#55: Kubernetes is like an Iceberg

🎧 PODCAST/WEBINAR OF THE WEEK

In this talk Joern discuss AWS tools and patterns that enable effective oversight and integrity protection of platforms while staying lean and scalable. The talk includes overview of IAM policy types and patterns and how to tight access control with IaC and review processes 🔒

📖 POSTS OF THE WEEK

Demystifying the Kubernetes Iceberg
Kubernetes is like an iceberg. You learn the basics, only to see there is a lot more to learn. The more you learn, the more you see there is to know. This series of articles explains all the concepts listed in the “Kubernetes Iceberg” diagram by Flant.
Read more »

"Reduce read I/O cost of your Amazon Aurora PostgreSQL" - This post, will demonstrate how to use PostgreSQL native partitioning to reduce I/O costs and increase read and write throughput with in-place partitioning that requires minimal downtime - Read more »

"How to troubleshoot applications on Kubernetes" - There are many third-party tools and techniques available to troubleshoot a Kubernetes app but on this tutorial you'll only need your kubectl and terminal - Read more »

"Cloud Security: common attacks" - This article goes through the most common cloud-specific vulnerabilities on AWS and Azure. It explains what attacks are possible and the inherent risks organisations may face - Read more »

"Public CDNs are useless and dangerous" - Once upon a time, loading assets from CDN was a best practice, well things has changed now - Read more »

"Kubecon EU 2022: trends and news" - All takeaways and news you need to know about from KubeCon 22 summarised in this post - Read more »

"Kubernetes RBAC: implementation and best practices" - Role-based access control lets you use organizational user roles to restrict access to resources. In this guide, you’ll learn how to apply this in Kubernetes and the best practices for doing so - Read more »

"eBPF, sidecars, and the future of the service mesh" - This article, describe what eBPF is and what it can and cannot do. Also, dig into sidecars vs other models and contrast them from operational and security perspectives. Finally, lay out why eBPF is the future of the service mesh - Read more »

📕 BOOK OF THE WEEK

I found this book to be packed with useful information for managing both your life and running a business. I highly recommend folks read this early in their career - especially people who are interested in running their own company, or people who are interested in pursuing management careers. There is a lot of information on creating a healthy and transparent work culture, and making sure you have the right people on the bus sitting in the right bus seats 🚌

🛠 PROJECTS OF THE WEEK

Faros Community Edition (CE) is an open-source engineering operations platform that connects the dots between all your operational data sources for a single-pane view across the software development life cycle. A dream platform for EngOps - Read more »

Ory Kratos is the first cloud native Identity and User Management System in the world. Finally, it is no longer necessary to implement a User Login process for the umpteenth time! - Read more »

A K8s controller that scales up and down namespaces on-demand with an embedded friendly UI and a Prometheus exporter. This controller watches the cluster's namespaces and "suspends" them by scaling to 0 some of the resources within those namespaces at a given time - Read more »

dhall-kubernetes contains Dhall bindings to Kubernetes, so you can generate Kubernetes objects definitions from Dhall expressions. This will let you easily typecheck, template and modularize your Kubernetes definitions - Read more »

A beautiful personal server OS for self-hosting. You can install Umbrel anywhere: Raspberry PI, Homelab, VM, NUC, you name it! - Read more »

💼 OPEN JOBS OF THE WEEK

Senior Site Reliability Engineer @Apollo
GCP, Terraform, Kubernetes
🌎 Remote, India
Read more »

Site Reliability Engineer @Patreon
MySQL, Terraform, Ansible
🌎 Remote, USA
Read more »

DevOps Engineer @ActionIQ
AWS, Terraform, Python
🌎 Remote, USA
Read more »

📅 EVENT OF THE WEEK

I highly recommend this event for DevOps & Platform practitioners. It's 100% free and virtual, you'll learn from practitioners who built platforms for real life use cases and explore the latest trends (From K8s to Infrastructure as Code).

🐦 TWEET OF THE WEEK