ansible-playbook/) * [Ansible Let's Encrypt Collection](https://blog.t-systems-mms.com/tech-insights/ansible-lets-encrypt-collection) * [redhat.com: 6 troubleshooting skills for Ansible playbooks ๐ŸŒŸ](https://www.redhat.com/sysadmin/troubleshoot-ansible-playbooks) Here are six ways you can check for problems when running Ansible playbooks. +* [redhat.com: How to pass extra variables to an Ansible playbook](https://www.redhat.com/sysadmin/extra-variables-ansible-playbook) Learn how to pass variables to your Ansible playbooks makes them more portable and flexible. ### Running Ansible Playbooks From Jenkins * [Dzone: Running Ansible Playbooks From Jenkins](https://dzone.com/articles/running-ansible-playbooks-from-jenkins) diff --git a/docs/databases.md b/docs/databases.md index b73d19e3..e4e07606 100644 --- a/docs/databases.md +++ b/docs/databases.md @@ -59,6 +59,7 @@ * [percona.com: DBaaS on Kubernetes: Under the Hood ๐ŸŒŸ](https://www.percona.com/blog/2021/02/08/dbaas-on-kubernetes-under-the-hood/) * [blog.crunchydata.com: Using Kubernetes? Chances Are You Need a Database ๐ŸŒŸ](https://blog.crunchydata.com/blog/using-kubernetes-chances-are-you-need-a-database) * [thenewstack.io: Databases โ€” Finally โ€” Get Containerized](https://thenewstack.io/databases-finally-get-containerized/) +* [percona.com: Autoscaling Databases in Kubernetes for MongoDB, MySQL, and PostgreSQL](https://www.percona.com/blog/2021/06/23/autoscaling-databases-in-kubernetes-for-mongodb-mysql-and-postgresql/) ## SQL - [digitalocean.com: How To Use WHERE Clauses in SQL](https://www.digitalocean.com/community/tutorials/how-to-use-where-clauses-in-sql) diff --git a/docs/gitops.md b/docs/gitops.md index 55699b6e..a7ce843e 100644 --- a/docs/gitops.md +++ b/docs/gitops.md @@ -125,6 +125,7 @@ - [cloud-viadee.medium.com: GitOps for IT-Architects: Transparent and Secure Kubernetes deployments](https://cloud-viadee.medium.com/gitops-for-it-architects-6312e7822819) - [johnclarke73.medium.com: How GitOps works for us](https://johnclarke73.medium.com/our-continuous-delivery-journey-11d86dd68a49) From manually deployed monoliths to containers and GitOps with Weaveworks Flux - [thenewstack.io: GitOps at Home: Automate Code Deploys with Kubernetes and Flux](https://thenewstack.io/gitops-at-home-automate-code-deploys-with-kubernetes-and-flux/) +- [medium: Integrating GitOps Deployments in Kubernetes Using Weave Flux](https://medium.com/contino-engineering/integrating-gitops-deployments-in-kubernetes-using-weave-flux-9a617ea17684) ### Kustomize. Kubernetes native configuration management - [kustomize.io ๐ŸŒŸ](https://kustomize.io/) Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into kubectl as apply -k. diff --git a/docs/jenkins-alternatives.md b/docs/jenkins-alternatives.md index ccad696c..9bbae3d2 100644 --- a/docs/jenkins-alternatives.md +++ b/docs/jenkins-alternatives.md @@ -93,6 +93,7 @@ * [thenewstack.io: Why ArgoCD Is the Lifeline of GitOps](https://thenewstack.io/why-argo-cd-is-the-lifeline-of-gitops/) * [openshift.com: Getting Started with ApplicationSets](https://www.openshift.com/blog/getting-started-with-applicationsets) "App of Apps" pattern. * [argocd-autopilot](https://github.com/argoproj-labs/argocd-autopilot) The Argo-CD Autopilot is a tool which offers an opinionated way of installing Argo-CD and managing GitOps repositories. + * [gspann.com: Significance of Using Spinnaker When Adopting a Kubernetes Environment ๐ŸŒŸ](https://www.gspann.com/resources/blogs/significance-of-using-spinnaker-when-adopting-a-kubernetes-environment/) Spinnaker acts as a multi-cloud deployment tool to support continuous workflows in a Kubernetes