DevOps & SRE notes

kubectl foreach is a command-line tool that enables running kubectl commands on one or more contexts (clusters) in parallel. Users can match context names from kubeconfig using patterns such as exact names and regular expressions. The tool offers options for limiting parallel executions, disabling confirmation prompts, and replacing values in kubectl arguments with context names. kubectl foreach can be installed using Krew kubectl plugin manager and used to query pods and run commands on multiple contexts at the same time. The tool is not intended for deploying workloads to clusters or using programmatically yet. https://github.com/ahmetb/kubectl-foreach

The article discusses how to use eBPF (extended Berkeley Packet Filter) to collect telemetry data from a service without code changes and without requesting engineering efforts. eBPF provides the ability to execute programs on the Operational System Kernel, extending the OS capabilities and leveraging the kernel's privileged ability to control the system. The author explains how to use Pixie, an open-source observability solution for Kubernetes applications that uses eBPF to collect telemetry data automatically. Pixie offers features such as network monitoring, database query profiling, continuous application profiling, and Kafka monitoring. However, Pixie has two drawbacks, long-term data retention, and a lack of support for ARM architectures. The article concludes by suggesting other tools that offer similar features to Pixie, such as Cilium Hubble. https://itnext.io/observability-strategies-to-not-overload-engineering-teams-ebpf-b034b26d7f1d

Good article about scaning vulnerabilities https://semaphoreci.com/blog/govulncheck

Continuous profiling for Python applications https://medium.com/@martin.heinz/boost-your-python-application-performance-using-continuous-profiling-7eb993e68d23

The immutable Linux meta-distribution for edge Kubernetes. https://github.com/kairos-io/kairos

Never forget about security in your cluster https://medium.com/@badawekoo/harden-kubernetes-cluster-with-pod-and-container-security-contexts-119639dbb6ce

Linkedin engineering team's article about autoscaling builds https://engineering.linkedin.com/blog/2023/scaling-autobuild--our-journey-towards-delivering-an-enhanced-cu

Guy share the company experience about building Infrastructure platform with k8s https://betterprogramming.pub/how-we-built-an-infrastructure-platform-on-top-of-kubernetes-a39e67d85680

All we know that "at least privileges model" one of the most important parts the security. But why people still struggle with it? https://sysdig.com/blog/identity-access-management-difficult-cloud/

Good article about Cgroups in Linux https://towardsdatascience.com/the-power-of-linux-cgroups-how-containers-take-control-of-their-resources-ba564fef13b0

Thoughts about using Alpine Linux https://betterprogramming.pub/why-i-will-never-use-alpine-linux-ever-again-a324fd0cbfd6

Network mapping could help you with debug problems and understand real network interaction between your microservices. So this implementation with Grafana https://betterprogramming.pub/improve-cluster-monitoring-with-network-mapping-in-grafana-fa8bb479fd47

Flexible, reusable and concise configuration for Kubernetes https://github.com/grafana/tanka

Apply DevOps practice for .Net 6.0 https://betterprogramming.pub/devops-for-net-6-0-7fae47cec014

A wireguard operator created to easily provision a VPN in a k8s cluster https://github.com/jodevsa/wireguard-operator

Good guide for understanding kubernetes network policies https://medium.com/geekculture/a-beginners-guide-to-understanding-kubernetes-network-policies-bc8f55fb9c0

Convert Ingress resources to Gateway API resources https://github.com/kubernetes-sigs/ingress2gateway

AWS telegram emoji pack https://t.me/addemoji/qcloudy_aws

Another good article about security in k8s https://moshe-beladev-mb.medium.com/secure-your-kubernetes-workloads-with-gvisor-f189321792e1