Hardened Infrastructure¶
Architectural Context
Comprehensive chronological reference library for Hardened Infrastructure.
Kubernetes-security¶
-
cilium.io π [ENTERPRISE-STABLE]
-
techmanyu.com: Kubernetes Security with Kube-bench and Kube-hunter π π [ENTERPRISE-STABLE]
- kube-bench π Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
- devopscube.com/kube-bench-guide: Kube-Bench: Kubernetes CIS Benchmarking Tool
- kube-hunter π Hunt for security weaknesses in Kubernetes clusters
- k21academy.com: Secure and Harden Kubernetes, AKS and EKS Cluster with kube-bench, kube-hunter and CIS Benchmarks π
- kube-bench π Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
- devopscube.com/kube-bench-guide: Kube-Bench: Kubernetes CIS Benchmarking Tool
-
therecord.media: NSA, CISA publish Kubernetes hardening guide ππ π [ARCHITECTURE-GUIDE]
- Scan containers and Pods for vulnerabilities or misconfigurations.
- Run containers and Pods with the least privileges possible.
- Use network separation to control the amount of damage a compromise can cause.
- Use firewalls to limit unneeded network connectivity and encryption to protect confidentiality.
- Use strong authentication and authorization to limit user and administrator access as well as to limit the attack surface.
- Use log auditing so that administrators can monitor activity and be alerted to potential malicious activity.
- Periodically review all Kubernetes settings and use vulnerability scans to help ensure risks are appropriately accounted for and security patches are applied.
- Scan containers and Pods for vulnerabilities or misconfigurations.
-
learnk8s.io/authentication-kubernetes: User and workload identities in Kubernetes πππ π [ENTERPRISE-STABLE]
- The difference b/w externally managed and internal identities.
- How Kubernetes assigns identities for internal users with Service Accounts.
- The difference b/w externally managed and internal identities.
-
devopscube.com: How To Create Kubernetes Service Account For API Access π [CASE-STUDY]
- devopscube.com: How to Create kubernetes Role for Service Account
- github.com/scriptcamp/kubernetes-serviceaccount-example Example Kubernetes manifests to create service account mapped to Rolebinding.
- devopscube.com: How to Create kubernetes Role for Service Account
-
- "I've always wondered how folks expect a system would be able to protect data at rest like that. If the public key and private key are local on the machine - nothing is secure no matter what algorithm is used"
- "The issue is not new or unique to k8s. There is a general confusion between encoding and encryption. Ask any web dev about base64, and there is a good chance they'll tell you it's encryption"
- "The semantics are important. Easy to grant an RBAC policy like "read only except secrets"
- "I just meant that base64 prevents you from logging a secret in plain text by accident⦠but many more layers are required to keep your secrets secret"
- "You need to configure how the key is managed and ideally opt into something like KMS plugin (which depends on how the cluster is hosted) to make it good"
- "I've always wondered how folks expect a system would be able to protect data at rest like that. If the public key and private key are local on the machine - nothing is secure no matter what algorithm is used"
-
medium.com/@knoldus: Using sealed secrets in Kubernetes π [ENTERPRISE-STABLE]
- rancher.com: Enhancing Kubernetes Security with Pod Security Policies, Part 1 π [ENTERPRISE-STABLE]
- Dzone - OAuth 2.0 π [ENTERPRISE-STABLE]
- Kubernetes Security Best Practices π π [ENTERPRISE-STABLE]
- jeffgeerling.com: Everyone might be a cluster-admin in your Kubernetes cluster π [ENTERPRISE-STABLE]
- Microsoft.com: Attack matrix for Kubernetes π π [ENTERPRISE-STABLE]
- codeburst.io: 7 Kubernetes Security Best Practices You Must Follow π [ENTERPRISE-STABLE]
- thenewstack.io: Laying the Groundwork for Kubernetes Security, Across Workloads, Pods and Users π [ENTERPRISE-STABLE]
- horovits.wordpress.com: Kubernetes Security Best Practices π [ENTERPRISE-STABLE]
- containerjournal.com: How to Secure Your Kubernetes Cluster π π [CASE-STUDY]
- medium: How to Harden Your Kubernetes Cluster for Production π π [CASE-STUDY]
- kubernetes.io: Cloud native security for your clusters π [ENTERPRISE-STABLE]
- tldrsec.com: Risk8s Business: Risk Analysis of Kubernetes Clusters π π [ENTERPRISE-STABLE]
- labs.bishopfox.com: Bad Pods: Kubernetes Pod Privilege Escalation π π [ENTERPRISE-STABLE]
- sysdig.com: Kubernetes Security Guide π π [ARCHITECTURE-GUIDE]
- resources.whitesourcesoftware.com: Kubernetes Security Best Practices π π [ENTERPRISE-STABLE]
- sysdig.com: Getting started with Kubernetes audit logs and Falco π π [ENTERPRISE-STABLE]
- thenewstack.io: Best Practices for Securely Setting up a Kubernetes Cluster π [ENTERPRISE-STABLE]
- thenewstack.io: A Security Comparison of Docker, CRI-O and Containerd π π [ENTERPRISE-STABLE]
- github.com/stackrox: Certified Kubernetes Security Specialist Study Guide π π [ARCHITECTURE-GUIDE]
- youtube: Kubernetes Security: Attacking and Defending K8s Clusters - by Magno Logan π₯ π [ENTERPRISE-STABLE]
- cncf.io: Kubernetes Security π π [ENTERPRISE-STABLE]
- microsoft.com: Secure containerized environments with updated threat matrix for Kubernetes π [ENTERPRISE-STABLE]
- kyverno.io π π [ENTERPRISE-STABLE]
- Tetragon (Cilium) π [ENTERPRISE-STABLE]
- kyverno.io/policies π π [ENTERPRISE-STABLE]
- cyberark.com: Attacking Kubernetes Clusters Through Your Network Plumbing: Part 1 π [ENTERPRISE-STABLE]
- redkubes.com: 10 Kubernetes Security Risks & Best Practices π [ENTERPRISE-STABLE]
- thenewstack.io: Defend the Core: Kubernetes Security at Every Layer π [ENTERPRISE-STABLE]
- Analyze Kubernetes Audit logs using Falco π π [ENTERPRISE-STABLE]
- blog.kasten.io: Kubernetes Ransomware Protection with Kasten K10 v4.0 π [ENTERPRISE-STABLE]
- helpnetsecurity.com: Kubestriker: A security auditing tool for Kubernetes clusters π π [ENTERPRISE-STABLE]
- Kubernetes Goat π π [ENTERPRISE-STABLE]
- itnext.io: How-To: Kubernetes Cluster Network Security π π [ENTERPRISE-STABLE]
- gist.github.com: How to protect your ~/.kube/ configuration π [CASE-STUDY]
- levelup.gitconnected.com: Enforce Audit Policy in Kubernetes (k8s) π [ENTERPRISE-STABLE]
- snyk.io: 10 Kubernetes Security Context settings you should understand π [ENTERPRISE-STABLE]
- magalix.com: Top 8 Kubernetes Security Best Practices π π [ENTERPRISE-STABLE]
- redhat.com: The State of Kubernetes Security π [ENTERPRISE-STABLE]
- fairwinds.com: Discover the Top 5 Kubernetes Security Mistakes You're (Probably) Making π [ENTERPRISE-STABLE]
- tigera.io: Kubernetes security policy design: 10 critical best practices π π [ENTERPRISE-STABLE]
- empresas.blogthinkbig.com: Descubierta una vulnerabilidad en Kubernetes que permite acceso a redes restringidas (CVE-2020-8562) π [ENTERPRISE-STABLE]
- thenewstack.io: Kubernetes: An Examination of Major Attacks π π [ENTERPRISE-STABLE]
- cloud.redhat.com: Top Open Source Kubernetes Security Tools of 2021 ππ π [ENTERPRISE-STABLE]
- cncf.io: How to secure your Kubernetes control plane and node components π [CASE-STUDY]
- redhat.com: State of Kubernetes Security Report - Spring 2021 (PDF) π π [ENTERPRISE-STABLE]
- kubernetes.io: Overview of Cloud Native Security ππ π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Integrate a Kubernetes Cluster with an External Vault π π [ENTERPRISE-STABLE]
- talkingquickly.co.uk: Kubernetes Single Sign On - A detailed guide π π [ARCHITECTURE-GUIDE]
- armosec.io: A Practical Guide to the Different Compliance Kubernetes Security Frameworks and How They Fit Together ππ π [ARCHITECTURE-GUIDE]
- thenewstack.io: How to Secure Kubernetes, the OS of the Cloud π [CASE-STUDY]
- akhilsharma.work: The 4C's of Kubernetes Security π [ENTERPRISE-STABLE]
- medium: Securing the Kubernetes cluster | Lessandro Z. Ugulino π [ENTERPRISE-STABLE]
- infoworld.com: The race to secure Kubernetes at run time π [ENTERPRISE-STABLE]
- goteleport.com: Kubernetes API Access Security Hardening π [ENTERPRISE-STABLE]
- infoworld.com: Securing the Kubernetes software supply chain with Microsoft's Ratify π [ENTERPRISE-STABLE]
- amazicworld.com: Top 5 security threats unique to a Kubernetes and Cloud Native stack π [ENTERPRISE-STABLE]
- venturebeat.com: Kubernetes security will have a breakout year in 2022 π [ENTERPRISE-STABLE]
- medium: Comparing Kubernetes Security Frameworks and Guidance π π [ENTERPRISE-STABLE]
- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Guidelines (Pt. 2) π π [ARCHITECTURE-GUIDE]
- blog.devgenius.io: How is security managed in Kubernetes clusters? π [ENTERPRISE-STABLE]
- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 1: Pods π [CASE-STUDY]
- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 2: Network π [CASE-STUDY]
- medium.com/@jonathan_37674: Kubernetes Security Best Practices: Definitive Guide π [ARCHITECTURE-GUIDE]
- isovalent.com: Detecting a Container Escape with Cilium and eBPF π [ENTERPRISE-STABLE]
- mattermost.com: The Top 7 Open Source Tools for Securing Your Kubernetes Cluster π [ENTERPRISE-STABLE]
- infoworld.com: 10 steps to automating security in Kubernetes pipelines π [ENTERPRISE-STABLE]
- developers.redhat.com: Secure your Kubernetes deployments with eBPF π [ENTERPRISE-STABLE]
- faun.pub: From dev to admin: an easy Kubernetes privilege escalation you should be aware of β the attack π [ENTERPRISE-STABLE]
- xenitab.github.io: Kubernetes Ephemeral Container Security π π [ENTERPRISE-STABLE]
- armosec.io: How to Secure Deployments in Kubernetes? π π [CASE-STUDY]
- medium.com/@dotdc: Is your Kubernetes API Server exposed? Learn how to check and fix! π π [CASE-STUDY]
- levelup.gitconnected.com: The Core of Kubernetes Security: Clusters π [ENTERPRISE-STABLE]
- sysdig.com: How attackers use exposed Prometheus server to exploit Kubernetes clusters | Miguel HernΓ‘ndez π [ENTERPRISE-STABLE]
- cast.ai: Kubernetes Security: 10 Best Practices from the Industry and Community π π [ENTERPRISE-STABLE]
- thenewstack.io: Basic Principles Key to Securing Kubernetesβ Future π [ENTERPRISE-STABLE]
- medium.com/@codingkarma: Kubernetes Goat Part-1 π [ENTERPRISE-STABLE]
- medium.com/@badawekoo: Limit number of processes running in a Kubernetes pod π [ENTERPRISE-STABLE]
- copado.com: Applying a Zero Trust Infrastructure in Kubernetes π [ENTERPRISE-STABLE]
- dev.to/pavanbelagatti: Kubernetes Security Best Practices For Developers π [ENTERPRISE-STABLE]
- itnext.io: Journey Of A Microservice Application In The Kubernetes World π π [ENTERPRISE-STABLE]
- tutorialboy24.blogspot.com: A Detailed Talk about K8S Cluster Security from the Perspective of Attackers (Part 2) π π [CASE-STUDY]
- medium.com/cloudyrion: Kubernetes end-to-end chain exploit π [ENTERPRISE-STABLE]
- itnext.io: Performing Security Checks for Deployed Kubernetes Manifests π [ENTERPRISE-STABLE]
- securitycafe.ro: A COMPLETE KUBERNETES CONFIG REVIEW METHODOLOGY π [ENTERPRISE-STABLE]
- itnext.io: Introduction to Kubernetes Security for Security Professionals π [ENTERPRISE-STABLE]
- dev.to/mattiasfjellstrom: Kubernetes-101: Security concepts π [ENTERPRISE-STABLE]
- blog.alexellis.io: What if your Pods need to trust self-signed certificates? π [ENTERPRISE-STABLE]
- thenewstack.io: Securing Kubernetes in a Cloud Native World π [ENTERPRISE-STABLE]
- collabnix.com: Applying DevSecOps Practices to Kubernetes π [ENTERPRISE-STABLE]
- dev.to/thenjdevopsguy: Securing Kubernetes Pods For Production Workloads π [ENTERPRISE-STABLE]
- dev.to/thenjdevopsguy: The 4 Cβs Of Kubernetes Security π [ENTERPRISE-STABLE]
- thenewstack.io: Cloud Native Identity and Access Management in Kubernetes π [ENTERPRISE-STABLE]
- curity.io: OAuth 2.0 Overview π [ENTERPRISE-STABLE]
- curity.io: OpenID Connect Overview π [ENTERPRISE-STABLE]
- curity.io: Client Security π [ENTERPRISE-STABLE]
- dev.to/gabrielbiasi: Automatic SSO in Kubernetes workloads using a sidecar container π [ENTERPRISE-STABLE]
- dev.to/aws-builders: Best Practices for Securing Kubernetes Deployments π π [ENTERPRISE-STABLE]
- thenewstack.io: Jetstack Secure Promises to Ease Kubernetes TLS Security π [ENTERPRISE-STABLE]
- xgrid.medium.com: Securing a Kubernetes cluster using TLS certificates π π [ENTERPRISE-STABLE]
- ahmedy.hashnode.dev: Creating TLS Certificates for K8s components with OpenSSL π [ENTERPRISE-STABLE]
- erkanzileli.medium.com: How TLS Certificates Work π [ENTERPRISE-STABLE]
- medium.com/@martin.hodges: Using a wildcard certificate within your Kubernetes cluster π [ENTERPRISE-STABLE]
- GitHub Code Security Risk Assessment: Free Vulnerability Scanning π [ENTERPRISE-STABLE]
- blog.cloudsecque.com: How to Improve the Security of Your Applications with Kubernetes Security Scanners π [CASE-STUDY]
- aninditabasak.medium.com: A Lap around Kubernetes Security & Vulnerability scanning Tools β checkov, kube-hunter, kube-bench & Starboard π [ENTERPRISE-STABLE]
- blog.flant.com: Kubernetes cluster security assessment with kube-bench and kube-hunter π [ENTERPRISE-STABLE]
- raesene.github.io: Let's talk about Kubernetes on the Internet π [ENTERPRISE-STABLE]
- github.com/Shopify/kubeaudit ππ π [ENTERPRISE-STABLE]
- towardsdev.com: 12 Scanners to Find Security Vulnerabilities and Misconfigurations in Kubernetes π [ENTERPRISE-STABLE]
- kubernetes.io: Security Checklist ππ π [ENTERPRISE-STABLE]
- itnext.io: Kubernetes OWASP Top 10: Centralised Policy Enforcement π [ENTERPRISE-STABLE]
- faun.pub: Gatekeeper | K8 hardening backlog π [ENTERPRISE-STABLE]
- systemweakness.com: OWASP-K8S Security: Insecure Workload Configurations π [ENTERPRISE-STABLE]
- owasp.org: OWASP Kubernetes Top Ten π [ENTERPRISE-STABLE]