environment. Understand the Spinnaker architecture and learn about the best practices that can help you better deploy applications on Kubernetes clusters. * [Tekton](https://github.com/tektoncd/) * [Tekton PetClinic Demo](https://github.com/tektoncd/pipeline) * [Tekton PetClinic Demo Youtube](https://www.youtube.com/watch?v=igwFpZOUTnw) diff --git a/docs/kubernetes-tools.md b/docs/kubernetes-tools.md index 62c2f916..6a5643c0 100644 --- a/docs/kubernetes-tools.md +++ b/docs/kubernetes-tools.md @@ -248,6 +248,7 @@ * [Polaris: Best Practices for Kubernetes Workload Configuration ๐ŸŒŸ](https://github.com/FairwindsOps/polaris) Validation of best practices in your Kubernetes clusters - [fairwinds.com: What is Fairwindsโ€™ Polaris? Kubernetes Open Source Configuration Validation](https://www.fairwinds.com/blog/fairwinds-polaris-kubernetes-open-source-configuration-validation) * [Krane ๐ŸŒŸ](https://github.com/appvia/krane) is a Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition. * [KTail: Kubernetes log viewer ๐ŸŒŸ](https://www.ktail.de/) KTail allows you to tail multiple pods in one view. It automatically detects updates and attaches to new pods. Configurable highlighters show how often regular expressions matched and let you quickly navigate in the results. +* [direktiv](https://github.com/vorteil/direktiv) Serverless Container Workflows. Diretiv is a serverless workflow and automation engine running on Kubernetes and Knative. Direktiv is the equivalent of AWS Step Functions, or Google Cloud Workflows or Alibaba Serverless Workflows. The difference between Direktiv and the cloud provider workflow engines is that Direktiv is cloud & platform agnostic, runs on kubernetes and executes containers as "plugins". ## Porter - [Porter](https://porter.sh/) Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command - [github.com/getporter/porter](https://github.com/getporter/porter) diff --git a/docs/kubernetes.md b/docs/kubernetes.md index 05993f5c..7add0e1c 100644 --- a/docs/kubernetes.md +++ b/docs/kubernetes.md @@ -546,6 +546,7 @@ * [linkedin.com/pulse: What are Kubernetes Persistent Volumes?](https://www.linkedin.com/pulse/what-kubernetes-persistent-volumes-gyan-prakash-1f/) * [talos-systems.com: Is Vanilla Kubernetes Really Too Heavy For The Raspberry Pi?](https://www.talos-systems.com/blog/is-vanilla-kubernetes-really-too-heavy-for-the-raspberry-pi/) * [towardsdatascience.com: Kubernetes 101: Cluster Architecture](https://towardsdatascience.com/kubernetes-101-cluster-architecture-d79995785563) They say a picture is worth a thousand (or a million) words +* [blog.kintone.io: Tolerating failures in container image registries ๐ŸŒŸ](https://blog.kintone.io/entry/neco-registry)
[![Kubernetes architecture](images/kubernetes-pod-creation.png)](https://www.padok.fr/en/blog/kubernetes-architecture-clusters) @@ -1762,6 +1763,7 @@ $ sudo mv kops-linux-amd64 /usr/local/bin/kops - [**k8s-tew**](https://github.com/darxkies/k8s-tew) Kubernetes is a fairly complex project. For a newbie it is hard to understand and also to use. While [Kelsey Hightowerโ€™s Kubernetes The Hard Way](https://github.com/kelseyhightower/kubernetes-the-hard-way), on which this project is based, helps a lot to understand Kubernetes, it is optimized for the use with Google Cloud Platform. ### Kubernetes Distributions +- [acloudguru.com: Which Kubernetes distribution is right for you?](https://acloudguru.com/blog/engineering/which-kubernetes-distribution-is-right-for-you) #### Red Hat OpenShift * [Openshift Container Platform](openshift.md) * [OKD](https://www.okd.io/) The Community Distribution of Kubernetes that powers Red Hat OpenShift diff --git