VirtualTam's bookmarks

1. Packer & QEMU - Set SSH password dynamically during auto-install

   2025-01-21
   configuration-management/ansible linux/container/kubernetes network/ssh packer virtualization virtualization/qemu

   Permalink
   • Packer - QEMU Integration
     • QEMU Builder - Optional SSH Fields
     • QEMU Builder - SSH Key Pair Automation
   • SSH password needs to be generated dynamically during auto-install
   • kubernetes-sigs/image-builder - Tools for building Kubernetes disk images
     • images/capi/packer/qemu
     • mages/capi/hack
     • image-ssh.sh
     • set-ssh-password.sh
2. CloudNativePG - A Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster

   2024-12-03
   database/postgresql linux/container/kubernetes programming/go programming/python

   Permalink
   • cloudnative-pg/cloudnative-pg
   • CloudNativePG Tutorial: Manage Multiple Cloud-Native Databases
   • Barman, Backup and Recovery Manager for PostgreSQL
3. EphemeraSearch - Your ancestors had mail

   2024-12-03
   database/postgresql genealogy history image/optical-character-recognition linux/container/kubernetes mail/postcard programming/go search-engine

   Permalink
   • About EphemeraSearch
   • EphemeraSearch on Github
   • Enix Live Show - Comment CNPG et Kubernetes ont sauvé ma startup !
   • PoZoK - PostgreSQL on ZFS on Kubernetes
4. Make systemd better for Podman with Quadlet

   2024-11-22
   linux/container/podman linux/red-hat linux/systemd

   Permalink

   Aka "Docker Compose for Podman"

   — What do you get if you squash a Kubernetes kubelet? — A quadlet

   • Deploying a multi-container application using Podman and Quadlet
   • containers/quadlet (archived repository)
   • Podman - Quadlets
   • Quadlet: Running Podman containers under systemd
     • mo8it's Quadlet Configuration
5. Building a Kubernetes Home Lab on the Raspberry Pi

   2024-05-28
   cryptography/certificate-authority distributed-system linux/container linux/container/kubernetes network/dns raspberry-pi self-hosting

   Permalink
   1. Architecture & Roadmap
   2. Setup Kubernetes Management Node and Private Certificate Authority
   3. Configuring a Multi-Architecture Build Process
   4. Local DNS Services
6. Kubectl Cheat Sheet

   2023-07-12
   command-line linux/container/kubernetes programming/json

   Permalink
   • How to filter pods by partial name
   • Field Selectors
   • JSONPath support
   • How to Make Kubectl Jsonpath Output On Separate Lines
   • Use Port Forwarding to Access Applications in a Cluster
7. HAProxy Data Plane API

   2021-11-01
   consul linux/container linux/container/kubernetes network/http network/reverse-proxy/haproxy programming/api

   Permalink
   • https://www.haproxy.com/blog/new-haproxy-data-plane-api/
   • https://www.haproxy.com/blog/announcing-haproxy-data-plane-api-2-4/
   • https://www.haproxy.com/blog/consul-service-discovery-for-haproxy/
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/README.md
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/AWS.md
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/CONSUL.md
8. K8s at Home | Helm charts for home Kubernetes usage

   2021-05-25
   linux/container/docker linux/container/kubernetes linux/container/kubernetes/helm

   Permalink
   • https://github.com/k8s-at-home/charts
9. pixie-labs/pixie: Instant Kubernetes-Native Application Observability

   2021-05-05
   linux/container linux/container/kubernetes linux/kernel/ebpf observability observability/tracing

   Permalink
   • https://pixielabs.ai/
10. Kubernetes basic authentication with Traefik - Stack Overflow

    2020-12-21
    linux/container/kubernetes network network/http network/reverse-proxy security/authentication

    Permalink
11. Docker and Kubernetes userland proxies, versus exposing wide port ranges

    2020-01-24
    linux/container linux/container/docker linux/container/kubernetes network network/tcp network/udp performance

    Permalink

    Docker:

    • https://github.com/moby/moby/issues/9021
    • https://github.com/moby/moby/issues/11185
    • https://github.com/moby/moby/issues/11185#issuecomment-245983651
    • https://github.com/moby/moby/issues/19017
    • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

    Kubernetes:

    • https://github.com/kubernetes/kubernetes/issues/1802
    • https://github.com/kubernetes/kubernetes/issues/23864
    • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

    Disabling userland proxy:

    • https://github.com/moby/moby/issues/5618
    • https://github.com/moby/moby/issues/14856
    • https://github.com/moby/moby/issues/11185#issuecomment-129085898

    Threads:

    • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
    • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
    • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
12. How To Create a Kubernetes Cluster Using Kubeadm on Ubuntu 18.04 | DigitalOcean

    2019-09-03
    distributed-system/cluster linux linux/container/docker linux/container/kubernetes linux/ubuntu

    Permalink
13. All the Pretty Little Ponies - My Little Cluster | Carolyn Van Slyck

    2019-09-02
    distributed-system/cluster intel linux/container/docker linux/container/kubernetes pony video

    Permalink
14. API Gateways and Service Meshes: Opening the Door to Application Modernisation

    2019-07-15
    consul envoy linux/container/docker linux/container/kubernetes network/http network/proxy programming/api

    Permalink
15. Kubernetes-native microservices API gateway: Ambassador

    2019-07-15
    envoy linux/container/docker linux/container/kubernetes network network/http network/proxy network/transport-layer-security

    Permalink
    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
16. helm-secrets: a helm plugin that helps managing secrets with Git workflow

    2019-06-18
    cryptography/pgp linux/container/kubernetes linux/container/kubernetes/helm programming/yaml secret security security/password

    Permalink
    • https://github.com/helm/helm/issues/2196
    • https://github.com/mozilla/sops
    • https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
    • https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
    • https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
17. sops: Secrets management stinks, use some sops!

    2019-06-18
    cryptography/encryption cryptography/pgp gpg linux/container/kubernetes programming/json programming/yaml secret security

    Permalink
    • https://godoc.org/go.mozilla.org/sops
    • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
18. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik

    2019-04-19
    configuration-management/ansible distributed-system/cluster linux/container/kubernetes network network/firewall network/http network/http-server/traefik network/transport-layer-security

    Permalink
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
19. The Horrors of Upgrading Etcd Beneath Kubernetes

    2019-04-16
    cloud-computing data distributed-system/cluster etcd linux/container linux/container/kubernetes

    Permalink
20. Prometheus Operator: create/configure/manage Prometheus clusters atop Kubernetes

    2019-04-03
    cloud-computing linux/container/kubernetes observability observability/time-series/prometheus

    Permalink
    • https://coreos.com/operators/prometheus/docs/latest/