- darkreading.com: Top 10 Kubernetes Security Risks Every DevSecOps Pro Should Know π [ENTERPRISE-STABLE]
- sysdig.com: OWASP Kubernetes Top 10 π π [ENTERPRISE-STABLE]
- itnext.io: Kubernetes OWASP Top 10: Secrets Management π [ENTERPRISE-STABLE]
- blog.cyble.com: Exposed Kubernetes Clusters π [ENTERPRISE-STABLE]
- Kubernetes Hardening Guidance ππ π [ENTERPRISE-STABLE]
- thenewstack.io: The NSA Can Help Secure Your Kubernetes Clusters π [ENTERPRISE-STABLE]
- Kubescape π π [ENTERPRISE-STABLE]
- infoq.com: Armo Releases Kubescape K8s Security Testing Tool: Q&A with VP Jonathan Kaftzan π [ENTERPRISE-STABLE]
- infoq.com π [ENTERPRISE-STABLE]
- thenewstack.io: NSA on How to Harden Kubernetes π [CASE-STUDY]
- blog.gitguardian.com: Hardening Your Kubernetes Cluster - Threat Model (Pt. 1) ππ π [ENTERPRISE-STABLE]
- blog.gitguardian.com: Kubernetes Hardening Tutorial Part 3: Authn, Authz, Logging & Auditing π [CASE-STUDY]
- armosec.io: NSA & CISA Kubernetes Hardening Guide β what is new with version 1.1 π [ARCHITECTURE-GUIDE]
- ibm.com: CIS Benchmarks π [ENTERPRISE-STABLE]
- aymen-abdelwahed.medium.com: K8s Operators β CIS Kubernetes Benchmarks π [ENTERPRISE-STABLE]
- rancher/cis-operator π [ENTERPRISE-STABLE]
- Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) π [ENTERPRISE-STABLE]
- medium: Working with Service Account In Kubernetes π π [ENTERPRISE-STABLE]
- github.com/dvob/k8s-s2s-auth: Kubernetes Service Accounts π π [ENTERPRISE-STABLE]
- sandeepbaldawa.medium.com: Service Accounts in K8s (Kubernetes) π [ENTERPRISE-STABLE]
- mjarosie.github.io: IAM roles for Kubernetes service accounts - deep dive π [ENTERPRISE-STABLE]
- linkerd.io: Using Kubernetes's new Bound Service Account Tokens for secure workload identity π [ENTERPRISE-STABLE]
- medium.com/pareture: Kubernetes Bound Projected Service Account Token Volumes Might Surprise You π [ENTERPRISE-STABLE]
- medium.com/geekculture: K8s β ServiceAccount Token π [ENTERPRISE-STABLE]
- motilayo.hashnode.dev: Exploring Kubernetes Service Account Tokens and Secure Workload Identity Federation π [ENTERPRISE-STABLE]
- overcast.blog: Kubernetes Service Accounts: A Practical Guide π [ARCHITECTURE-GUIDE]
- cncf.io: Revealing the secrets of Kubernetes secrets π π [ENTERPRISE-STABLE]
- Hands on your first Kubernetes secrets π π [ENTERPRISE-STABLE]
- dev.to: Store your Kubernetes Secrets in Git thanks to Kubeseal. Hello SealedSecret! π π [ENTERPRISE-STABLE]
- blog.doit-intl.com: Kubernetes and Secrets Management in the Cloud π [ENTERPRISE-STABLE]
- itnext.io: Effective Secrets with Vault and Kubernetes π [ENTERPRISE-STABLE]
- kubernetes.io: Encrypting Secret Data at Rest π π [ENTERPRISE-STABLE]
- enterprisersproject.com: How to explain Kubernetes Secrets in plain English π π [CASE-STUDY]
- millionvisit.blogspot.com: Kubernetes for Developers #19: Manage app credentials using Kubernetes Secrets π π [ENTERPRISE-STABLE]
- kubermatic.com: Keeping the State of Apps Part 2: Introduction to Secrets π [ENTERPRISE-STABLE]
- medium: Kubernetes Secrets Explained π [ENTERPRISE-STABLE]
- medium: Managing your sensitive information during GitOps process with Secret Sealed π [ENTERPRISE-STABLE]
- enlear.academy: Sealed Secrets with Kubernetes π [ENTERPRISE-STABLE]
- medium.com/codex: Sealed Secrets for Kubernetes π [ENTERPRISE-STABLE]
- macchaffee.com: Plain Kubernetes Secrets are fine π π [ENTERPRISE-STABLE]
- youtube: Manage Kubernetes Secrets With External Secrets Operator (ESO) π π₯ π [ENTERPRISE-STABLE]
- carlosalca.medium.com: How to manage all my K8s secrets in git securely with Bitnami Sealed Secrets π [CASE-STUDY]
- cloud.redhat.com: A Guide to Secrets Management with GitOps and Kubernetes π π [ARCHITECTURE-GUIDE]
- itnext.io: Vault cluster with auto unseal on Kubernetes π [ENTERPRISE-STABLE]
- pjame-fb.medium.com: Kubernetes Secrets from Secrets Manager using External Secrets Operators π [ENTERPRISE-STABLE]
- mixi-developers.mixi.co.jp: Comparing External Secrets Operator with Secret Storage CSI as Kubernetes External Secrets is Deprecated π [ENTERPRISE-STABLE]
- faun.pub: Secrets | Kubernetes π [ENTERPRISE-STABLE]
- eminalemdar.medium.com: Cloud Native Secret Management with External Secrets Operator π [ENTERPRISE-STABLE]
- piotrminkowski.com: Sealed Secrets on Kubernetes with ArgoCD and Terraform π [ENTERPRISE-STABLE]
- medium.com/google-cloud: Handle Kubernetes Secrets the GitOps Way β Part 1 π [ENTERPRISE-STABLE]
- dev.to: A Detailed Talk about K8S Cluster Security from the Perspective of Attackers (Part 1) π [ENTERPRISE-STABLE]
- cert-manager.io π π [ENTERPRISE-STABLE]
- Kubernetes Certs π [ENTERPRISE-STABLE]
- Using SSL certificates from Letβs Encrypt in your Kubernetes Ingress via cert-manager π π [ENTERPRISE-STABLE]
- medium: Encrypting the certificate for Kubernetes (Letβs Encrypt) π π [ENTERPRISE-STABLE]
- rejupillai.com: Letβs Encrypt the Web (for free) π [ENTERPRISE-STABLE]
- betterprogramming.pub: Kubernetes and SSL Certificate Management π π [ENTERPRISE-STABLE]
- getbetterdevops.io: How to Secure K8S Nginx Ingress With Letβs Encrypt and Cert Manager π [CASE-STUDY]
- faun.pub: Automate Certificate Management In Kubernetes Using Cert-Manager π [ENTERPRISE-STABLE]
- cert-manager/cert-manager π [ENTERPRISE-STABLE]
- github.com/cert-manager: Policy Approver π [ENTERPRISE-STABLE]
- jetstack.io: Getting started using cert-manager with the sig-network Gateway API π [ENTERPRISE-STABLE]
- medium.com/@knoldus: Configure SSL certificate with cert-manager on Kubernetes π [ENTERPRISE-STABLE]
- blog.devgenius.io: Automated DNS/TLS with External DNS & LetsEncrypt on Kubernetes π [ENTERPRISE-STABLE]
- itnext.io: Upgrade Cert-Manager for Your Production Deployment Without Downtime π [ENTERPRISE-STABLE]
- faun.pub: Letβs encrypt and CertManager π [ENTERPRISE-STABLE]
- armin.su: SSL certificates from Letβs Encrypt for Kubernetes Private Ingress via Terraform π [ENTERPRISE-STABLE]
- dev.to: Kubernetes TLS, Demystified π π [ENTERPRISE-STABLE]
- gini/dexter π [ENTERPRISE-STABLE]
- betterprogramming.pub: Kubernetes Authentication Sidecars: A Revelation in Microservice Architecture π [ARCHITECTURE-GUIDE]
- blog.devgenius.io: SSO Authentication for Applications in Kubernetes π [ENTERPRISE-STABLE]
- geek-cookbook.funkypenguin.co.nz: Using OAuth2 proxy for Kubernetes Dashboard π [ENTERPRISE-STABLE]
- imanishchaudhary.medium.com: Securing Kubernetes Dashboards: SSO Authentication and RBAC Implementation with Okta and OAuth2 Proxy π [ENTERPRISE-STABLE]
- Configure RBAC in Kubernetes Like a Boss π π [ENTERPRISE-STABLE]
- infracloud.io: How to setup Role based access (RBAC) to Kubernetes Cluster π π [CASE-STUDY]
- Kubernetes RBAC Permission Manager π π [ENTERPRISE-STABLE]
- Krane π π [ENTERPRISE-STABLE]
- rbac.dev πππ π [ENTERPRISE-STABLE]
- github.com/clvx/k8s-rbac-model: Kubernetes RBAC Model π [ENTERPRISE-STABLE]
- loft.sh: Kubernetes RBAC: Basics and Advanced Patterns π [ENTERPRISE-STABLE]
- marcusnoble.co.uk: Restricting cluster-admin Permissions π [ENTERPRISE-STABLE]
- medium.com/devops-mojo: Kubernetes β Role-Based Access Control (RBAC) Overview π [ENTERPRISE-STABLE]
- loft-sh.medium.com: 10 Essentials for Kubernetes Access Control π [ENTERPRISE-STABLE]
- sumanthkumarc.medium.com: Kubernetes RBAC β Update default ClusterRoles without editing them π [ENTERPRISE-STABLE]
- faun.pub: Assign permissions to an user in Kubernetes. An overview of RBAC-based AuthZ in k8s π π [ENTERPRISE-STABLE]
- anaisurl.com: RBAC Explained with Examples π π [ENTERPRISE-STABLE]
- medium.com/@badawekoo: Using RBAC in Kubernetes for authorization-Complete Demo-Part 1 π [ENTERPRISE-STABLE]
- thenewstack.io: Securing Access to Kubernetes Environments with Zero Trust π [ENTERPRISE-STABLE]
- learnk8s.io: Limiting access to Kubernetes resources with RBAC πππ π [ENTERPRISE-STABLE]
- medium.com/@15daniel10: YOYO attack on a K8S cluster π [ENTERPRISE-STABLE]
- dev.to: Binding AWS IAM roles to Kubernetes Service Account for on-prem clusters | Daniele Polencic π π [ENTERPRISE-STABLE]
- medium.com/@danielepolencic: How does RBAC work in kubernetes π π [ENTERPRISE-STABLE]
- dominik-tornow.medium.com: Inside Kubernetes RBAC π [ENTERPRISE-STABLE]
- medium.com/@jtdv01: Kubernetes Authorization and Role Based Access Controls π π [ENTERPRISE-STABLE]
- faun.pub: Give Users and Groups Access to Kubernetes Cluster Using RBAC π [ENTERPRISE-STABLE]
- medium.com/@danielepolencic: AWS IAM Roles for service accounts for on-prem clusters π [ENTERPRISE-STABLE]
- medium.com/andcloudio: Setting up Authentication and RBAC Authorization in Kubernetes π [ENTERPRISE-STABLE]
- dev.to: Configure RBAC in Kubernetes Like a Boss π [ENTERPRISE-STABLE]
- raesene.github.io: Auditing RBAC - Redux π [ENTERPRISE-STABLE]
- goteleport.com: A Simple Overview of Authentication Methods for Kubernetes Clusters π [ENTERPRISE-STABLE]
- medium.com/@mehmetodabashi: Authentication and Authorization in Kubernetes: Client Certificates and Role Based Access Control (RBAC) π [ENTERPRISE-STABLE]
- medium.com/@brunoolimpio: Kubernetes DeepDive β Parte 2 - Kubernetes RBAC and more... | Bruno Olimpio π [ENTERPRISE-STABLE]
- youtube: Kubernetes RBAC Explained | Anton Putra π π₯ π [ENTERPRISE-STABLE]
- paralus.io π π [ENTERPRISE-STABLE]
- github.com/ondat/trousseau π [ENTERPRISE-STABLE]
- loft.sh: Kubernetes and LDAP: Enterprise Authentication for Kubernetes π [ENTERPRISE-STABLE]
- blog.styra.com: Why RBAC is not enough for kubernetes security ππ π [ENTERPRISE-STABLE]
- medium: Single Sign-On in Kubernetes π π [ENTERPRISE-STABLE]
- trstringer.com: Create a Basic Kubernetes Validating Webhook π [ENTERPRISE-STABLE]
- box/kube-exec-controller π [ENTERPRISE-STABLE]
- Building a DDoS Response Plan with Azure DDoS Protection π [ENTERPRISE-STABLE]
- Kubernetes Security 101: Risks and 29 Best Practices π π [ENTERPRISE-STABLE]
- thenewstack.io: 6 Kubernetes Security Best Practices π π [ENTERPRISE-STABLE]
- armosec.io: Kubernetes Security Best Practices: Definitive Guide π [ARCHITECTURE-GUIDE]
- semaphoreci.com: Secure Your Kubernetes Deployments π [ENTERPRISE-STABLE]
- engineering.dynatrace.com: Kubernetes Security Best Practices -Part 1: Role Based Access Control (RBAC) π [ENTERPRISE-STABLE]
- medium.com/dynatrace-engineering: Kubernetes Security Best Practices Part 2: Network Policies π [ENTERPRISE-STABLE]
- blog.frankel.ch: Learning by auditing Kubernetes manifests π [ENTERPRISE-STABLE]
- spectrocloud.com: Kubernetes security best practices: 5 easy ways to cut risk π [ENTERPRISE-STABLE]
- medium.com/@cloud_tips: Kubernetes Security Best Practices π [ENTERPRISE-STABLE]
- From Zero to Hero with Identity and Access Control in Azure Kubernetes Service π [ENTERPRISE-STABLE]
- Configure Microsoft Entra for Increased Security π [ENTERPRISE-STABLE]
- kubernetes.io: Authenticating π [ENTERPRISE-STABLE]
- kubernetes.io: Access Clusters Using the Kubernetes API π [ENTERPRISE-STABLE]
- kubernetes.io: Accesing Clusters π [ENTERPRISE-STABLE]
- magalix.com: kubernetes authentication π π [ENTERPRISE-STABLE]
- magalix.com: kubernetes authorization π π [ENTERPRISE-STABLE]
- kubernetes login π [ENTERPRISE-STABLE]
- learnk8s.io: Authentication between microservices using Kubernetes identities π π [ENTERPRISE-STABLE]
- gravitational.com: How to Set Up Kubernetes SSO with SAML π [CASE-STUDY]
- lisowski0925.medium.com: Using Kubernetes Certificate Signing Requests and RBAC for User Authentication and Authorization π [ENTERPRISE-STABLE]
- Kubernetes Authentication and Authorization with X509 client certificates π [ENTERPRISE-STABLE]
- stackoverflow: Accessing the Kubernetes REST end points using bearer token π [ENTERPRISE-STABLE]
- OpenID Connect π [ENTERPRISE-STABLE]
- Implementing a custom Kubernetes authentication method π [ENTERPRISE-STABLE]
- Pod Security Policy (SCC in OpenShift) π π [ENTERPRISE-STABLE]
- developer.squareup.com: Kubernetes Pod Security Policies (PSP) π [ENTERPRISE-STABLE]
- itnext.io: Implementing a Secure-First Pod Security Policy Architecture π [ARCHITECTURE-GUIDE]
- Neon Mirrors: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno π [ENTERPRISE-STABLE]
- ibrahims.medium.com: Security Context β Kubernetes π [ENTERPRISE-STABLE]
- kubernetes-sigs/security-profiles-operator π [ENTERPRISE-STABLE]
- kubernetes.io: What's new in Security Profiles Operator v0.4.0 π [ENTERPRISE-STABLE]
- Security Group Rules EKS π [ENTERPRISE-STABLE]
- EC2 ENI and IP Limit π [ENTERPRISE-STABLE]
- Calico in EKS π [ENTERPRISE-STABLE]
- Amazon EKS Best Practices Guide for Security π π [ARCHITECTURE-GUIDE]
- medium.com: Securing Kubernetes Dashboard on EKS with Pomerium π [ENTERPRISE-STABLE]
- external-secrets.io π π [ENTERPRISE-STABLE]
- mahira-technology.medium.com: Kubernetes Secrets Management: Level Up with External Secrets Operator π [ENTERPRISE-STABLE]
- faun.pub: External Secret Operator on AKS (with Terraform) for Azure Key Vault Integration (with Workload Identity) π [ENTERPRISE-STABLE]
- hackerone.com: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces π [ENTERPRISE-STABLE]
- blog.lightspin.io: NGINX Custom Snippets CVE-2021-25742 π [ENTERPRISE-STABLE]
- kubernetes.io: Official CVE Feed π π [ENTERPRISE-STABLE]
- kubernetes.io: Announcing the Auto-refreshing Official Kubernetes CVE Feed π [ENTERPRISE-STABLE]
- kubescape π [ENTERPRISE-STABLE]
Devsecops¶
- goteleport.com: Anatomy of a Cloud Infrastructure Attack via a Pull Request π [ENTERPRISE-STABLE]
-
bleepingcomputer.com: Over 900,000 Kubernetes instances found exposed online π [ENTERPRISE-STABLE]
- Over 900,000 misconfigured Kubernetes clusters were found exposed on the internet to potentially malicious scans, some even vulnerable to data-exposing cyberattacks.