a/docs/linux.md b/docs/linux.md index 2c94d1bc..c35ab437 100644 --- a/docs/linux.md +++ b/docs/linux.md @@ -146,6 +146,7 @@ - [sysadminxpert.com: How to watch real time TCP and UDP ports on Linux (netstat & ss) ๐ŸŒŸ](https://sysadminxpert.com/how-to-watch-real-time-tcp-and-udp-ports-on-linux/) - [cyberciti.biz: How to flush Redis cache and delete everything using the CLI](https://www.cyberciti.biz/faq/how-to-flush-redis-cache-and-delete-everything-using-the-cli/) - [cyberciti.biz: How To: Linux Find Large Files in a Directory](https://www.cyberciti.biz/faq/find-large-files-linux/) +- [linuxteck.com: 15 basic curl command in Linux with practical examples](https://www.linuxteck.com/curl-command-in-linux-with-examples/) ## Bash - [igoroseledko.com: Checking Multiple Variables in Bash](https://www.igoroseledko.com/checking-multiple-variables-in-bash/) diff --git a/docs/monitoring.md b/docs/monitoring.md index 0d4bcac4..61cdb01d 100644 --- a/docs/monitoring.md +++ b/docs/monitoring.md @@ -10,6 +10,7 @@ - [Prometheus for OpenShift 3.11](#prometheus-for-openshift-311) - [OpenShift 4](#openshift-4) - [Prometheus](#prometheus) + - [Promgen](#promgen) - [Promcat Resource Catalog](#promcat-resource-catalog) - [Prometheus Demo](#prometheus-demo) - [Prometheus Storage](#prometheus-storage) @@ -232,9 +233,14 @@ OpenShift Cluster Monitoring components cannot be extended since they are read o * [portworx.com: Monitoring Kubernetes Backup with Prometheus and Grafana](https://portworx.com/kubernetes-backup-monitoring/) * [sysdig.com: Top 10 metrics in PostgreSQL monitoring with Prometheus ๐ŸŒŸ](https://sysdig.com/blog/postgresql-monitoring/) * [itnext.io: Observability at Scale](https://itnext.io/observability-at-scale-52d0d9a5fb9b) +* [jonbc.medium.com: Hacking your way to Observability โ€” Part 1 : Metrics](https://jonbc.medium.com/hacking-your-way-to-observability-part-1-cf4cd42fb4dc) Starting your journey in observability by gathering metrics with Prometheus +* [innoq.com: Scraping a Docker swarm service with Prometheus](https://www.innoq.com/en/blog/scraping-docker-swarm-service-instances-with-prometheus/) [![prometheus architecture](images/prometheus-architecture.png)](https://github.com/prometheus/prometheus) +### Promgen +- [Promgen ๐ŸŒŸ](https://github.com/line/promgen) Promgen is a configuration file generator for Prometheus + ### Promcat Resource Catalog - [Promcat: A resource catalog for enterprise-class Prometheus monitoring ๐ŸŒŸ](https://promcat.io/) @@ -300,6 +306,7 @@ Although it's exciting to see attempts to address the challenges of running Prom * [influxdata.com: Running InfluxDB 2.0 and Telegraf Using Docker](https://www.influxdata.com/blog/running-influxdb-2-0-and-telegraf-using-docker/) ### Collectors. Software exposing Prometheus metrics +- http://localhost:9090/targets : you should see a list of targets that you Prometheus server is scraping. #### Prometheus Exporters. Plug-in architecture and extensibility with Prometheus Exporters (collectors) * Prometheus proporciona un ecosistema de **"exporters"**, los cuales permiten que herramientas de terceros puedan exportar sus datos en Prometheus. Muchos componentes de software de cรณdigo abierto son compatibles por defecto. diff --git a/docs/ocp4.md b/docs/ocp4.md index 0d442c55..dc57d45a 100644 --- a/docs/ocp4.md +++ b/docs/ocp4.md @@ -502,6 +502,7 @@ OpenShift 4.1|5.6.16|?