Библиотека статей по DevOps и SRE для специалистов.
Библиотека статей по DevOps и SRE для специалистов.
Собрание статей по темам DevOps и Site Reliability Engineering. Глубокий анализ практик и инструментов для профессионалов.
The GPU Bill Was $40,000. Nobody Knew Why. Finance had flagged the AWS bill. GPU spend for the past 30 days: $40,200. The budget was $18,000. Nobody on the call could explain where the extra $22,000 had gone. Ссылка скрыта
Открыть канал и посмотреть медиаWe're a 3-person tech team running production Kubernetes — So we built an AI SRE We needed help. Not a dashboard. Not another alerting rule. An actual pair of hands that could look at an alert, check if it's real, figure out what's wrong, and either fix it or tell us where to look. Ссылка скрыта
Открыть канал и посмотреть медиаGitHub Runners: Scaling ARC with Argo CD ApplicationSets But managing multiple self-hosted runners manually can be tedious, especially in a Kubernetes environment. In this article, I'll show how I automated this process using Argo CD ApplicationSet, making my GitHub runners dynamic, declarative, and scalable. Ссылка скрыта
Открыть канал и посмотреть медиаKubernetes AuthN the Hard Way We're wiring together three components: OpenLDAP (your user directory), Dex (the authentication translator), and the Kubernetes API Server (the skeptical consumer of identity tokens). Every bug, every misconfiguration, and every "why is this not working" moment is documented here because I hit all of them personally. Ссылка скрыта
Открыть канал и посмотреть медиаnodes/proxy GET: One Kubernetes permission too many The nodes/proxy GET RBAC permission allows any ServiceAccount to execute code inside any Pod in the cluster, without leaving a single trace in the audit logs. This article details the issue, how to check if you are vulnerable, the fixes to apply, and the preventive measures you can put in place if you can't patch right away. Ссылка скрыта
Открыть канал и посмотреть медиаVLAN Migration: Moving a Live Kubernetes Cluster Without Downtime I migrated the entire k3s cluster from a flat network to a proper VLAN architecture: Server VLAN 20 for k3s nodes and services, Storage VLAN 30 for the NAS, and the existing default VLAN 1 for clients. This involved changing IPs on all VMs, updating MetalLB, reconfiguring Traefik, and recovering from an etcd quorum loss when I moved too many nodes at once. Ссылка скрыта
Открыть канал и посмотреть медиаUser Namespaces in Kubernetes Part I: All You Need to Know Ссылка скрыта Part II: Mappings and File Ownership Ссылка скрыта Part III: The Implementation Ссылка скрыта
Открыть канал и посмотреть медиаBuilding an OSS Kubernetes Security Console with MCP That is what this series is about: building an open source Kubernetes security console that collects posture, vulnerability, policy, and runtime signals, exposes them through Kubernetes-native objects where possible, and wires that data into an MCP server so an AI agent can help triage across the whole stack. Ссылка скрыта
Открыть канал и посмотреть медиаBuilding an AI Agent That Runs Your SRE Operations — What I Learned, What Works, and How You Can Do It Too Not a smarter alert. Not a better dashboard. An actual reasoning system — one that reads Splunk, queries AppDynamics, checks the Kubernetes pods, searches the Confluence runbooks, looks at what GitLab deployed recently, and comes back with a diagnosis and a proposed action. Ссылка скрыта
Открыть канал и посмотреть медиаOnly registered users can share their opinion.
Be the first to share your impression of this resource!
The channel with trading signals by indices and MCX. For educational purposes: analysis, call and trading strategies.
Clothing as self-expression. New arrivals, exclusives and brand stories.