- Kubernetes is a highly versatile open-source container orchestration system for hosting online services and managing containerized workloads via a uniform API interface.
- It enjoys massive adoption and growth rates thanks to its scalability, flexibility in multi-cloud environments, portability, cost, app development, and system deployment time reductions.
- If Kubernetes isnβt configured properly, remote actors might be able to access internal resources and private assets that werenβt meant to be made public.
- Additionally, depending on the configuration, intruders could sometimes escalate their privileges from containers to break isolation and pivot to host processes, granting them intial access to internal corporate networks for futher attacks.
- Over 900,000 misconfigured Kubernetes clusters were found exposed on the internet to potentially malicious scans, some even vulnerable to data-exposing cyberattacks.
-
armosec.io: Kubernetes Security Compliance Frameworks π π [ENTERPRISE-STABLE]
- The challenge of administering security and maintaining compliance in a Kubernetes ecosystem is typically the same: an increasingly dynamic, changing landscape, be it new approaches of cyberattacks or adhering to changing regulations. Kubernetes security requires a complex and multifaceted approach since an effective strategy needs to:
- Ensure clean code
- Provide full observability
- Prevent the exchange of information with untrusted services
- Produce digital signatures for clean code and trusted applications
- Since Kubernetes follows a loosely coupled architecture, securing the ecosystem involves a cross-combination of best practices, tools, and processes. It is also recommended to consider frameworks that issue specific guidelines for easing the complexity of administering the security and compliance of a Kubernetes ecosystem. Such frameworks help organizations create flexible, iterative, and cost-effective approaches to keeping clusters and applications safe and compliant while ensuring optimum performance. A typical frameworkβs guidance on Kubernetes security and compliance should essentially consider:
- Architecture best practices
- Security within CI/CD pipelines
- Resource protection
- Container runtime protection
- Supply chain security
- Network security
- Vulnerability scanning
- Secrets management and protection
- Since Kubernetes follows a loosely coupled architecture, securing the ecosystem involves a cross-combination of best practices, tools, and processes. It is also recommended to consider frameworks that issue specific guidelines for easing the complexity of administering the security and compliance of a Kubernetes ecosystem. Such frameworks help organizations create flexible, iterative, and cost-effective approaches to keeping clusters and applications safe and compliant while ensuring optimum performance. A typical frameworkβs guidance on Kubernetes security and compliance should essentially consider:
- The challenge of administering security and maintaining compliance in a Kubernetes ecosystem is typically the same: an increasingly dynamic, changing landscape, be it new approaches of cyberattacks or adhering to changing regulations. Kubernetes security requires a complex and multifaceted approach since an effective strategy needs to:
- Ensure clean code
- Provide full observability
- Prevent the exchange of information with untrusted services
- Produce digital signatures for clean code and trusted applications
-
blog.aquasec.com: A Security Review of Docker Official Images: Which Do You Trust? (with trivy) π [ENTERPRISE-STABLE]
- medium: Install Hashicorp Vault on Kubernetes using Helm - Part 1 | Marco Franssen π [ENTERPRISE-STABLE]
-
hashicorp.com: HashiCorp Vault 1.11 Adds Kubernetes Secrets Engine, PKI Updates, and More π π [ENTERPRISE-STABLE]
- Favorite OSS feature is the K8S secrets engine that can generate K8S service accounts as dynamic secrets.
- Favorite Ent feature is that Autopilot can now perform safe, automated upgrades.
- Plus a dozen other improvements...
- Favorite OSS feature is the K8S secrets engine that can generate K8S service accounts as dynamic secrets.
-
GitOps secret management with bitnami-labs Sealed Secret and GoDaddy Kubernetes External Secrets π π [ENTERPRISE-STABLE]
- Kubernetes External Secrets π Integrate external secret management systems with Kubernetes. Kubernetes External Secrets allows you to use external secret management systems, like AWS Secrets Manager or HashiCorp Vault, to securely add secrets in Kubernetes.
-
therecord.media: UK government plans to release Nmap scripts for finding vulnerabilities π [ENTERPRISE-STABLE]
- ncsc.gov.uk: Introducing Scanning Made Easy Trial project makes vulnerability scanning easier.
-
(2026) Clair β 10978 π [DE FACTO STANDARD]
-
devopszone.info: DevSecOps Explained π [ENTERPRISE-STABLE]
- linkedin: Dear Google, my data has left your building! π [ENTERPRISE-STABLE]
- snyk.io: The State of Open Source Security 2020 π [ENTERPRISE-STABLE]
- Exploring the (lack of) security in a typical Docker and Kubernetes installation π [ENTERPRISE-STABLE]
- kalilinuxtutorials.com: Deploying & Securing Kubernetes Clusters π [CASE-STUDY]
- loves.cloud: Creating a fully automated DevSecOps CI/CD Pipeline π [ENTERPRISE-STABLE]
- redhat.com: Balancing Linux security with usability π [ENTERPRISE-STABLE]
- thenewstack.io: Culture, Vulnerabilities and Budget: Why Devs and AppSec Disagree π [ENTERPRISE-STABLE]
- computing.co.uk: CloudBees gets busy with security, visibility and control as DevOps evolves π [ENTERPRISE-STABLE]
- paloaltonetworks.com: Is Your Organization Protected Against IAM Misconfiguration Risks? π [ENTERPRISE-STABLE]
- devops.com: How to Successfully Integrate Security and DevOps π [CASE-STUDY]
- helpnetsecurity.com: How to make DevSecOps stick with developers π [CASE-STUDY]
- blog.christophetd.fr: Shifting Cloud Security Left β Scanning Infrastructure as Code for Security Issues π [ENTERPRISE-STABLE]
- devclass.com: Docker: Itβs not dead yet, but thereβs a tendency to walk away, security report finds π [ENTERPRISE-STABLE]
- securityboulevard.com: DevOps vs. DevSecOps β Hereβs How They Fit Together π [ENTERPRISE-STABLE]
- opensource.com: How to adopt DevSecOps successfully π [CASE-STUDY]
- devops.com: DevSecOps Trends to Know For 2021 π [ENTERPRISE-STABLE]
- devops.com: From Agile to DevOps to DevSecOps: The Next Evolution π [ENTERPRISE-STABLE]
- permission.site π [ENTERPRISE-STABLE]
- ais.com: Leaping into DevSecOps from DevOps π [ENTERPRISE-STABLE]
- infoq.com: The Defense Department's Journey with DevSecOps π [ENTERPRISE-STABLE]
- amazon.com: Building end-to-end AWS DevSecOps CI/CD pipeline with open source SCA, SAST and DAST tools π [ENTERPRISE-STABLE]
- infoq.com: 9 Trends That Are Influencing the Adoption of Devops and Devsecops in 2021 π [ENTERPRISE-STABLE]
- invensislearning.com: Difference between DevOps and DevSecOps π [ENTERPRISE-STABLE]
- techerati.com: DevSecOps: Eight tips for truly securing software π [ENTERPRISE-STABLE]
- devops.com: SecDevOps is the Solution to Cybersecurity π π [ENTERPRISE-STABLE]
- techrepublic.com: DevOps is getting code released faster than ever. But security is lagging behind π [ENTERPRISE-STABLE]
- redeszone.net: No configurar bien la nube es culpable de la mayorΓa de vulnerabilidades π [ENTERPRISE-STABLE]
- cybersecuritydive.com: Relationships between DevOps, security warm slowly π [ENTERPRISE-STABLE]
- bbvanexttechnologies.com: FilosofΓa DevSecOps en el desarrollo de aplicaciones sobre Azure π [ENTERPRISE-STABLE]
- harness.io: Automated DevSecOps with StackHawk and Harness π [ENTERPRISE-STABLE]
- cloudify.co: Understanding DevSecOps And Its Challenges π [ENTERPRISE-STABLE]
- containerjournal.com: The What and Why of Cloud-Native Security π [ENTERPRISE-STABLE]
- sysdig.com: Top vulnerability assessment and management best practices π [ENTERPRISE-STABLE]
- thenewstack.io: Where Are You on the DevSecOps Maturity Curve? π [ENTERPRISE-STABLE]
- thenewstack.io: The Top 5 Secrets Management Mistakes and How to Avoid Them π [CASE-STUDY]
- arsouyes.org: PKCS, pem, der, key, crt,... π [ENTERPRISE-STABLE]
- torq.io: 5 Security Automation Examples for Non-Developers π [ENTERPRISE-STABLE]
- infoq.com: Serverless Security: What's Left to Protect? π [ENTERPRISE-STABLE]
- dqindia.com: Secure your CI/CD pipeline with these tips from experts π [ENTERPRISE-STABLE]
- thenewstack.io: The DevSecOps Skillsets Required for Cloud Deployments π [ENTERPRISE-STABLE]
- devblogs.microsoft.com: You canβt have security for DevOps until you have DevOps for security π [ENTERPRISE-STABLE]
- cncf/tag-security: CNCF Security Technical Advisory Group π π [ENTERPRISE-STABLE]
- enterprisersproject.com: 5 DevSecOps open source projects to know π [ENTERPRISE-STABLE]
- thenewstack.io: 10 Steps to Simplify Your DevSecOps π [ENTERPRISE-STABLE]
- redhat.com: 5 ways for teams to create an automation-first mentality π [ENTERPRISE-STABLE]
- devops.com: Transform Mobile DevOps into Mobile DevSecOps π [ENTERPRISE-STABLE]
- softwebsolutions.com: What is DevSecOps and why your business needs it π [ENTERPRISE-STABLE]
- containerjournal.com: Siloscape: The Dark Side of Kubernetes π [ENTERPRISE-STABLE]
- thenewstack.io: Infrastructure-as-Code: 6 Best Practices for Securing Applications π π [ENTERPRISE-STABLE]
- devops.com: Securing Your Software Development Pipelines π [ENTERPRISE-STABLE]
- thenewstack.io: How GitOps Benefits from Security-as-Code π [ENTERPRISE-STABLE]
- devops.com: Tips for a Successful DevSecOps Life Cycle π [ENTERPRISE-STABLE]
- blog.aquasec.com: Advanced Persistent Threat Techniques Used in Container Attacks π [ENTERPRISE-STABLE]
- thenewstack.io: 5 Misconceptions About DevSecOps π [ENTERPRISE-STABLE]
- thenewstack.io: Why Cloud Native Systems Demand a Zero Trust Approach π [ENTERPRISE-STABLE]
- dzone: Security Matters: Vulnerability Scanning Done Right! π π [ENTERPRISE-STABLE]
- redhat.com: Getting DevSecOps to production and beyond π [ENTERPRISE-STABLE]
- opensource.com: 5 open source security resources from 2021 π [ENTERPRISE-STABLE]
- redhat.com: Red Hat's approach to DevSecOps π [ENTERPRISE-STABLE]
- thenewstack.io: Open Source Democratized Software. Now Letβs Democratize Security π [ENTERPRISE-STABLE]
- goteleport.com: Why DevSecOps is Going Passwordless π [ENTERPRISE-STABLE]
- infosecwriteups.com: How I Discovered Thousands of Open Databases on AWS π [ENTERPRISE-STABLE]
- thenewstack.io: Want Real Cybersecurity Progress? Redefine the Security Team π [ENTERPRISE-STABLE]
- devops.com: Taking a DevSecOps Approach to API Security π [ENTERPRISE-STABLE]
- devops.com: Continuous Security: The Next Evolution of CI/CD π [ENTERPRISE-STABLE]
- about.gitlab.com: Fantastic Infrastructure as Code security attacks and how to find them π [CASE-STUDY]
- devops.com: How to Seamlessly Transition to DevSecOps π [CASE-STUDY]
- bridgecrew.io: 6 key Kubernetes DevSecOps principles: People, processes, technology π [ENTERPRISE-STABLE]
- research.nccgroup.com: 10 real-world stories of how weβve compromised CI/CD pipelines π [ENTERPRISE-STABLE]
- thenewstack.io: SecOps in a Post-COVID World: 3 Security Trends to Watch π [ENTERPRISE-STABLE]
- medium.com/microservices-learning: How to implement security for microservices π [CASE-STUDY]
- kubernetes.io: Overview of Cloud Native Security π [ENTERPRISE-STABLE]
- sysdig.com: Triaging a Malicious Docker Container π [ENTERPRISE-STABLE]
- blog.sonatype.com: Python Packages Upload Your AWS Keys, env vars, Secrets to the Web π [ENTERPRISE-STABLE]
- medium.com/@anshuman2121: DevSecOps: Implement security on CICD Pipeline π [ENTERPRISE-STABLE]
- medium.com/@jonathan_37674: What have we learned from scanning over 10K Kubernetes Clusters? π π [ENTERPRISE-STABLE]
- sysdig.com: How to apply security at the source using GitOps | Eduardo MΓnguez π π [CASE-STUDY]
- medium.com/technology-hits: Incomplete Guide for Securing Containerized Environment π π [ARCHITECTURE-GUIDE]
- medium.com/@jonathan_37674: How to Keep your CI/CD Pipelines Secure? | ARMO π [CASE-STUDY]
- freecodecamp.org: Authentication vs Authorization β What's the Difference? π [ENTERPRISE-STABLE]
- betanews.com: Cloud security is complex -- but most vulnerabilities fall into three key categories π [ENTERPRISE-STABLE]
- medium.com/@pbijjala: Container security, an eco system view π [ENTERPRISE-STABLE]
- containerjournal.com: Kubernetes Security in Your CI/CD Pipeline π [ENTERPRISE-STABLE]
- acloudguru.com: Cloud security risks: Why you should make apps Secure by Design π [ENTERPRISE-STABLE]
- medium.com/google-cloud: Shifting (even further) Left on Kubernetes Resource Compliance π [ENTERPRISE-STABLE]
- hmaslowski.com: macOS Security hardening with Microsoft Intune π [ENTERPRISE-STABLE]
- kubewarden.io: Scanning secrets in environment variables π [ENTERPRISE-STABLE]
- dzone.com: How To Manage Vulnerabilities in Modern Cloud-Native Applications π [CASE-STUDY]
- auth0.com: A Passwordless Future! Passkeys for Java Developers π [ENTERPRISE-STABLE]
- infracloud.io: How to Prevent Secret Leaks in Your Repositories π [CASE-STUDY]
- blog.devops.dev: End-to-End DevSecOps Kubernetes Project π [ENTERPRISE-STABLE]
- blog.stackademic.com: Advanced End-to-End DevSecOps Kubernetes Three-Tier Project using AWS EKS, ArgoCD, Prometheus, Grafana, and Jenkins π [ENTERPRISE-STABLE]