|5.6.16|No - Open Source [ProjectQuay.io](https://www.projectquay.io/) Container Registry: - [Red Hat Introduces open source Project Quay container registry](https://www.redhat.com/en/blog/red-hat-introduces-open-source-project-quay-container-registry) - [github.com/quay](https://github.com/quay) +- [openshift.com: Keep Your Applications Secure With Automatic Rebuilds](https://www.openshift.com/blog/keep-your-applications-secure-with-automatic-rebuilds) ### Local Development Environment - For version 3 we haveย [Container Development Kit](https://developers.redhat.com/products/cdk/overview)ย (or its open source equivalent for OKD -ย [minishift](https://github.com/minishift/minishift/releases)) which launches a single node VM with Openshift and it does it in a few minutes. Itโ€™s perfect for testing also as a part of CI/CD pipeline. diff --git a/docs/project-management-tools.md b/docs/project-management-tools.md index 5e93ddc7..b156c1da 100644 --- a/docs/project-management-tools.md +++ b/docs/project-management-tools.md @@ -22,12 +22,12 @@ Jira and Bitbucket integration. Now you can transition issues right from your me - [techrepublic.com: Kanboard: A simple to deploy, easy to use Kanban board for project management](https://www.techrepublic.com/article/kanboard-a-simple-to-deploy-easy-to-use-kanban-board-for-project-management/) ## Productivity Tips with .new TLD to quickly create -- [Google Docs: doc.new](doc.new) -- [Google meet: meet.new](meet.new) -- [Spreadsheets: sheet.new](sheet.new) -- [GH repos: repo.new](repo.new) -- [GH Gists: gist.new](gist.new) -- [Zoom: zoom.new](zoom.new) +- [Google Docs: doc.new](https://doc.new) +- [Google meet: meet.new](https://meet.new) +- [Spreadsheets: sheet.new](https://sheet.new) +- [GH repos: repo.new](https://repo.new) +- [GH Gists: gist.new](https://gist.new) +- [Zoom: zoom.new](https://zoom.new)
diff --git a/docs/securityascode.md b/docs/securityascode.md index 1b2da5e0..551ed193 100644 --- a/docs/securityascode.md +++ b/docs/securityascode.md @@ -27,6 +27,7 @@ - [blog.styra.com: 5 OPA Deployment Performance Models for Microservices](https://blog.styra.com/blog/5-opa-deployment-performance-models-for-microservices) - [blog.styra.com: Open Policy Agent: The Top 5 Kubernetes Admission Control Policies](https://blog.styra.com/blog/open-policy-agent-the-top-5-kubernetes-admission-control-policies) - [thenewstack.io: Getting Open Policy Agent Up and Running](https://thenewstack.io/getting-open-policy-agent-up-and-running/) +- [siegert-maximilian.medium.com: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent](https://siegert-maximilian.medium.com/ensure-content-trust-on-kubernetes-using-notary-and-open-policy-agent-485ab3a9423c) A detailed guide to help you to ensure that only signed images can get deployed on the cluster ### Open Policy Agent in Kubernetes - [infracloud.io: Kubernetes Pod Security Policies with Open Policy Agent](https://www.infracloud.io/kubernetes-pod-security-policies-opa/) @@ -63,6 +64,7 @@ - [Kyverno ๐ŸŒŸ](https://kyverno.io/) Kubernetes Native Policy Management. Open Policy Agent? Thatโ€™s old school. Securely manage workloads on your kubernetesio clusters with this handy new tool, Kyverno.Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline. [youtube: The Way of the Future | Kubernetes Policy Management with Kyverno](https://www.youtube.com/watch?v=8fgrjBnxqi0&t=270s&ab_channel=AppSecEngineer) - [neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno ๐ŸŒŸ](https://neonmirrors.net/post/2021-02/kubernetes-policy-comparison-opa-gatekeeper-vs-kyverno/) - [kyverno.io: 56 sample policies ๐ŸŒŸ](https://kyverno.io/policies/) +- [dev.to: Using Kyverno To Enforce EKS Best Practices](https://dev.to/rinkiyakedad/using-kyverno-to-enforce-eks-best-practices-cad) ## Cloud Custodian - [Cloud Custodian](https://github.com/cloud-custodian/cloud-custodian) is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized.