YAHIAOUI Yazid

*** views are personal *** I heavily works with terraform and K8s and had very hard time on generating letsencrypt certificates and maintain them during destroy and re-create testing cycles. Multiple cert requests for same domain causing API Errors from letsencrypt as you generate your 5th certificates. So came up with own way to let people to do e2e testing with prod certs of letsencrypt on Oracle Cloud Infrastructure, without hitting rate-limits / preserving certs and renewals. (CNCF Cert Manager won't help me, as I deletes entire cluster with nodes during tests) https://lnkd.in/g-ukZP9e I have provided 2 examples 1. Creating / Renew Cert via Docker 2. Renew Cert via K8s CronJob Special thanks to Kenneth for upstream repo for certbot dns oci. #oci #certbot #certificate #manager #docker #kubernates

50

2 commentaires

When running a Kubernetes cluster outside the public cloud you will need to setup something to handle listening for (and routing) Load Balancer service requests. One of the most popular solutions for this is MetalLB. The article below describes it well. When you create a service of type Load Balancer in your cluster, it is expected that an IP address will get assigned to it that users from the outside can route to and interact with the service over. MetalLB has pods called Controller and Speaker which listen for new Load Balancer requests and announce the IP addresses they will use. MetalLB works with a more simple Layer 2 routing protocol and a more complex Border Gateway Protocol (BGP) mode. Below, 8grams gives you lots of details on how MetalLB works.

14

2 commentaires

Fantastic data points by Ajit Inamdar on Amazon ECS !! Using Amazon ECS from tiny workloads to large production grade deployments is a no-brainer, and you let AWS handle all the heavy lifting of container orchestration and yes, you can also leverage your existing AWS skills to get started. #aws #containers #amazonecs

16

2 commentaires

Kubernetes controller to enable automatic kubelet CSR validation after a series of (configurable) security checks. https://lnkd.in/gEV7Cwa7

1

By the end of this #DevOps course, you will not only master the technical aspects of #OracleCloud Container Engine for #Kubernetes and #Terraform but also acquire the strategic mindset needed to make informed decisions regarding containerization strategies in the #cloud. This comprehensive guidance is your pathway to effectively setting up, managing, and optimizing OKE in your everyday work.

25

Allocatable memory and CPU in Kubernetes Nodes https://buff.ly/4aBnm6l #kubernetes #k8s #sysops #devops

9

Have you ever used Terragrunt? The following medium article will walk you through using Terragrunt to deploy the AWS EKS cluster stack with the additional components listed below: 1) EKS cluster 2) Elastic block storage ( EBS). 3) Cert-manager 4) Cert-manager-issuers 5) Ingress-controller 6) external-dns 7) Argocd 8) Promethues 9) Grafana

12

1 commentaire

Enabling Nvidia GPU in Red Hat Openshift AI on OpenShift Cluster

6

Using an Infrastructure as Code (IaC) tool like Terraform to setup your cloud resources is almost always a great idea. Terraform offers many constructs with Hashicorp Config Language (HCL). The "lookup" construct is described below. Being able to do string substitution, looping, control flow and much more are supported in HCL. You can also work with maps/dictionaries and being able to safely check for values from them makes them more safe to use. The article below from the env0 team goes in great detail on using lookup. https://lnkd.in/eEtZNthX