- dzone.com: What Is Zero Trust Security? π π [ENTERPRISE-STABLE]
- thenewstack.io: Secured Access to Kubernetes from Anywhere with Zero Trust | Tenry Fu π π [ENTERPRISE-STABLE]
- securityboulevard.com: Implementing Zero-Trust Security With Service Mesh and Kubernetes π [ENTERPRISE-STABLE]
- cncf.io: Seven zero trust rules for Kubernetes π [ENTERPRISE-STABLE]
- rtinsights.com: Implementing Zero Trust for Kubernetes π [ENTERPRISE-STABLE]
- cisecurity.org: Where Does Zero Trust Begin and Why is it Important? π [ENTERPRISE-STABLE]
- devops.com: DevOps Security: Your Complete Checklist π [ENTERPRISE-STABLE]
- Configure Microsoft Entra for Increased Security π [ENTERPRISE-STABLE]
- thenewstack.io: How Do Authentication and Authorization Differ? π [ENTERPRISE-STABLE]
- osohq.com: Patterns for Authorization in Microservices π [ENTERPRISE-STABLE]
- medium.com/getindata-blog: OAuth2-based authentication on Istio-powered Kubernetes clusters π π [ENTERPRISE-STABLE]
- oauth2-proxy/oauth2-proxy: OAuth2 Proxy π π [ENTERPRISE-STABLE]
- manfredmlange.medium.com: Containerized Keycloak in Development π [ENTERPRISE-STABLE]
- dev.to/fidalmathew: Session-Based vs. Token-Based Authentication: Which is better? π [ENTERPRISE-STABLE]
- dev.to/irakan: Is JWT really a good fit for authentication? π [ENTERPRISE-STABLE]
- dzone: DevOps Pipeline Quality Gates: A Double-Edged Sword π [ENTERPRISE-STABLE]
- medium: Focusing on the DevOps Pipeline π π [ENTERPRISE-STABLE]
- github.com/hygieia/Hygieia π π [ENTERPRISE-STABLE]
- cncf.io: Identifying Kubernetes Config Security Threats: Pods Running as Root π [ENTERPRISE-STABLE]
- thenewstack.io: How Kubernetes vulnerabilities have shifted since the first attacks π [ENTERPRISE-STABLE]
- mirantis.com: Introduction to Istio Ingress: The easy way to manage incoming Kubernetes app traffic π [ENTERPRISE-STABLE]
- armosec.io: How to secure Kubernetes Ingress? π [CASE-STUDY]
- kubeLinter π π [ENTERPRISE-STABLE]
- thenewstack.io: StackRox KubeLinter Brings Security Linting to Kubernetes π [ENTERPRISE-STABLE]
- github.com/yannh/kubeconform π π [ENTERPRISE-STABLE]
- Automating Microsoft Sentinel Deployment with Azure DevOps CI/CD π [ENTERPRISE-STABLE]
- thenewstack.io: Security Insights into Infrastructure-as-Code π [ENTERPRISE-STABLE]
- Why you should be using Multi-Category Security (MCS) for your Linux containers π [ENTERPRISE-STABLE]
- Using Podman and Containers to make a more secure pipeline π [ENTERPRISE-STABLE]
- Project Calico π [ENTERPRISE-STABLE]
- thenewstack.io: Project Calico: Kubernetes Security as SaaS π [ENTERPRISE-STABLE]
- Falco.org π [ENTERPRISE-STABLE]
- sysdig.com: Getting started with runtime security and Falco π [ENTERPRISE-STABLE]
- betterprogramming.pub: Kubernetes Security With Falco π [ENTERPRISE-STABLE]
- Security Patterns for Microservice Architectures π [ARCHITECTURE-GUIDE]
- Anchore π [ENTERPRISE-STABLE]
- thenewstack.io: Anchore: Scan Your Container Images for Vulnerabilities from the Command Line π [ENTERPRISE-STABLE]
- Twistlock π [ENTERPRISE-STABLE]
- Threat Stack π [ENTERPRISE-STABLE]
- vashishtsumit89.medium.com: Security/Pen Testing: A guide to run OWASP Zap headless in containers for CI/CD pipeline π [ARCHITECTURE-GUIDE]
- cloud.google.com: OWASP Top 10 mitigation options on Google Cloud π π [ENTERPRISE-STABLE]
- thenewstack.io: Latest OWASP Top 10 Surfaces Web Development Security Bugs π [ENTERPRISE-STABLE]
- thenewstack.io: OWASP Top 10: A Guide to the Worst Software Vulnerabilities π [ARCHITECTURE-GUIDE]
- owasp.org: OWASP API Security Project π π [ENTERPRISE-STABLE]
- traceable.ai: Use the OWASP API Top 10 To Secure Your APIs π [ENTERPRISE-STABLE]
- cequence.ai: The OWASP API Security Top 10 From a Real-World Perspective π [ENTERPRISE-STABLE]
- securityonline.info: VAmPI: Vulnerable REST API with OWASP top 10 vulnerabilities π [ENTERPRISE-STABLE]
- github.com/OWASP: OWASP Kubernetes Top 10 π π [ENTERPRISE-STABLE]
- securecoding.com: Code Audit: How to Ensure Compliance for an Application π [CASE-STUDY]
- stackrox.com π [ENTERPRISE-STABLE]
- redhat.com: Red Hat to Acquire Kubernetes-Native Security Leader StackRox π [ENTERPRISE-STABLE]
- trivy π [ENTERPRISE-STABLE]
- returngis.net: Buscar vulnerabilidades en imΓ‘genes de Docker con Snyk π [ENTERPRISE-STABLE]
- iximiuz.com: The need for slimmer containers. Scanning official Python images with Snyk π [ENTERPRISE-STABLE]
- gkovan.medium.com: A Zero Trust Approach for Securing the Supply Chain of Microservices Packaged as Container Images (sigstore, kyverno, openshift tekton, quarkus) π π [ENTERPRISE-STABLE]
- thenewstack.io: Find Vulnerabilities in Container Images with Docker Scan π [ENTERPRISE-STABLE]
- medium.com/@nanditasahu031: DevSecOps β Implementing Secure CI/CD Pipelines π π [ENTERPRISE-STABLE]
- deepfence/YaraHunter π [ENTERPRISE-STABLE]
- Securing Kubernetes With Anchore π [ENTERPRISE-STABLE]
- Anchore: Secure Container Based CI/CD Workflows π [ENTERPRISE-STABLE]
- Jenkins Plugin: Anchore Container Image Scanner π [ENTERPRISE-STABLE]
- Notary π [ENTERPRISE-STABLE]
- Cosign: Container Signing π [ENTERPRISE-STABLE]
- infracloud.io: Enforcing Image Trust on Docker Containers using Notary π [ENTERPRISE-STABLE]
- medium: Verify Container Image Signatures in Kubernetes using Notary or Cosign or both π [ENTERPRISE-STABLE]
- infracloud.io: How to Secure Containers with Cosign and Distroless Images π [CASE-STUDY]
- github.blog: Safeguard your containers with new container signing capability in GitHub Actions (cosign) π [ENTERPRISE-STABLE]
- chrisns/cosign-keyless-demo: Cosign Keyless GitHub Action Demo π [ENTERPRISE-STABLE]
- blog.chainguard.dev: How To Verify Cosigned Container Images In Amazon ECS π [CASE-STUDY]
- justinpolidori.it: Secure Your Docker Images With Cosign (and OPA Gatekeeper) π [ENTERPRISE-STABLE]
- sysdig.com: How to secure Kubernetes deployment with signature verification π [CASE-STUDY]
- medium.com/@slimm609: Secure image signing with Cosign and AWS KMS π [ENTERPRISE-STABLE]
- itnext.io: Securing Kubernetes Workloads: A Practical Approach to Signed and Encrypted Container Images π [ENTERPRISE-STABLE]
- GitHub Code Security Risk Assessment: Free Vulnerability Scanning π [ENTERPRISE-STABLE]
- GitHub security: what does it take to protect your company from credentials leaking on GitHub? π π [ENTERPRISE-STABLE]
- Databases in DMZ and Intranet π [ENTERPRISE-STABLE]
- medium: The Easiest Way To Remove Checked In Credentials From A Git Repo π [ENTERPRISE-STABLE]
- forbes.com: DevOps Drives Pentesting Delivered As A Service π [ENTERPRISE-STABLE]
- patchthenet.medium.com: Introduction to SQL Injection π [ENTERPRISE-STABLE]
- keycloak.org π [ENTERPRISE-STABLE]
- Securing Kubernetes Apps with Keycloak and Gatekeeper π [ENTERPRISE-STABLE]
- Authorizing multi-language microservices with Louketo Proxy π [ENTERPRISE-STABLE]
- developers.redhat.com: A deep dive into Keycloak π [ENTERPRISE-STABLE]
- blog.getambassador.io: Step-by-Step Centralized Authentication for Kubernetes with Keycloak and the Ambassador Edge Stack π [ENTERPRISE-STABLE]
- blog.sighup.io: How to run Keycloak in HA on Kubernetes π [CASE-STUDY]
- developers.redhat.com: Authentication and authorization using the Keycloak REST API π [ENTERPRISE-STABLE]
- faun.pub: Integrate Keycloak with HashiCorp Vault π [ENTERPRISE-STABLE]
- openshift.com: Geographically Distributed Stateful Workloads - Part 3: Keycloak π [ENTERPRISE-STABLE]
- blog.flant.com: Running fault-tolerant Keycloak with Infinispan in Kubernetes π [ENTERPRISE-STABLE]
- baeldung.com: A Quick Guide to Using Keycloak with Spring Boot π [ARCHITECTURE-GUIDE]
- medium.com/@charled.breteche: Securing Grafana with Keycloak SSO π [ENTERPRISE-STABLE]
- dev.to: KeyCloak with Nginx Ingress π [ENTERPRISE-STABLE]
- medium.com/@amirhosseineidy: Kubernetes authentication with keycloak oidc π [ENTERPRISE-STABLE]
- medium.com/@martin.hodges: How to install Keycloak IAM on your Kubernetes cluster, backed by Postgres π [CASE-STUDY]
- Git Credential Manager Core π [ENTERPRISE-STABLE]
- Git Credential Manager Core: Building a universal authentication experience π [ENTERPRISE-STABLE]
- blog.gitguardian.com: Secrets in source code (episode 2/3). Why secrets in git are such a problem π [ENTERPRISE-STABLE]
- harness.io: Managing Secrets in CI/CD Pipelines π π [ENTERPRISE-STABLE]
- smallstep.com: How to Handle Secrets on the Command Line π π [CASE-STUDY]
- cloud.google.com: Analyze secrets with Cloud Asset Inventory π [ENTERPRISE-STABLE]
- sops: Simple and flexible tool for managing secrets π π [ENTERPRISE-STABLE]
- jenkins-x.io: Setting up the secrets for your installation π [ENTERPRISE-STABLE]
- fpcomplete.com: Announcing Amber, encrypted secrets management π [ENTERPRISE-STABLE]
- jfrog.com: How to protect your secrets with Spectral and JFrog Pipelines π [CASE-STUDY]
- github.com/keilerkonzept/aws-secretsmanager-files π [ENTERPRISE-STABLE]
- medium: How to Handle Secrets Like a Pro Using Gitops π [CASE-STUDY]
- youtube: Which of your Kubernetes Apps are accessing Secrets? π π₯ π [ENTERPRISE-STABLE]
- jenkins-x/gsm-controller π [ENTERPRISE-STABLE]
- GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp: Google Secret Manager Provider for Secret Store CSI Driver π [ENTERPRISE-STABLE]
- devops.com: DevOps Teams Struggling to Keep Secrets π [ENTERPRISE-STABLE]
- thorsten-hans.com: Encrypt your Kubernetes Secrets with Mozilla SOPS π [ENTERPRISE-STABLE]
- developers.redhat.com: Protect secrets in Git with the clean/smudge filter π [ENTERPRISE-STABLE]
- kubeopsskills/cloud-secret-resolvers: Cloud Secret Resolvers (CSR) π [ENTERPRISE-STABLE]
- thenewstack.io: Managing Secrets in Your DevOps Pipeline π [ENTERPRISE-STABLE]
- thenewstack.io: Kubernetes Secrets Management: 3 Approaches, 9 Best Practices π [ENTERPRISE-STABLE]
- siddhivinayak-sk.medium.com: Kubeseal & SealedSecret: Make your βsecretsβ secure in SCM by using βsealed secretβ π [ENTERPRISE-STABLE]
- commjoen/wrongsecrets: OWASP WrongSecrets π [ENTERPRISE-STABLE]
- medium: AWS Secret Manager: Protect sensitive information and functionality π π [ENTERPRISE-STABLE]
- blog.opstree.com: AWS Secret Manager π [ENTERPRISE-STABLE]
- aws/secrets-store-csi-driver-provider-aws: AWS Secrets Manager and Config Provider for Secret Store CSI Driver π [ENTERPRISE-STABLE]
- medium.com/@ishana98dadhich: Integrating AWS Secret Manager with EKS and use Secrets inside the Pods: Part-1 π [ENTERPRISE-STABLE]
- unixarena.com: Terraform β Source credentials from AWS secret Manager π [ENTERPRISE-STABLE]
- pyca/bcrypt π [ENTERPRISE-STABLE]
- argon2-cffi π [ENTERPRISE-STABLE]
- docs.python.org: scrypt (standard library) π [ENTERPRISE-STABLE]
- cryptography.io: scrypt (cryptography) π [ENTERPRISE-STABLE]
- git-secret.io π [ENTERPRISE-STABLE]
- git-cipher π [ENTERPRISE-STABLE]
- hashicorp/vault π [ENTERPRISE-STABLE]
- hashicorp/vault-csi-provider: HashiCorp Vault Provider for Secrets Store CSI Driver π [ENTERPRISE-STABLE]
- vaultproject.io π [ENTERPRISE-STABLE]
- medium: Coding for Secrets Reliability with HashiCorp Vault π [ENTERPRISE-STABLE]
- hashicorp.com: Vault & Kubernetes: Better Together π [ENTERPRISE-STABLE]
- Vault Learning Resources: Vault 1.5 features and more π [ENTERPRISE-STABLE]
- medium: Securing K8s Ingress Traffic with HashiCorp Vault PKIaaS and JetStack Cert-Manager π [ENTERPRISE-STABLE]
- hashicorp.com: Automate Secret Injection into CI/CD Workflows with the GitHub Action for Vault π [ENTERPRISE-STABLE]
- hashicorp.com: Use AWS Lambda Extensions to Securely Retrieve Secrets From HashiCorp Vault π [ENTERPRISE-STABLE]
- github.com/kelseyhightower: Serverless Vault with Cloud Run π [ENTERPRISE-STABLE]
- confluent.io: How to Manage Secrets for Confluent with Kubernetes and HashiCorp Vault π [CASE-STUDY]
- digitalvarys.com: Simple Introduction to HashiCorp Vault π [ENTERPRISE-STABLE]
- hashicorp.com: HCP Vault is now generally available on AWS π π [ENTERPRISE-STABLE]
- hashicorp.com: Serverless Secrets with HashiCorp Vault π [ENTERPRISE-STABLE]
- thenewstack.io: HashiCorp Releases HCP Vault to Combat βSecrets Managementβ Fatigue π [ENTERPRISE-STABLE]
- datadoghq.com: Monitor HashiCorp Vault metrics and logs π [ENTERPRISE-STABLE]
- thenewstack.io: Reasons to Implement HashiCorp Vault and Other Zero Trust Tools π [ENTERPRISE-STABLE]
- hashicorp.com: Retrieve HashiCorp Vault Secrets with Kubernetes CSI π [ENTERPRISE-STABLE]
- testdriven.io: Running Vault and Consul on Kubernetes π [ENTERPRISE-STABLE]
- hashicorp.com: Onboarding Applications to Vault Using Terraform: A Practical Guide π π [ARCHITECTURE-GUIDE]
- hashicorp.com: Managing SSH Access at Scale with HashiCorp Vault π [ENTERPRISE-STABLE]
- devopscube.com: How to Setup Vault in Kubernetes- Beginners Tutorial π π [CASE-STUDY]
- hashicorp.com: Retrieve HashiCorp Vault Secrets with Kubernetes CSI π π [ENTERPRISE-STABLE]
- devopscube.com: Vault Agent Injector Tutorial: Inject Secrets to Pods Using Vault Agent π [CASE-STUDY]
- hashicorp.com: Announcing HashiCorp Vault 1.8 π [ENTERPRISE-STABLE]
- hashicorp.com: A Kubernetes User's Guide to HashiCorp Nomad Secret Management π [ARCHITECTURE-GUIDE]
- hashicorp.com: HashiCorp Vault Use Cases and Best Practices on Azure π [ENTERPRISE-STABLE]
- piotrminkowski.com: Vault on Kubernetes with Spring Cloud π [ENTERPRISE-STABLE]
