Kubernetes Security: eBPF & Tetragon for Runtime Monitoring & Policy Enforcement
https://medium.com/@noah_h/kubernetes-security-ebpf-tetragon-for-runtime-monitoring-policy-enforcement-819b6ed97953
https://medium.com/@noah_h/kubernetes-security-ebpf-tetragon-for-runtime-monitoring-policy-enforcement-819b6ed97953
kubernetes-controller-tutorial
https://github.com/gianlucam76/kubernetes-controller-tutorial
This repository provides an opinionated tutorial on building Kubernetes controllers, sharing best practices and design patterns I have found most effective
https://github.com/gianlucam76/kubernetes-controller-tutorial
A Personal,Private,Portable Cloud on Kubernetes and RaspberryPis
Part 1: Requirements, Hardware and Network setup - https://devs-in-the-cloud.medium.com/a-personal-private-portable-cloud-on-kubernetes-and-raspberrypis-e030c0351c41
Part 2: Create Kubernetes Cluster with K3s and install Cilium and ArgoCD using OpenTofu - https://devs-in-the-cloud.medium.com/a-personal-private-portable-cloud-on-kubernetes-and-raspberrypis-65456867b1ee
Part 1: Requirements, Hardware and Network setup - https://devs-in-the-cloud.medium.com/a-personal-private-portable-cloud-on-kubernetes-and-raspberrypis-e030c0351c41
Part 2: Create Kubernetes Cluster with K3s and install Cilium and ArgoCD using OpenTofu - https://devs-in-the-cloud.medium.com/a-personal-private-portable-cloud-on-kubernetes-and-raspberrypis-65456867b1ee
Optimize kubernetes stability with k8s-pod-restart-info-collector
https://medium.com/@vadiraj.puranik/optimize-kubernetes-stability-with-k8s-pod-restart-info-collector-96b9b63ed97d
https://medium.com/@vadiraj.puranik/optimize-kubernetes-stability-with-k8s-pod-restart-info-collector-96b9b63ed97d
sealed-secrets-web
https://github.com/bakito/sealed-secrets-web
Sealed Secrets Web is a web interface for Sealed Secrets by Bitnami. The web interface let you encode, decode the keys in the data field of a secret, load existing Sealed Secrets and create Sealed Secrets. Under the hood it uses Sealed Secrets service API to encrypt your secrets. The web interface should be installed to your Kubernetes cluster, so your developers do not need access to your cluster via kubectl.
https://github.com/bakito/sealed-secrets-web
gateway
https://github.com/envoyproxy/gateway
Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway
https://github.com/envoyproxy/gateway
kcl
https://github.com/kcl-lang/kcl
KCL is an open-source, constraint-based record and functional language that enhances the writing of complex configurations, including those for cloud-native scenarios. With its advanced programming language technology and practices, KCL is dedicated to promoting better modularity, scalability, and stability for configurations. It enables simpler logic writing and offers ease of automation APIs and integration with homegrown systems.
https://github.com/kcl-lang/kcl
OIDC-Guard
https://github.com/IvanJosipovic/OIDC-Guard
OpenID Connect (OIDC) & OAuth 2 API Server used to secure Kubernetes Ingress
https://github.com/IvanJosipovic/OIDC-Guard
So You Want to Build Your Own Data Center
https://blog.railway.com/p/data-center-build-part-one
So in response, we kicked off a Railway Metal project last year. Nine months later we were live with the first site in California, having designed, spec-ed, and installed everything from the fiber optic cables in the cage to the various contracts with ISPs. We’re lighting up three more data center regions as we speak.
https://blog.railway.com/p/data-center-build-part-one
How GitLab Lost 300GB of Production Data and What We Can Learn
https://bytesizeddesign.substack.com/p/how-gitlab-lost-300gb-of-production
The Hard Lesson on Backups, Disaster Recovery, and Human Error
https://bytesizeddesign.substack.com/p/how-gitlab-lost-300gb-of-production
subtrace
https://github.com/subtrace/subtrace
Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.
https://github.com/subtrace/subtrace
From Chaos to Harmony: A Deep Dive into Centralizing Kubernetes Controller Upgrades
https://medium.com/transmit-security-engineering/from-chaos-to-harmony-a-deep-dive-into-centralizing-controller-upgrades-dd57deb1cbec
https://medium.com/transmit-security-engineering/from-chaos-to-harmony-a-deep-dive-into-centralizing-controller-upgrades-dd57deb1cbec
A major update on the ingress controller: Migrating to the new nginx-ingress controller
https://medium.com/adidoescode/major-update-on-the-ingress-controller-84cbf448e89c
https://medium.com/adidoescode/major-update-on-the-ingress-controller-84cbf448e89c
Using SimKube 1.0: Comparing Kubernetes Cluster Autoscaler and Karpenter
https://blog.appliedcomputing.io/p/using-simkube-10-comparing-kubernetes
https://blog.appliedcomputing.io/p/using-simkube-10-comparing-kubernetes
MetalLB and KinD: Loads Balanced Locally
https://medium.com/@tylerauerbeck/metallb-and-kind-loads-balanced-locally-1992d60111d8
When You Need LoadBalancer Services On The Go, MetalLB and KinD Are There For You
https://medium.com/@tylerauerbeck/metallb-and-kind-loads-balanced-locally-1992d60111d8
awesome-cloud-native
https://github.com/rootsongjc/awesome-cloud-native
A curated list for awesome cloud native tools, software and tutorials.
https://github.com/rootsongjc/awesome-cloud-native
kubectl-view-secret
https://github.com/elsesiy/kubectl-view-secret
Kubernetes CLI plugin to decode Kubernetes secrets
https://github.com/elsesiy/kubectl-view-secret