37

𝗔𝗪𝗦 𝗥𝗼𝗮𝗱𝗺𝗮𝗽 𝗳𝗿𝗼𝗺 𝗭𝗲𝗿𝗼 𝘁𝗼 𝗛𝗲𝗿𝗼 "𝐄𝐦𝐛𝐚𝐫𝐤 𝐨𝐧 𝐲𝐨𝐮𝐫 𝐀𝐖𝐒 𝐣𝐨𝐮𝐫𝐧𝐞𝐲 𝐰𝐢𝐭𝐡 𝐭𝐡𝐢𝐬 𝐜𝐨𝐦𝐩𝐫𝐞𝐡𝐞𝐧𝐬𝐢𝐯𝐞 𝐫𝐨𝐚𝐝𝐦𝐚𝐩!   From foundational concepts to advanced architecture, this guide will equip you with the skills to build and manage robust cloud solutions. 𝐊𝐞𝐲 𝐭𝐨𝐩𝐢𝐜𝐬 𝐜𝐨𝐯𝐞𝐫𝐞𝐝: ✅ AWS Services and Architecture ✅ EC2, S3, RDS, Lambda, and more ✅ Networking, Security, and Compliance ✅ Serverless Computing and Microservices ✅ DevOps and CI/CD pipelines 𝗪𝗵𝗲𝘁𝗵𝗲𝗿 𝘆𝗼𝘂'𝗿𝗲 𝗮 𝗯𝗲𝗴𝗶𝗻𝗻𝗲𝗿 𝗼𝗿 𝗮 𝘀𝗲𝗮𝘀𝗼𝗻𝗲𝗱 𝗽𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹, 𝘁𝗵𝗶𝘀 𝗿𝗼𝗮𝗱𝗺𝗮𝗽 𝘄𝗶𝗹𝗹 𝗵𝗲𝗹𝗽 𝘆𝗼𝘂 𝗹𝗲𝘃𝗲𝗹 𝘂𝗽 𝘆𝗼𝘂𝗿 𝗔𝗪𝗦 𝗲𝘅𝗽𝗲𝗿𝘁𝗶𝘀𝗲. 𝗟𝗲𝘁'𝘀 𝗰𝗹𝗼𝘂𝗱 𝘁𝗼𝗴𝗲𝘁𝗵𝗲𝗿! 𝟏. 𝐅𝐨𝐮𝐧𝐝𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐂𝐨𝐧𝐜𝐞𝐩𝐭𝐬: Begin by understanding the core principles of AWS, including services like EC2, S3, and RDS. Familiarize yourself with AWS Identity and Access Management (IAM) for managing user permissions and AWS Key Management Service (KMS) for encryption. 𝟐. 𝐅𝐫𝐞𝐞 𝐓𝐢𝐞𝐫 𝐄𝐱𝐩𝐥𝐨𝐫𝐚𝐭𝐢𝐨𝐧: Sign up for the AWS Free Tier (limited time offer) to familiarize yourself with AWS services and their limitations. This includes 12 months of free usage for EC2 micro instances, S3 storage, and DynamoDB. 𝟑. 𝐇𝐚𝐧𝐝𝐬-𝐎𝐧 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞: Utilize AWS Management Console, AWS CLI, or SDKs to create and manage AWS resources. Start small with simple projects, such as setting up a web server or a database, to gain practical experience. 𝟒. 𝐃𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧 𝐚𝐧𝐝 𝐓𝐮𝐭𝐨𝐫𝐢𝐚𝐥𝐬: Explore AWS documentation, including user guides, API references, and developer guides. Follow official AWS tutorials like the AWS Getting Started Guides and AWS Compute Simplified series. 𝟓. 𝐂𝐨𝐦𝐦𝐮𝐧𝐢𝐭𝐲 𝐄𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Participate in AWS forums, blogs, and social media groups to connect with other AWS users and experts. Attend AWS re: Post for technical support and AWS Virtual Workshops for hands-on learning. 𝟔. 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬: Consider obtaining AWS certifications, such as AWS Certified Cloud Practitioner, to validate your skills and knowledge. Start with the most relevant certification based on your interests and career goals. 𝟕. 𝐀𝐝𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥 𝐑𝐞𝐬𝐨𝐮𝐫𝐜𝐞𝐬: Utilize AWS Skill Builder courses, AWS Whitepapers, and AWS Blog posts to deepen your understanding of AWS services and best practices. By following this roadmap, you can effectively learn AWS as a beginner and build a strong foundation for your cloud computing journey. https://lnkd.in/gdG_Cmzc #AWS #CloudComputing #CloudEngineer #AWSRoadmap #CloudCertification #TechTips #CareerGrowth #DevOps #SRE #CloudEngineering #CloudComputing #CloudNative #Automation #ContinuousDelivery #ContinuousIntegration #Agile #DevSecOps #SoftwareEngineering #Cloud #Technology #CloudMigration #CloudSecurity #Microservices #Docker #Kubernetes #AWS #Azure #GCP #Terraform #Jenkins #GitLab #GitHub

2

1 commentaire

Optimizing Content loading strategies using throttle =============================== When scrolling the web page and attaching a handler to the scroll event, the handler runs for every pixel change, resulting in reduced page performance due to unnecessary calls. To avoid this, we can throttle some of the events in between. This will help us to optimize content loading strategies.