- hashicorp.com: Integrating Azure AD Identity with HashiCorp Vault β Part 1: Azure Application Auth via OIDC π [ENTERPRISE-STABLE]
- medium.com/@pratyush.mathur: Secrets Management Using Vault in K8S π [ENTERPRISE-STABLE]
- hashicorp.com: Kubernetes Vault Integration via Sidecar Agent Injector vs. CSI Provider π [ENTERPRISE-STABLE]
- hashicorp.com: Manage Kubernetes Secrets for Flux with HashiCorp Vault π [ENTERPRISE-STABLE]
- hashicorp.com: How to Integrate Your Application with Vault: Static Secrets π [CASE-STUDY]
- blog.devops.dev: Using Vault in Kubernetes Production for Security Engineers π [ENTERPRISE-STABLE]
- medium.com/@nikhil.purva: Securing Kubernetes Secrets with HashiCorp Vault π [ENTERPRISE-STABLE]
- hashicorp.com: The State of Vault and Kubernetes, and Future Plans π [ENTERPRISE-STABLE]
- alexandre-vazquez.com: How To Inject Secrets in Pods To Improve Security with Hashicorp Vault in 5 Minutes π π [CASE-STUDY]
- medium.com/@martin.hodges: Introduction to Vault to provide secret management in your Kubernetes cluster π [ENTERPRISE-STABLE]
- medium.com/@martin.hodges: Enabling TLS on your Vault cluster on Kubernetes π [ENTERPRISE-STABLE]
- medium.com/@calvineotieno010: Managing Application Secrets with Hashicorp Vault π [ENTERPRISE-STABLE]
- medium.com/@muppedaanvesh: A Hands-On Guide to Vault in Kubernetes π [ARCHITECTURE-GUIDE]
- harness.io: Tutorial: How to Use the New Vault Agent Integration Method With Harness π [CASE-STUDY]
- harness.io: Tutorial: Vault Agent Advanced Use Case With Kubernetes Delegates and Shared Volumes π π [CASE-STUDY]
- hashicorp.com: Why Use the Vault Agent for Secrets Management? π [ENTERPRISE-STABLE]
- medium.com/nerd-for-tech: PKI Certs Injection to K8s Pods with Vault Agent Injector π [ENTERPRISE-STABLE]
- hashicorp.com: Refresh Secrets for Kubernetes Applications with Vault Agent π [ENTERPRISE-STABLE]
- docs.microsoft.com: Azure Key Vault π [ENTERPRISE-STABLE]
- azure.github.io: Azure Key Vault Provider for Secrets Store CSI Driver π [ENTERPRISE-STABLE]
- akv2k8s.io: Azure Key Vault to Kubernetes akv2k8s π π [ENTERPRISE-STABLE]
- Azure Key Vault to Kubernetes π [ENTERPRISE-STABLE]
- Neoteroi/essentials-configuration-keyvault π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: In preview: Azure Key Vault secrets provider extension for Arc enabled Kubernetes clusters π [ENTERPRISE-STABLE]
- vcloud-lab.com: Create Azure Key Vault Certificates on Azure Portal and Powershell π [ENTERPRISE-STABLE]
- ansible.com: Simplifying secrets management with CyberArk and Red Hat Ansible Automation Platform π [ENTERPRISE-STABLE]
- ansible.com: Automating Security with CyberArk and Red Hat Ansible Automation Platform π [ENTERPRISE-STABLE]
- conjur.org π [ENTERPRISE-STABLE]
- infracloud.io: Securing Kubernetes Secrets with Conjur π π [ENTERPRISE-STABLE]
- dev.to: Manage your secrets in Git with SOPS for Kubernetes π π [ENTERPRISE-STABLE]
- mehighlow.medium.com: Hardened-AKS/Secrets π [ENTERPRISE-STABLE]
- Kapitan: Generic templated configuration management for Kubernetes, Terraform and other things π [ENTERPRISE-STABLE]
- medium: Declarative secret management for GitOps with Kapitan π [ENTERPRISE-STABLE]
- aws.amazon.com: Managing secrets deployment in Kubernetes using Sealed Secrets π π [ENTERPRISE-STABLE]
- dzone: Managing Secrets Deployment in GitOps Workflow π π [ENTERPRISE-STABLE]
- blog.container-solutions.com: The Birth of the External Secrets Community π [ENTERPRISE-STABLE]
- itnext.io: Secrets injection at runtime from external Vault into Kubernetes β POC π [ENTERPRISE-STABLE]
- jx-secret-postrenderer π π [ENTERPRISE-STABLE]
- thenewstack.io: Managing Kubernetes Secrets with AWS Secrets Manager π π [ENTERPRISE-STABLE]
- K8s Vault Webhook π π [ENTERPRISE-STABLE]
- portworx.com: Implementing Data Security on Red Hat OpenShift π π [ENTERPRISE-STABLE]
- thenewstack.io: Walkthrough: Bitwardenβs New Secrets Manager π [ENTERPRISE-STABLE]
- morey.tech: Bitwarden and External Secrets π [ENTERPRISE-STABLE]
- 10 Serverless security best practices π [ENTERPRISE-STABLE]
- thehackernews.com: Docker Images Containing Cryptojacking Malware Distributed via Docker Hub π [ENTERPRISE-STABLE]
- sysdig.com: 12 Container image scanning best practices to adopt in production π [ENTERPRISE-STABLE]
- infracloud.io: The Ten Commandments of Container Security π [ENTERPRISE-STABLE]
- medium: KubeSecOps Pipeline(Container security) in a cloudnative ecosystem π [ENTERPRISE-STABLE]
- sysdig.com: Sysdig 2021 container security and usage report: Shifting left is not enough π π [ENTERPRISE-STABLE]
- itnext.io: Hardening Docker and Kubernetes with seccomp π π [ENTERPRISE-STABLE]
- redhat.com: Improving Linux container security with seccomp π π [ENTERPRISE-STABLE]
- openshift.com: Signing and Verifying Container Images π π [ENTERPRISE-STABLE]
- redhat.com: Introducing Red Hat Vulnerability Scanner Certification π [ENTERPRISE-STABLE]
- docs.microsoft.com: Introduction to Azure Defender for container registries π [ENTERPRISE-STABLE]
- techbeacon.com: 17 open-source container security tools π π [ENTERPRISE-STABLE]
- about.gitlab.com: How to secure your container images with GitLab and Grype π [CASE-STUDY]
- GoogleContainerTools/container-structure-test π [ENTERPRISE-STABLE]
- dynatrace.com: Container security: What it is, why itβs tricky, and how to do it right π [CASE-STUDY]
- betterprogramming.pub: Secure Your Kubernetes Cluster With Seccomp π [ENTERPRISE-STABLE]
- sigstore.dev π [ENTERPRISE-STABLE]
- youtube: Hands-on Introduction to sigstore | Rawkode Live π₯ π [ENTERPRISE-STABLE]
- opensource.com: Sign and verify container images with this open source tool (sigstore) π [ENTERPRISE-STABLE]
- sysdig.com: Container security best practices: Ultimate guide π π [ARCHITECTURE-GUIDE]
- dzone: A Practical Guide for Container Security π [ARCHITECTURE-GUIDE]
- octetz.com: Setting Up Pod Security Policies π [ENTERPRISE-STABLE]
- infracloud.io: Kubernetes Pod Security Policies with Open Policy Agent π [ENTERPRISE-STABLE]
- medium.com: K8s Network Policies Demystified and Simplified π π [ENTERPRISE-STABLE]
- blog.nody.cc: Verify your Kubernetes Cluster Network Policies: From Faith to Proof π [ENTERPRISE-STABLE]
- medium: Kubernetes Network Policies: Are They Really Useful? π [ENTERPRISE-STABLE]
- DevSecOps β Static Analysis SAST with Jenkins Pipeline π [ENTERPRISE-STABLE]
- europeclouds.com: Implementing Aqua Security to Secure Kubernetes π [ENTERPRISE-STABLE]
- Pomerium π [ENTERPRISE-STABLE]
- cloud.redhat.com: Top Open Source Kubernetes Security Tools of 2021 ππ π [ENTERPRISE-STABLE]
- fluentbit.io π [ENTERPRISE-STABLE]
- falco.org: Detect Malicious Behaviour on Kubernetes API Server through gathering Audit Logs by using FluentBit - Part 2 π [ENTERPRISE-STABLE]
- kubearmor.io π [ENTERPRISE-STABLE]
- itnext.io: Protecting Your Kubernetes Environment With KubeArmor π [ENTERPRISE-STABLE]
- medium: Whoβs at the Helm? π [ENTERPRISE-STABLE]
- itnext.io: Helm 3 β Secrets management, an alternative approach π π [ENTERPRISE-STABLE]
- itnext.io: Manage Auto-generated Secrets In Your Helm Charts π π [ENTERPRISE-STABLE]
- dev-vibe.medium.com: Encrypt Helm sensitive data π [ENTERPRISE-STABLE]
- hashcat π [ENTERPRISE-STABLE]
- intezer.com: New Attacks on Kubernetes via Misconfigured Argo Workflows π [ENTERPRISE-STABLE]
- devops.com: How to Automate PKI for DevOps With Open Source Tools π [CASE-STUDY]
- cybersecsi/HOUDINI: Hundreds of Offensive and Useful Docker Images for Network Intrusion π [ENTERPRISE-STABLE]
- itnext.io: Top 6 Threat Detection Tools for Containers π [ENTERPRISE-STABLE]
- thenewstack.io: AWS Open Sources Security Tools π [ENTERPRISE-STABLE]
- sentinelone.com: Reducing Human Effort in Cybersecurity | Why We Are Investing in Torqβs Automation Platform π [ENTERPRISE-STABLE]
- pkg.go.dev/knative.dev/security-guard π [ENTERPRISE-STABLE]
- developer.ibm.com: Secure microservices by monitoring behavior π [ENTERPRISE-STABLE]
- Microservices Security in Action π [ENTERPRISE-STABLE]
- sysdig.com: Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman π [ENTERPRISE-STABLE]
- armosec.io: Use Kubescape to check if your Kubernetes clusters are exposed to the latest K8s Symlink vulnerability (CVE-2021-25741) π [ENTERPRISE-STABLE]
- sysdig.com: Mitigating log4j with Runtime-based Kubernetes Network Policies π [ENTERPRISE-STABLE]
- github.com/aws-samples: Apache Log4j2 CVE-2021-44228 node agent π [ENTERPRISE-STABLE]
- proferosec/log4jScanner π [ENTERPRISE-STABLE]
- Apache Log4j Security Vulnerabilities π [ENTERPRISE-STABLE]
- cloud.redhat.com: Log4Shell: Practical Mitigations and Impact Analysis of the Log4j Vulnerabilities π [ENTERPRISE-STABLE]
- edition.cnn.com: The Log4j security flaw could impact the entire internet. Here's what you should know π [ENTERPRISE-STABLE]
- yahoo/check-log4j π [ENTERPRISE-STABLE]
- welivesecurity.com: Lo que todo lΓder de una empresa debe saber sobre Log4Shell π [ENTERPRISE-STABLE]
- genbeta.com: "Internet estΓ‘ en llamas": Cloudflare ha detectado mΓ‘s de 24.600 ataques por minuto que explotaban la vulnerabilidad Log4Shell π [ENTERPRISE-STABLE]
- dynatrace.com: Log4Shell vulnerability π [ENTERPRISE-STABLE]
- Maelstromage/Log4jSherlock π [ENTERPRISE-STABLE]
- blog.mimacom.com: A Summary of log4j Exploit in a Log4shell - What Happened and What You Can Do About It π [ENTERPRISE-STABLE]
- cyberscoop.com: The Log4j flaw is the latest reminder that quick security fixes are easier said than done π [ENTERPRISE-STABLE]
- vpnranks.com: Belgian Defense Ministry Under Cyber Attack Due to Log4j Vulnerability π [ENTERPRISE-STABLE]
- dynatrace.com: Log4Shell vulnerability discovery and mitigation require automatic and intelligent observability π [ENTERPRISE-STABLE]
- thenewstack.io: Yet Another Log4j Security Problem Appears π [ENTERPRISE-STABLE]
- cisagov/log4j-scanner π [ENTERPRISE-STABLE]
- venturebeat.com: What Log4Shell teaches us about open source security π [ENTERPRISE-STABLE]
- tanzu.vmware.com: Log4Shell Vulnerability Spotlights the Importance of Adopting Trusted Open Source Software Providers for the Enterprise π [ENTERPRISE-STABLE]
- google/log4jscanner π [ENTERPRISE-STABLE]
- thehackernews.com: Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities π [ENTERPRISE-STABLE]
- zdnet.com: Log4j: Google and IBM call for list of critical open source projects π [ENTERPRISE-STABLE]
- it.slashdot.org: And the Top Source of Critical Security Threats Is...PowerShell π [ENTERPRISE-STABLE]
- techrepublic.com: How to create Let's Encrypt SSL certificates with acme.sh on Linux π [CASE-STUDY]
- thenewstack.io: WAF: Securing Applications at the Edge π [ENTERPRISE-STABLE]
- zdnet.com: Google releases new open-source security software program: Scorecards π [ENTERPRISE-STABLE]
- sysadminxpert.com: How to do Security Auditing of CentOS System Using Lynis Tool π [CASE-STUDY]
- tryhackme.com: Metasploit: Introduction π [ENTERPRISE-STABLE]
- bridgecrew π [ENTERPRISE-STABLE]
- bridgecrew.io: Tutorial: Incorporate IaC Security in your CI/CD pipeline with Bridgecrew, Jenkins, and GitHub π [CASE-STUDY]
- socket.dev: Introducing Socket π [ENTERPRISE-STABLE]
- itbusinessedge.com: Okta vs. Azure AD: IAM Tool Comparison π [ENTERPRISE-STABLE]
- deepfence/ThreatMapper π π [ENTERPRISE-STABLE]
- github.com/goauthentik/authentik π [ENTERPRISE-STABLE]
- github.com/openappsec/openappsec π [ENTERPRISE-STABLE]
- Microsoft Security Copilot π [ENTERPRISE-STABLE]
- github.com/prowler-cloud/prowler ππ π [ENTERPRISE-STABLE]
- Kubernetes Security Best Practices: A DevSecOps Perspective π [ENTERPRISE-STABLE]
Terraform¶
- weekly.tf: Terraform Weekly π [ENTERPRISE-STABLE]
-
nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure π π [ARCHITECTURE-GUIDE]
- nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure through Terraform - Multi Environment Deployment - Part 1 π Introduction
- nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure through Terraform - Multi Environment Deployment - Part 2 π Terraform Directory Structure
- nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure through Terraform - Multi Environment Deployment - Part 3 π Terraform Cloud Configurations
- nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure through Terraform - Multi Environment Deployment - Part 4 π GitOps
- nitheeshp.dev: Practical CI/CD Guide to Deploying AWS Infrastructure through Terraform - Multi Environment Deployment - Part 1 π Introduction
-
medium: 10 things I wish I knew before learning Terraform (Part 1) | Ian Hancock π [ENTERPRISE-STABLE]
- terraform.io: Creation-Time Provisioners π π [ENTERPRISE-STABLE]
-
dev.to/pwd9000: Terraform Pro Tips Series' Articles ππ π [ENTERPRISE-STABLE]
-
blog.ogenki.io: Applying GitOps Principles to Infrastructure: An overview of tf-controller π [ENTERPRISE-STABLE]
- Terraform can be considered a "semi-declarative" tool as there is no built-in automatic reconciliation feature. There are several solutions to address this issue, but generally speaking, a modification will be applied using terraform apply. The code is actually written using the HCL configuration files (declarative), but the execution is done imperatively. As a result, there can be a drift between the declared and actual state (for example, a colleague who would have changed something directly into the console π).
- ββ So, how can I ensure that what is committed using Git is really applied. How to be notified if there is a change compared to the desired state and how to automatically apply what is in my code (GitOps)?
- This is the promise of tf-controller, an Open Source Kubernetes operator from Weaveworks, tightly related to Flux (a GitOps engine from the same company). Flux is one of the solutions I really appreciate, that's why I invite you to have a look on my previous article
- Terraform can be considered a "semi-declarative" tool as there is no built-in automatic reconciliation feature. There are several solutions to address this issue, but generally speaking, a modification will be applied using terraform apply. The code is actually written using the HCL configuration files (declarative), but the execution is done imperatively. As a result, there can be a drift between the declared and actual state (for example, a colleague who would have changed something directly into the console π).
-
kkamalesh117.medium.com: Terraform Variables & Providers (Part-1) π [ENTERPRISE-STABLE]
- blog.coderco.io: Terraform Best Practices Series - Lessons from the Battlefield: Part 1 π [ENTERPRISE-STABLE]
-
reddit.com/r/Terraform: Terraform Experts! Anyone experienced in designing enterprise grade reusable terraform code? π [ENTERPRISE-STABLE]
- They should be as simple as possible.
- Root modules should manage very few resources and not depend heavily on many other modules or remote states.
- Don't ever design with the intention of overriding tf variables with environment variables, using -target, etc. Hard code as many values as you can into tfvars files.
- Use the lock files and pin versions everywhere. Module versions, Git tag versions, provider versions, Terraform versions.
- Use asdf to install and run the pinned version of Terraform for each root module deployed.
- Try to keep modules cohesive and loosely coupled. If updating one module or tfvars file creates plan changes in 20 different root modules, that's not great. Sometimes unavoidable, but creates a large operational burden.
- Reuse public modules. There's a shit ton of weird subtle magic knowledge you need to use a resource that isn't documented and you won't find out until something breaks.
- Test creating, changing, and then destroying, every resource. You will probably find a few need hacks to work as you expect.
- Use semver and version/release all your modules and repos. Keep Changelogs of changes.
- Keep a file in the root dir of repos that documents the owner or SME of the module and how to contact them.
- For commonly referenced variables, store them in JSON, export them with
outputs, publish the module in its own repo somewhere, version it. Modules can reference that module to get the values, pin to versions of it so unexpected changes don't blow things up. - Use the CloudPosse Terraform modules / architecture / framework. Take the time to figure out how they work, use them. I swear you will end up reinventing it over time if you don't start now. In particular, you should apply a standard AWS tagging scheme with all your resources, which the CloudPosse modules support inherently. They also let you enable/disable functionality by variables, which is nice, cuz otherwise you have to comment out code.
- Run your Terraform from CI/CD. Really you will be doing it from both your desktop and CI/CD, but assume you'll be running in CI/CD. Once you have 3 people working on the same TF code at once, you'll need the CI/CD to not bump into each other all the time. The rule of thumb is, if it's brand new code, you can run it locally, but if it's already in production and other things depend on it, run it from ci/cd.
applys anyway. - Separate modules by separation of concern; networking in network modules, clusters in cluster modules, apps in app modules, iam in security modules, etc. Also try to separate modules by AWS architectural paradigms, like "global" resources in their own modules. You'll want different teams to maintain and run their own modules independently, even though it all applies to the same AWS account/product stack.
- Don't force authentication options into the provider configs. Allow whatever's running terraform to authenticate first, and the module will just detect the auth method automatically through the provider's sdk.
- Don't make a module for a module's sake. Whereas with regular app code you might make a bunch of abstractions to try to make the code more manageable, that just makes Terraform suck more. Use the least number of abstractions possible to achieve what you want.
- They should be as simple as possible.
-
circleci.com: Infrastructure as Code, part 1: create a Kubernetes cluster with Terraform π [ENTERPRISE-STABLE]
-
dev.to: Creating an EKS Cluster and Node Group with Terraform π [ENTERPRISE-STABLE]
- dev.to: Install & Manage Amazon EKS Add-ons with Terraform - Amazon VPC CNI - CoreDNS - Amazon EBS CSI
-
cloudbuild.co.uk: Part 1: Terraform with Azure - How to install Terraform π [CASE-STUDY]
- cloudbuild.co.uk: Part 2: Terraform with Azure - How to install Azure CLI
- cloudbuild.co.uk: Part 3: Terraform with Azure - How to install Visual Studio Code
- cloudbuild.co.uk: Part 4: Terraform with Azure - How to install Azure Terraform Plugin in Visual Studio Code
- cloudbuild.co.uk: Part 5: Terraform with Azure - Install Git and initialise repository
- cloudbuild.co.uk: Part 6: Terraform with Azure - Deploy resources in Azure
- cloudbuild.co.uk: Part 7: Terraform with Azure - Deploy a variables file in Terraform
- cloudbuild.co.uk: Part 8: Terraform with Azure - Deploy terraform.tfvars file
- cloudbuild.co.uk: Part 2: Terraform with Azure - How to install Azure CLI
-
techcommunity.microsoft.com: Introducing Azure Verified Modules! π π [ENTERPRISE-STABLE]
-
youtube: Using tfsec and Jenkins to Secure Your Terraform Code π [ENTERPRISE-STABLE]
- https://github.com/darinpope/jenkins-example-terraform
- https://www.jenkins.io/changelog-stable/#v2.289.3
- https://github.com/darinpope/jenkins-example-terraform
-
blog.mineiros.io: Introducing Terramate β An Orchestrator and Code Generator for Terraform π [ENTERPRISE-STABLE]
-
(2026) github.com/stacksimplify/azure-aks-kubernetes-masterclass π β 839 π [ENTERPRISE-STABLE]
-
hashicorp.com: HashiCorp Learning Resources Reference Guide π π [ARCHITECTURE-GUIDE]
- techbeatly.com: 10 Free Courses to Learn Terraform π [ENTERPRISE-STABLE]
- learn.hashicorp.com: What is Infrastructure as Code with Terraform? π π [ENTERPRISE-STABLE]
- packer.io π [ENTERPRISE-STABLE]
- packer.io docs π [ENTERPRISE-STABLE]
- computingforgeeks.com: Build AWS EC2 Machine Images (AMI) With Packer and Ansible π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Write Packer template for AWS π [ENTERPRISE-STABLE]
- cloud.hashicorp.com: HashiCorp Cloud π [ENTERPRISE-STABLE]
- hashicorp.com: Multi-Region Replication Now Available with HCP Vault π [ENTERPRISE-STABLE]
- levelup.gitconnected.com: Continuous Integration and Continuous Deployment with Terraform Cloud π [ENTERPRISE-STABLE]
- The Definitive Guide to Importing Your Cloud Resources into IaC π [ARCHITECTURE-GUIDE]
- Export Terraform Code from the Azure Portal π [ENTERPRISE-STABLE]
- Announcing Public Preview of Terraform Export from the Azure Portal π [ENTERPRISE-STABLE]
- build5nines.com π [ENTERPRISE-STABLE]
- nedinthecloud.com π [ENTERPRISE-STABLE]
- Terraform 1.15: Flexible Module Management, Deprecation Warnings, and Windows ARM64 Support π [ENTERPRISE-STABLE]
- Terraform 2.0 in Practice: Using AI to Generate Infrastructure as Code π [ENTERPRISE-STABLE]
- Terraform Azure Resource IPAM Module π [ENTERPRISE-STABLE]
- Announcing Public Preview of Terraform Export from the Azure Portal π [ENTERPRISE-STABLE]
- Terraform: Get User Principal Name (UPN) of User Running Deployment without Entra ID Read Permissions π [ENTERPRISE-STABLE]
- Terraform Provider for Azure IPAM π [ENTERPRISE-STABLE]
- roadmap.sh/terraform π π [ENTERPRISE-STABLE]
- terraform.io π [ENTERPRISE-STABLE]
- Terraform Registry - registry.terraform.io: Terraform Providers and Modules π π [ENTERPRISE-STABLE]
- medium.com: Why should Terraform be one of your DevOps tools? π [ENTERPRISE-STABLE]
- blog.teemo.co: Terraform in 10 commands π [ENTERPRISE-STABLE]
- udemy.com: Learn DevOps: Infrastructure Automation With Terraform π [ENTERPRISE-STABLE]
- terraform-infraestructura.readthedocs.io π [ENTERPRISE-STABLE]
- Why we use Terraform and not Chef, Puppet, Ansible, SaltStack, or CloudFormation π [ENTERPRISE-STABLE]
- Terraform, can you keep a secret? π [ENTERPRISE-STABLE]
- Terraform 0.13 Beta released! π [ENTERPRISE-STABLE]
- medium: AWS API Gateway π [ENTERPRISE-STABLE]
- medium: Integration of AWS, Terraform, and GitHub for Automated Deployment Infrastructure π [ENTERPRISE-STABLE]
- medium: Automation of Cloud-Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: Custom Variable Validation in Terraform 0.13 π [ENTERPRISE-STABLE]
- medium: Terraform for Network Engineers: Should you be implementing Infrastructure as Code? π [ENTERPRISE-STABLE]
- hashicorp.com: Learn How to Import Infrastructure Into Terraform π [CASE-STUDY]
- Bridgecrew: Misconfigured Terraform Modules Are a Security Issue π [ENTERPRISE-STABLE]
- medium - Infrastructure-As-Code: But You Donβt Have to Write That Code π [ENTERPRISE-STABLE]
- Manage Active Directory Objects with the New Windows AD Provider for HashiCorp Terraform π [ENTERPRISE-STABLE]
- Terraform Feature Flags & Environment Toggle Design Patterns π [ENTERPRISE-STABLE]
- Announcing Databricks Labs Terraform integration on AWS and Azure π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing 11 Verified Providers for Terraform π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Call APIs with Terraform Providers. Learn how to use and create custom Terraform Providers in a new collection of tutorials on HashiCorp Learn π π [CASE-STUDY]
- devblogs.microsoft.com: What is infrastructure as code? π π [ENTERPRISE-STABLE]
- k21academy.com: Why Terraform? Not Chef, Ansible, Puppet, CloudFormation? π π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorial: Sensitive Input Variables π π [CASE-STUDY]
- AWS Lambda the Terraform Way π [ENTERPRISE-STABLE]
- medium: Donβt Forget to Restrict Outbound Traffic with Terraform and Sentinel π [ENTERPRISE-STABLE]
- K3s Private Cluster π π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorial: Terraform Outputs π π [CASE-STUDY]
- trek10.com: Beginner's Guide to Using Terraform with AWS π π [ARCHITECTURE-GUIDE]
- env0.com: Weβre Opensourcing Terratag to Make Multicloud Resource Tagging Easier π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Mono Repo vs. Multi Repo: The Great Debate π [ENTERPRISE-STABLE]
- terraform.io: Cloud Adoption Framework for Azure - Terraform module π [ENTERPRISE-STABLE]
- arnaudlheureux.io: Migrating Azure CAF landing zones to Terraform 0.13 π [ENTERPRISE-STABLE]
- tfenv π [ENTERPRISE-STABLE]
- dev.to: Packer and Terraform with Immutable Infrastructure π [ENTERPRISE-STABLE]
- medium: Terraform: How to Use Conditionals to Dynamically Create Resources π [CASE-STUDY]
- cloudify.co: Ansible, Terraform And Cloudify π [ENTERPRISE-STABLE]
- deloitte.com: Infrastructure as Code (IaC) con Terraform π [ENTERPRISE-STABLE]
- accurics.com: Terraform Security: Improving IaC Scans with Terraform Plan Output π [ENTERPRISE-STABLE]
- hashicorp.com: Modern Infrastructure Automation with Packer, Terraform, and Consul (video) π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorials: Getting Started with the Helm and Datadog Providers π π [CASE-STUDY]
- hashicorp.com: How can I prevent configuration drift? π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorials: Getting Started with the Helm and Datadog Providers π [CASE-STUDY]
- hashicorp.com: Share Modules Across Organizations with Terraform Enterprise π [ENTERPRISE-STABLE]
- freecodecamp.org: What is Terraform? Learn Terraform and Infrastructure as Code π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing HashiCorp Terraform 0.15 General Availability π [ENTERPRISE-STABLE]
- itnext.io: How to use Terraform to create a small-scale Cloud Infrastructure π π [CASE-STUDY]
- acloudguru.com: Securing your multi-cloud Terraform pipelines with policy-as-code π [ENTERPRISE-STABLE]
- medium: Terraform β Remote States Overview π π [ENTERPRISE-STABLE]
- prcode.co.uk: Connect Azure MySQL to Private Endpoint with Terraform π [ENTERPRISE-STABLE]
- infoq.com: Cloudflare Improves Automated Terraform Generation Tool π π [ENTERPRISE-STABLE]
- hashicorp.com: Building Azure Resources with TypeScript Using the CDK for Terraform π [ENTERPRISE-STABLE]
- acloudguru.com: How to use Terraform outputs and inputs π [CASE-STUDY]
- infoq.com: Managing Infrastructure from Kubernetes with the HashiCorp Terraform Operator π [ENTERPRISE-STABLE]
- medium: Protect your Terraform State π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform AzureAD Provider Now Supports Microsoft Graph π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorials on HashiCorp Learn π [CASE-STUDY]
- hashicorp.com: Announcing Support for Amazon ECS Anywhere in the Terraform AWS Provider π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing HashiCorp Terraform 1.0 General Availability π π [ENTERPRISE-STABLE]
- acloudguru.com: What does the Terraform 1.0 release mean for you? π [ENTERPRISE-STABLE]
- thenewstack.io: Terraform 1.0 Reflects What HashiCorp Has Learned About Infrastructure-as-Code π [ENTERPRISE-STABLE]
- medium: terraform | git commit -m βall the secretsβ | sops tool for managing secrets π π [ENTERPRISE-STABLE]
- fsgeorgee.medium.com: Growing out of Heroku to Terraform, Docker and AWS π [ENTERPRISE-STABLE]
- learn.hashicorp.com: y Serverless Applications with AWS Lambda and API Gateway π π [ENTERPRISE-STABLE]
- harness.io: Terraform 201: What It Is, Tutorial, and More π π [CASE-STUDY]
- medium: Terraform Zero to Hero π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Configure Default Tags for AWS Resources π π [ENTERPRISE-STABLE]
- terraform-hcloud-dualstack-k8s: Hetzner Dual-Stack Kubernetes Cluster π [ENTERPRISE-STABLE]
- hashicorp.com: Beta Support for CRDs in the Terraform Provider for Kubernetes π [ENTERPRISE-STABLE]
- opensource.com: My top 5 tips for setting up Terraform π π [ENTERPRISE-STABLE]