2

1 commentaire

Leverage vSAN for persistent volumes in your #Kubernetes deployments!  This YouTube video  Learn how to manage storage policies and overcome operational challenges for a seamless #cloudnative experience. CSI automates the storage creation process, eliminating the need for manual intervention. It consists of three different classes: block volumes, file volumes, and storage policies. Block volumes are accessible by only one container, while file volumes are commonly mapped in the storage class. Storage policies are used to define data storage and resiliency specifications. CSI allows mapping these classes together, enabling you to call a PBM policy from within the YAML configuration during container creation. Overall, CSI automates storage provisioning and management for containerized applications. https://lnkd.in/eHfDFK-c  #VMware #vSphere #vSANCSI #KubernetesStorage #DataManagement #CloudStorage #DevOps #ITInfrastructure #Containerization #DigitalTransformation #broadcom #sds #kubernetes #tanzu #iaas

9

Those who have used Kubernetes installs in public cloud environments are likely familiar with the Load Balancer service type supported by Kubernetes. It offers a way to have an external IP address associated with a service in your cluster. Public cloud providers take care of this mapping. When running your own clusters you need to set this up using something like MetalLB. I have used MetalLB with all the private Kubernetes clusters I have setup and it works good with little setup required. It has a Controller pod and a daemonset of Speaker pods. You need to provide MetalLB with a range of IP addresses that are externally routable in your environment and then it listens for new Load Balancer service requests in your cluster. When a new Load Balancer service is setup, MetalLB allocates one of the external IP addresses for it and it advertises the routes to the IP's using standard routing protocols. It ensures external users get routed to the service running inside your cluster. This can all be setup on a local Kubernetes environment like a Kind cluster and below Tyler Auerbeck shows how to set it up. https://lnkd.in/eKRMAWJb

13

🚀 Terraform vs Ansible : An In-Depth Comparison 🌐 💻 Check out our latest blog to understand the key differences between Terraform and Ansible. Learn how Terraform excels at infrastructure provisioning and Ansible shines in configuration management and application deployment. 📖 Read the full blog : 𝒍𝒊𝒏𝒌 𝒊𝒔 𝒊𝒏 𝒄𝒐𝒎𝒎𝒆𝒏𝒕 Happy Automation!!! Happy Learning!!! Sudha Yadav #devopsengineer #devops #trainwithshubham #shubhamlondhe #job #devopscommunity #devopstraining #learningeveryday #challenge #Learning #TechSkills #Progress #trending #community #TogetherWeGrow #Terraform #Ansible #Automation #IT #InfrastructureManagement #TechTips #ITInfrastructure #DevOps #Infrastructure #TechInsights #ITAutomation #TechBlog #CloudComputing #SysAdmin #AnsibleRoles #InfrastructureAsCode

6

3 commentaires

In my experience working with vSAN, I'm impressed by the improvements in resilience provided by vSAN Express Storage Architecture (ESA) compared to the original architecture. Previously, a single component failure could lead to data loss due to shared fault domains. ESA eliminates these domains and uses a distributed architecture, so a drive failure only impacts that specific drive. This translates to faster recovery times and minimizes downtime. Additionally, vSAN ESA boasts performance gains of 2-4x compared to the original architecture. Even during a failure,ESA can recover quickly with minimal performance impact. Finally, ESA simplifies maintenance events by eliminating shared fault domains. Removing a storage device for maintenance has a much smaller footprint on the overall storage system. Overall, vSAN ESA offers significant improvements in resilience, performance, and maintainability for virtual SAN deployments. #vSAN #storage #ITinfrastructure #vSANESA #VMwareESA #ExpressStorageArchitecture #Resilience https://lnkd.in/e4vmMRdp

11

1 commentaire

𝙰𝚗𝚗𝚘𝚞𝚗𝚌𝚒𝚗𝚐 𝚝𝚑𝚎 𝚛𝚎𝚕𝚎𝚊𝚜𝚎 𝚘𝚏 𝙺𝚞𝚋𝚎𝚛𝚗𝚎𝚝𝚎𝚜 𝚟𝟷.𝟹𝟶: 𝚄𝚠𝚞𝚋𝚎𝚛𝚗𝚎𝚝𝚎𝚜, 𝚝𝚑𝚎 𝚌𝚞𝚝𝚎𝚜𝚝 𝚛𝚎𝚕𝚎𝚊𝚜𝚎! Similar to previous releases, the release of Kubernetes v1.30 introduces new stable, beta, and alpha features. The consistent delivery of top-notch releases underscores the strength of our development cycle and the vibrant support from our community. This release consists of 45 enhancements. Of those enhancements, 17 have graduated to Stable, 18 are entering Beta, and 10 have graduated to Alpha Kubernetes v1.30: Uwubernetes Official blog link: https://lnkd.in/dDabVzmv #kubernetes #release #devopscommunity #awscommunity

31

1 commentaire

How #Azure #Kubernetes Service supports OSSKU Migration between #Ubuntu and Azure Linux

9

Minikube is local Kubernetes, the simplest way to learn and develop for Kubernetes. I share this tutorial, which has helped me understand the fundamentals. https://lnkd.in/ek2Ys-fk #Kubernetes #CloudNative

6