- rpadovani.com: How to make Terraform waiting for cloud-init to finish on EC2 without SSH π [CASE-STUDY]
- hashicorp.com: Cisco, Citrix, and Fortinet Among New Verified Terraform Providers π [ENTERPRISE-STABLE]
- terraform-best-practices.com π π [ENTERPRISE-STABLE]
- bridgecrew.io: Advanced Terraform security: Pro tips for secure infrastructure as code π [ENTERPRISE-STABLE]
- hub.qovery.com: Terraform is Not the Golden Hammer π [ENTERPRISE-STABLE]
- scalefactory.com: Failing faster with terraform π [ENTERPRISE-STABLE]
- hashicorp.com: AWS and HashiCorp Collaborate on New Terraform Modules π [ENTERPRISE-STABLE]
- shipa.io: Terraform meets AppOps π π [ENTERPRISE-STABLE]
- bitslovers.com: Terraform Output β What you should know π [ENTERPRISE-STABLE]
- devops.com: Building on Terraform: Evolution, not Revolution π [ENTERPRISE-STABLE]
- hashicorp.com: Multi-Cloud DevOps at PETRONAS with Terraform π [ENTERPRISE-STABLE]
- terraform.io: Refactoring π [ENTERPRISE-STABLE]
- medium: Terraform in Real Life: Lessons Learned π π [ENTERPRISE-STABLE]
- serhii.vasylenko.info: Some Techniques to Enhance Your Terraform Proficiency π [ENTERPRISE-STABLE]
- thenewstack.io: Better Together: Hyper-Converged Kubernetes with Terraform π [ENTERPRISE-STABLE]
- AdminTurnedDevOps/Terraform-The-Hard-Way π [ENTERPRISE-STABLE]
- acloudguru.com: 5 things we love about Terraform π [ENTERPRISE-STABLE]
- devops.com: How to Migrate Existing Infrastructure to Terraform π [CASE-STUDY]
- middlewareinventory.com: Terraform import All AWS Security Groups β How to π [CASE-STUDY]
- middlewareinventory.com: Terraform For Each Examples β How to use for_each | Devops Junction π [CASE-STUDY]
- medium.com/nerd-for-tech: Terraforming the GitOps Way !!! π [ENTERPRISE-STABLE]
- terrateam.io: Terraform Pre-Commit Hooks π [ENTERPRISE-STABLE]
- faun.pub: Terraform-Prevent Conditionally Created Resources From Deletion π π [ENTERPRISE-STABLE]
- faun.pub: 5 Best Terraform Tools That You Need in 2022 π π [ENTERPRISE-STABLE]
- dev.to/kubestack: A Better Way to Provision Kubernetes Resources Using Terraform π π [ENTERPRISE-STABLE]
- betterprogramming.pub: Design by Contract in Terraform π [ENTERPRISE-STABLE]
- youtube: Terrraform + Ansible: Automating configuration in infrastructure π₯ π [ENTERPRISE-STABLE]
- medium.com/@oamdev2020: Glue Terraform Ecosystem into Kubernetes World π π [ENTERPRISE-STABLE]
- terraform.io: Provisioners π [ENTERPRISE-STABLE]
- faun.pub: The Lifecycle of a Terraform Resource β Lifecycle Meta-Argument π [ENTERPRISE-STABLE]
- medium.com/@dugouchet.a: Manage your terraform like a container π [ENTERPRISE-STABLE]
- medium.com/spacelift: Terraform vs. Kubernetes: Key Differences and Comparison π [ENTERPRISE-STABLE]
- infoq.com: Terraform 1.3 Release Introduces Simplified Refactoring Experience π π [ENTERPRISE-STABLE]
- medium.com/nerd-for-tech: Building a Two-Tier Architecture for High Availability using Terraform π [ARCHITECTURE-GUIDE]
- towardsaws.com: Import Existing AWS Infrastructure to Terraform π [ENTERPRISE-STABLE]
- medium.com/google-cloud: Automate Terraform documentation like a pro! π [ENTERPRISE-STABLE]
- buildkite.com: Manage your CI/CD resources as Code with Terraform π [ENTERPRISE-STABLE]
- blog.gruntwork.io: Terraform tips & tricks: loops, if-statements, and gotchas π [ENTERPRISE-STABLE]
- medium.com/@adolfo.diaz.zar: Secret Management with Terraform π π [ENTERPRISE-STABLE]
- awstip.com: Refactor Terraform code with Moved Blocks β a new way without manually modifying the state π [ENTERPRISE-STABLE]
- dev.to: Using Terraform To Manage Infrastructure Resources | Pavan Belagatti π [ENTERPRISE-STABLE]
- faun.pub: Terraform null provider and null_resource explained π π [ENTERPRISE-STABLE]
- spectrocloud.com: Deploying complex infrastructure with a Terraform state machine π [ENTERPRISE-STABLE]
- swwapnilp.medium.com: How Does Slack Use Terraform? π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Abstraction Tips: Just Because You Can Doesn't Mean You Should π [ENTERPRISE-STABLE]
- hashicorp.com: Best Practices for Terraform AWS Tags π [ENTERPRISE-STABLE]
- medium.com/codex: How to Use the If / Else Statement in Terraform β Examples π π [CASE-STUDY]
- tekanaid.com: Terraform for Beginners β A Beginnerβs Guide to Automating Cloud Infrastructure π π [ARCHITECTURE-GUIDE]
- terrahaxs.com: Choosing the Right Terraform Loop: count vs for_each π π [ENTERPRISE-STABLE]
- digitalocean.com: How To Structure a Terraform Project π π [CASE-STUDY]
- getbetterdevops.io: How To Deploy Helm Charts With Terraform π π [CASE-STUDY]
- medium.com/@dsdatsme: Terraform GitOps CI/CD with Approval & Notifications π [ENTERPRISE-STABLE]
- github.com/DhruvinSoni30/Terraform_multiple_modules π [ENTERPRISE-STABLE]
- spacelift.io: Terraform Files β How to Structure a Terraform Project π [CASE-STUDY]
- youtube - freecodecamp.org: Learn Terraform with Azure by Building a Dev Environment β Full Course for Beginners π [ENTERPRISE-STABLE]
- youtube - freecodecamp.org: Learn Terraform (and AWS) by Building a Dev Environment β Full Course for Beginners π₯ π [ENTERPRISE-STABLE]
- devdosvid.blog: Hello Terraform Data; Goodbye Null Resource π [ENTERPRISE-STABLE]
- build5nines.com: Why HashiCorp Terraform is Essential for SREs and DevOps Engineers π [ENTERPRISE-STABLE]
- infoq.com: CDK for Terraform Improves HCL Conversion and Terraform Cloud Interactions π [ENTERPRISE-STABLE]
- devdosvid.blog: Hello Terraform Data; Goodbye Null Resource π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Cloud no-code provisioning is now GA with new features π [ENTERPRISE-STABLE]
- dzone: Terraform Explained in Five Minutes π [ENTERPRISE-STABLE]
- medium.com/@willguibr: Terraform 1.5 β Import and Automatic Code Generation π [ENTERPRISE-STABLE]
- praveendandu24.medium.com: Mastering Terraform: From Essential Commands to Effortless EC2 Instance Provisioning π [ENTERPRISE-STABLE]
- faun.pub: Import your existing cloud infra into Terraform π [ENTERPRISE-STABLE]
- gravitydevops.com: Terraform: A Step-by-Step Guide from Basics to Advanced Techniques π [ARCHITECTURE-GUIDE]
- ikunalsingh.hashnode.dev: Dynamic Operations in Terraform with Functions - Use templatefile to dynamically generate a script π [ENTERPRISE-STABLE]
- blog.gruntwork.io: How to use Terraform as a team π [CASE-STUDY]
- overmind.tech: Is Observability relevant for Terraform? π [ENTERPRISE-STABLE]
- medium.com/platform-engineer: 26 Terraform Hacks for Effective Infrastructure Automation (With Examples) π [ENTERPRISE-STABLE]
- thenewstack.io: Automating Retry for Failed Terraform Launches π [ENTERPRISE-STABLE]
- theburningmonk.com: Making Terraform and Serverless framework work together π [ENTERPRISE-STABLE]
- build5nines.com: Terraform Workflow Process Explained π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: How to Join and Split Strings π [CASE-STUDY]
- build5nines.com: Terraform: Deploy Azure ExpressRoute Circuit with VNet Gateway π [ENTERPRISE-STABLE]
- nedinthecloud.com: Replacing The Template Cloudinit Config Data Source π [ENTERPRISE-STABLE]
- hashicorp.com: Testing HashiCorp Terraform π [ENTERPRISE-STABLE]
- youtube: Stop using shared secrets! CI/CD authentication the proper way π₯ π [ENTERPRISE-STABLE]
- blog.devgenius.io: Kubernetes on Proxmox with Terraform π [ENTERPRISE-STABLE]
- medium.com/@orellanaluke: Terraform and the Art of Small: My Guide to Navigating Smarter, Safer State Management π [ARCHITECTURE-GUIDE]
- youtube.com: Terraform Basics | Ned in the Cloud π₯ π [ENTERPRISE-STABLE]
- youtube: How to Deploy an E-Commerce Website to AWS With Terraform || Terraform Hands-on Project | Tech with Helen π₯ π [CASE-STUDY]
- sharmasmriti.hashnode.dev: Day 61 - Terraform Commands π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Code Project Organization Strategies (based on team, workload, or monolithic) π [ENTERPRISE-STABLE]
- medium.com/@ebonyymonae: Terraform Basics π [ENTERPRISE-STABLE]
- dev.to/grrywlsn: Self-service infrastructure as code π [ENTERPRISE-STABLE]
- aws.plainenglish.io: The Automation Fellowship: Packer, Terraform, and Ansible β PART III π [ENTERPRISE-STABLE]
- youtube: Transforma tu EMPRESA con Terraform: CatΓ‘logo de Servicios | Nito Moreno π₯ π [ENTERPRISE-STABLE]
- shrihariharidas73.medium.com: Terraform & HashiCorp Vault Integration: Seamless Secrets Management π [ENTERPRISE-STABLE]
- ccseyhan.medium.com: What Is Terraform Reusability and How to Achieve It π [CASE-STUDY]
- build5nines.com: Should .terraform.lock.hcl file be added to .gitignore or committed to Git repo? π [ENTERPRISE-STABLE]
- itnext.io: GitHub Actions: Terraform deployments with a review of planned changes π [ENTERPRISE-STABLE]
- medium.com/@prasadanilmore: The Magic of Visualizing Your Cloud Infrastructure: Real-time Terraform Visualization π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: How to for_each through a list(objects) π [CASE-STUDY]
- medium.com/netpremacy-global-services: The beginning of the end for Terraform? π [ENTERPRISE-STABLE]
- blog.realkinetic.com: Itβs Time to Retire Terraform π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Modules using Git Branch as Source π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Split main.tf into seperate files π [ENTERPRISE-STABLE]
- pod.chaoslever.com: HashiCorp Under IBMβs Wing π [ENTERPRISE-STABLE]
- build5nines.com: Analyzing IBMβs Acquisition of HashiCorp: A Game-Changer in Hybrid Cloud Management π [ENTERPRISE-STABLE]
- dev.to/bhanufyi: Effective Terraform Variable Management in GitHub Actions π [ENTERPRISE-STABLE]
- dev.to/env0: Terraform Destroy Command: A Guide to Controlled Infrastructure Removal π [ARCHITECTURE-GUIDE]
- build5nines.com: Terraform IP Functions for Managing IP Addresses, CIDR Blocks, and Subnets π [ENTERPRISE-STABLE]
- masterpoint.io: Three Terraform Use-cases You Need to Start Implementing π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Remove Resource from State File (.tfstate) π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: How are Data Sources used? π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Conditional If Variable Does Not Exist (try function) π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Output URL to Azure Portal for Azure Resources π [ENTERPRISE-STABLE]
- build5nines.com: Terraform State Management Explained π [ENTERPRISE-STABLE]
- build5nines.com: Working with YAML in Terraform using the
yamldecodeandyamlencodeFunctions π [ENTERPRISE-STABLE] - mattias.engineer: Terraform Variable Cross Validation π [ENTERPRISE-STABLE]
- nilebits.com: Understanding Terraform Drift Detection and Remediation π π [ENTERPRISE-STABLE]
- spacelift.io/blog/terraform-backends π [ENTERPRISE-STABLE]
- dev.to/spacelift: Using Terraform YAML Functions π [ENTERPRISE-STABLE]
- howdykloudy.in: Implementing Shift Left for Terraform: An Introductory Guide π π [ARCHITECTURE-GUIDE]
- bejarano.io/terraform-plan-light: terraform plan -light π π [ENTERPRISE-STABLE]
- acloudguru.com: How to troubleshoot 5 common Terraform errors π [CASE-STUDY]
- dronov.net: Terraform, the terrible π [ENTERPRISE-STABLE]
- opencoreventures.com: HashiCorp switching to BSL shows a need for open charter companies π [ENTERPRISE-STABLE]
- medium.com/@hello_9187: Why We Are Not Supporting OpenTF π [ENTERPRISE-STABLE]
- nedinthecloud.com: Comparing Open TOFU And Terraform π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Ensuring Your Terraform is Correctly Formatted Using Terraform fmt and GitHub Actions π [ENTERPRISE-STABLE]
- "Have you used the taint command in Terraform yet?" π₯ π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform stacks, explained π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Automate Terraform with GitHub Actions π [ENTERPRISE-STABLE]
- acloudguru.com: How to use GitHub Actions to automate Terraform π [CASE-STUDY]
- youtube: AWS Backup Set Up Using Terraform cloud and GitHub Actions | Cloud Quick Labs π₯ π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Deploy Terraform using GitHub Actions to Azure π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: GitHub Actions Automated Deployment π [ENTERPRISE-STABLE]
- medium.com/@bijit211987: DevSecOps Approach with Terraform and CI/CD Pipelines π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Displaying Terraform Plans in GitHub PRs with GitHub Actions π [ENTERPRISE-STABLE]
- dev.to/spacelift: How to Manage Terraform with GitHub Actions π [CASE-STUDY]
- docs.gitlab.com: GitLab managed Terraform State π π [ENTERPRISE-STABLE]
- about.gitlab.com: How to use a push-based approach for GitOps with Terraform and AWS ECS and EC2 π [CASE-STUDY]
- Terraform & OpenTofu Skill for AI Agents π [ENTERPRISE-STABLE]
- AI Meets Terraform: Prompt Strategies for Test Generation π [ENTERPRISE-STABLE]
- Automate Terraform Testing with Azure DevOps Pipelines π [ENTERPRISE-STABLE]
- Testing Infrastructure as Code on Localhost π [ENTERPRISE-STABLE]
- hashicorp.com: Testing HashiCorp Terraform π π [ENTERPRISE-STABLE]
- mattias.engineer: A Comprehensive Guide to Testing in Terraform: Keep your tests, validations, checks, and policies in order π π [ARCHITECTURE-GUIDE]
- TerraSchema: Generate JSON Schema from Terraform Configurations π [ENTERPRISE-STABLE]
- terraform-docs.io π [ENTERPRISE-STABLE]
- github.com/PacoVK/tapir π [ENTERPRISE-STABLE]
- youtube HashiCorp: Telemetry transformed: Terraforming Grafana for next-gen dashboards π₯ π [ENTERPRISE-STABLE]
- dzone: Immutable Infrastructure CI/CD Using Hashicorp Terraform and Jenkins π [ENTERPRISE-STABLE]
- dev.to: Provisioning AWS Infrastructure using Terraform and Jenkins CI/CD π [ENTERPRISE-STABLE]
- github.com/vijaykedar/jenkins-setup-using-terraform π [ENTERPRISE-STABLE]
- github.com/reneaudain/jenkins_tf_repo: Jenkins Server and S3 Artifact Storage on AWS using Terraform π [ENTERPRISE-STABLE]
- Pulumi: Infrastructure as Code in Any Programming Language π [ENTERPRISE-STABLE]
- medium.com/@mike_tyson_cloud: IT Automation: 10 Alternatives To Terraform π [ENTERPRISE-STABLE]
- kvs-vishnu23.medium.com: Is AWS CDK better than Terraform? π [ENTERPRISE-STABLE]
- Ephemeral Values in Terraform π [ENTERPRISE-STABLE]
- blog.gruntwork.io: A comprehensive guide to managing secrets in your Terraform code πππ π [ARCHITECTURE-GUIDE]
- learn.hashicorp.com: Manage Private Environments with Terraform Cloud Agents π [ENTERPRISE-STABLE]
- youtube: GitOps for infrastructure using GitHub and Terraform Cloud π π₯ π [ENTERPRISE-STABLE]
- scalr.com: An alternative to Terraform Cloud and Terraform Enterprise π [ENTERPRISE-STABLE]
- hashicorp.com: New Apply User Interface for Terraform Cloud π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Cloud Variable Sets Beta Now Available π [ENTERPRISE-STABLE]
- devclass.com: Terraform 1.1 moves forward with refactoring helpers and native Terraform Cloud integration π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Cloud Adds Drift Detection for Infrastructure Management π [ENTERPRISE-STABLE]
- blog.gruntwork.io: How to manage multiple environments with Terraform π π [CASE-STUDY]
- medium.com/@avyanab: Deploy A Two-Tier Architecture with AWS and Terraform Cloud π [ARCHITECTURE-GUIDE]
- spacelift.io: Terraform Cloud β Overview, Key Features & Tutorial π [CASE-STUDY]
- hashicorp.com: Terraform Cloud adds aggregated VCS reviews π [ENTERPRISE-STABLE]
- hashicorp.com: 7 ways to optimize cloud spend with Terraform π [ENTERPRISE-STABLE]
- hashicorp.com/infrastructure-cloud π [ENTERPRISE-STABLE]
- build5nines.com: What is The HashiCorp Infrastructure Cloud? π [ENTERPRISE-STABLE]
- medium.com/@elliotgraebert: Four Great Alternatives to HashiCorpβs Terraform Cloud π [ENTERPRISE-STABLE]
- digger.dev π [ENTERPRISE-STABLE]
- spacelift.io π [ENTERPRISE-STABLE]
- github.com/hashicorp/hcl: HCL π [ENTERPRISE-STABLE]
- octopus.com: Introduction to HCL and HCL tooling π [ENTERPRISE-STABLE]
- terraform-cdk π π [ENTERPRISE-STABLE]
- infoq.com: cdk-terraform - Cloud Development Kit Can Now Generate Terraform Configurations Using TypeScript and Python π [ENTERPRISE-STABLE]
- hashicorp.com: CDK for Terraform: Enabling Python & TypeScript Support π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing CDK for Terraform 0.1 π [ENTERPRISE-STABLE]
- ansible.com: Providing Terraform with that Ansible Magic ππ π [ENTERPRISE-STABLE]
- medium.com/@dmglascoe: Deploying IAM Users and S3 Buckets using Boto3 and Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Practices: The Good, the Bad, and the Ugly π [ENTERPRISE-STABLE]
- opensource.com: How I use Terraform and Helm to deploy the Kubernetes Dashboard π π [ENTERPRISE-STABLE]
- InfraCost + Terraform PRs: Making Cost Awareness Effortless π [ENTERPRISE-STABLE]
- Infracost π π [ENTERPRISE-STABLE]
- A Guide to Cloud Cost Optimization with HashiCorp Terraform π π [ARCHITECTURE-GUIDE]
- pratapreddypilaka.blogspot.com: Azure FinOps using Terraform and Infracost - Finding the hourly or monthly cost before Azure DevOps Deployments π [ENTERPRISE-STABLE]
- linkedin.com/pulse: How to Estimate Cloud Costs with Terraform (Azure, AWS, GCP, etc.) via Azure DevOps Pipelines π [CASE-STUDY]
- github.com/shuaibiyy/awesome-terraform π [FOUNDATIONAL]
- github.com/Azure/awesome-terraform π [FOUNDATIONAL]
- Scale with Confidence Using Terraform: Better Cost Visibility, Stronger Governance, and Less Operational Overhead π [ENTERPRISE-STABLE]
- Terraform Best Practices π [ENTERPRISE-STABLE]
- github.com/ozbillwang/terraform-best-practices π [ENTERPRISE-STABLE]
- globaldatanet.com: Terraform CI/CD Best Practices π [ENTERPRISE-STABLE]
- bridgecrew.io: Terraform security 101: Best practices for secure infrastructure as code π π [ENTERPRISE-STABLE]
- medium.com/@ranjana-jha: Infrastructure as a code best practices : Terraform π [ENTERPRISE-STABLE]
- sairamkrish.medium.com: Terraform β Best practices and project setup π [ENTERPRISE-STABLE]
- medium.com/spacelift: Terraform Best Practices for Better Infrastructure Management π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Practices: The Good, the Bad, and the Ugly π [ENTERPRISE-STABLE]
- medium.com/schibsted-engineering: Ultimate Terraform project structure π π [ENTERPRISE-STABLE]
- developer.hashicorp.com: Part 3: How to Evolve Your Provisioning Practices π [CASE-STUDY]
- thenewstack.io: Terraformβs Best Practices and Pitfalls π [ENTERPRISE-STABLE]
- build5nines.com: Terraform Best Practices for Writing Clean, Readable, and Maintainable Code π [ENTERPRISE-STABLE]
- hashicorp.com: Opinionated Terraform Best Practices and Anti-Patterns π [ENTERPRISE-STABLE]
- spacelift.io: 20 Terraform Best Practices to Improve your TF workflow π π [ENTERPRISE-STABLE]
- medium.com/@junjun231953_53717: Terraform Best Practices π [ENTERPRISE-STABLE]
- iopshub.medium.com: Terraform Best Practices Everyone Should Know π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Using Terraform tfvars for environment-agnostic deployments π π [ENTERPRISE-STABLE]
- Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) π [ARCHITECTURE-GUIDE]
- Announcing General Availability of Terraform Azure Verified Modules for Platform Landing Zone (ALZ) π [ENTERPRISE-STABLE]
- dzone: Manage Multiple Environments With Terraform Workspaces π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing Support for Code Signing for AWS Lambda in the Terraform AWS Provider π [ENTERPRISE-STABLE]
- medium.com/devops-mojo: Terraform β Workspaces Overview π π [ENTERPRISE-STABLE]
- build5nines.com: Best Practices to Promote from DEV to PROD Environments with HashiCorp Terraform using Workspaces and Folders π π [ENTERPRISE-STABLE]
- awesomeopensource.com: Terraform Aws Multi Az Subnets π [FOUNDATIONAL]
- github.com/cloudposse?q=terraform- π [ENTERPRISE-STABLE]
- devopshubproject/azure-terraform-ansible π [ENTERPRISE-STABLE]
- Enterprise-Scale Azure Subscription Vending Using Azure Verified Modules (AVM) π [ENTERPRISE-STABLE]
- Azure Landing Zone IaC Accelerator Release Notes π [ENTERPRISE-STABLE]
- Manage Azure IPAM with Terraform π [ENTERPRISE-STABLE]
- Application Network Security in Azure Subnets, Endpoints, DNS, NSGs with Terraform Code π [ENTERPRISE-STABLE]
- The Maester - Terraform Module π [ENTERPRISE-STABLE]
- hashicorp.com: New Terraform Tutorials on Provisioning and Managing Kubernetes Clusters π π [CASE-STUDY]
- hodovi.cc: Creating a Low Cost Managed Kubernetes Cluster for Personal Development using Terraform π [ENTERPRISE-STABLE]
- Deploying and Managing a Minimal App in a Kubernetes Cluster with Terraform and Ansible π [ENTERPRISE-STABLE]
- Deploy Any Resource With The New Kubernetes Provider for HashiCorp Terraform π [ENTERPRISE-STABLE]
- kubernetes.io blog: Working with Terraform and Kubernetes π [ENTERPRISE-STABLE]
- phillipsj.net: Dynamically Loaded Terraform Providers π π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing Version 2.0 of the Kubernetes and Helm Providers for HashiCorp Terraform π π [ENTERPRISE-STABLE]
- hashicorp.com: Wait Conditions in the Kubernetes Provider for HashiCorp Terraform π [ENTERPRISE-STABLE]
- itnext.io: Terraform: donβt use kubernetes provider with your cluster resource! π π [ENTERPRISE-STABLE]
- learnk8s.io/kubernetes-terraform: Creating Kubernetes clusters with Terraform π [ENTERPRISE-STABLE]
- blog.kasten.io: Working with Kubernetes and Terraform Part 1: Concepts Behind Terraform and Kubernetes π [ENTERPRISE-STABLE]
- thenewstack.io: A Better Way to Provision Kubernetes Using Terraform π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Deploy Federated Multi-Cloud Kubernetes Clusters π [ENTERPRISE-STABLE]
- architect.io: Get started with the Terraform Kubernetes provider π [ENTERPRISE-STABLE]
- releasehub.com: Terraform Kubernetes Deployment: A Detailed Walkthrough π [ENTERPRISE-STABLE]
- medium.com/@vinoji2005: Using Terraform with Kubernetes: A Comprehensive Guide π [ARCHITECTURE-GUIDE]
- hashicorp.com: Announcing General Availability of the HashiCorp Terraform Cloud Operator for Kubernetes π π [ENTERPRISE-STABLE]
- hashicorp/terraform-k8s: Terraform Cloud Operator for Kubernetes π [ENTERPRISE-STABLE]
- medium: Deploy Infrastructure with the Terraform Cloud Operator for Kubernetes π π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Cloud Operator 2.3 adds workspace run operations π [ENTERPRISE-STABLE]
- spacelift.io: How to Provision an AWS EKS Kubernetes Cluster with Terraform π [CASE-STUDY]
- learnk8s.io/terraform-gke: Provisioning Kubernetes clusters on AWS with Terraform and GKE π π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-eks: Provisioning Kubernetes clusters on AWS with Terraform and EKS π π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-aks: Provisioning Kubernetes clusters on AWS with Terraform and AKS π π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-lke: Provisioning Kubernetes clusters on Linode with Terraform π π [ENTERPRISE-STABLE]
- Dzone: Platform as Code With Openshift and Terraform π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Can I create an Azure Red Hat OpenShift cluster in Terraform? Yes, you can! π [ENTERPRISE-STABLE]
- gist.github.com/chadmcrowell: AKS w/Virtual Nodes (ACI) π [ENTERPRISE-STABLE]
- garutilorenzo/k3s-aws-terraform-cluster π [ENTERPRISE-STABLE]
- poseidon/typhoon π [ENTERPRISE-STABLE]
- infoq.com: Managing Infrastructure from Kubernetes with the HashiCorp Terraform Operator π [ENTERPRISE-STABLE]
- Global K3s Deployment on Packet Baremetal π π [ENTERPRISE-STABLE]
- Terraform Provider for Google Cloud 7.0 is now GA π [ENTERPRISE-STABLE]
- cloud.google.com: Terraform blueprints and modules for Google Cloud π π [ENTERPRISE-STABLE]
- medium.com/@nanditasahu031: Terraform with GCP Cloud π [ENTERPRISE-STABLE]
- medium.com/google-cloud: Setting up Config Connector with Terraform & Helm π [ENTERPRISE-STABLE]
- medium.com/@tarikucar: Getting started with Google Cloud Storage with Terraform π π [ENTERPRISE-STABLE]
- linkedin.com/pulse: GCP-Advanced-Terraform-Interactive-Learning-Challenge π [ENTERPRISE-STABLE]
- hashicorp.com: Access Google Cloud from HCP Terraform with workload identity π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-gke π π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform Adds Support for GKE Autopilot π [ENTERPRISE-STABLE]
- hackernoon.com: Exporting Your GKE Cluster to Terraform Cloud: A Guide with Challenges and Solutions π [ARCHITECTURE-GUIDE]
- github.com/roib20: Terraform - Provision a GKE Cluster with Cloudflare Ingress and ArgoCD π [ENTERPRISE-STABLE]
- Terraform for Standardizing AWS Deployments π [ENTERPRISE-STABLE]
- Dzone: terraform with AWS π [ENTERPRISE-STABLE]
- github.com/terraform-aws-modules/terraform-aws-solutions π [ENTERPRISE-STABLE]
- hashicorp.com: Terraforming RDS: What Instacart Learned Managing Over 50 AWS RDS PostgreSQL Instances with Terraform π [ENTERPRISE-STABLE]
- Dzone: how to deploy apps effortlessly with packer and terraform π [CASE-STUDY]
- stories.schubergphilis.com: (Terraform) AWS management using your Google account π [ENTERPRISE-STABLE]
- thenewstack.io: Terraform on AWS: Multi-Account Setup and Other Advanced Tips π [ENTERPRISE-STABLE]
- medium: How to Provision AWS Infrastructure with Terraform? π π [CASE-STUDY]
- middlewareinventory.com: Terraform import All AWS Security Groups β How to π π [CASE-STUDY]
- hashicorp.com: Terraform AWS Provider Continues to Expand Coverage π [ENTERPRISE-STABLE]
- infoq.com: HashiCorp Terraform AWS Provider Introduces Significant Changes to Amazon S3 Bucket Resource π [ENTERPRISE-STABLE]
- dev.to/arpanadhikari: Reusable AWS iam role for service-accounts (IRSA for k8s ) terraform module π [ENTERPRISE-STABLE]
- betterprogramming.pub: Terraform Setup for Using AWS Lambda With S3 π [ENTERPRISE-STABLE]
- aws.amazon.com: Save time with automated security checks of your Terraform scripts π [ENTERPRISE-STABLE]
- haque-zubair.medium.com: AWS API Gateway & Lambda with Terraform π [ENTERPRISE-STABLE]
- medium.com/@abhimanyubajaj98: Deploying Kubernetes from Scratch with Terraform: A Step-by-Step Guide π [ARCHITECTURE-GUIDE]
- aws.plainenglish.io: Building AWS Infrastructure with Terraform Modules π [ENTERPRISE-STABLE]
- khainas.dev: Create SSH tunnel in AWS with Terraform π [ENTERPRISE-STABLE]
- faun.pub: Configuring a Highly Available Infrastructure in AWS using Terraform π [ENTERPRISE-STABLE]
- towardsaws.com: Terraform Basics: Creating Custom AWS VPC, Subnets, and Route Tables π [ENTERPRISE-STABLE]
- medium.com/@anatoliydadashev: Terraform & AWS decoupled architecture π [ARCHITECTURE-GUIDE]
- dev.to: How to deploy a serverless website with Terraform π [CASE-STUDY]
- towardsaws.com: Creating a Bastion Host for Secure Access to Your AWS Infrastructure with Terraform π [ENTERPRISE-STABLE]
- github.com/aws-samples: AWS Service Catalog Engine for Terraform π [ENTERPRISE-STABLE]
- dev.to: Terraforming AWS RDS : Scaling Postgres π [ENTERPRISE-STABLE]
- medium.com/aws-infrastructure: Create AWS VPC Infrastructure with Terraform π [ENTERPRISE-STABLE]
- numericaideas.com: Auto Scaling Group on AWS with Terraform π [ENTERPRISE-STABLE]
- aws.plainenglish.io: Terraform Hands-on Project π [ENTERPRISE-STABLE]
- devopscube.com: AWS Terraform Autoscaling Group With ALB Deployment Tutorial π [CASE-STUDY]
- medium.com/cloud-native-daily: How to Securely Manage Terraform State File in AWS Using Terraform π [CASE-STUDY]
- dev.to/monarene: Dynamic Volume Provisioning in Kubernetes with AWS and Terraform π [ENTERPRISE-STABLE]
- blog.awsfundamentals.com: Mastering AWS Lambda with Terraform: A Comprehensive Guide π [ARCHITECTURE-GUIDE]
- medium.com/@rizkiprass: Beginner Terraform Tutorial: Launching EC2 in AWS using Terraform π [CASE-STUDY]
- github.com/squareops/terraform-aws-vpc π [ENTERPRISE-STABLE]
- devxblog.hashnode.dev: Terraform with AWS π [ENTERPRISE-STABLE]
- dev.to/aws-builders: Deploying a Containerized App to ECS Fargate Using a Private ECR Repo & Terragrunt π [ENTERPRISE-STABLE]
- blog.devops.dev: How to create an AWS sandbox account using terraform π [CASE-STUDY]
- towardsaws.com: Automating Static Website Deployment: A Guide to CI/CD with AWS and Terraform π [ARCHITECTURE-GUIDE]
- youtube: Three tier architecture using Terraform in AWs π₯ π [ARCHITECTURE-GUIDE]
- github.com/tokarev-artem/auto-ec2-setup π [ENTERPRISE-STABLE]
- dev.to/chinmay13: AWS Networking with Terraform: VPC Transit Gateway between VPCs π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform AWS Cloud Control API provider now generally available π [ENTERPRISE-STABLE]
- dev.to/aws-builders: My Service Mesh journey with Terraform on AWS Cloud - Part 1 π [ENTERPRISE-STABLE]
- dev.to/aws-builders: My Service Mesh journey with Terraform on AWS Cloud - Part 2 π [ENTERPRISE-STABLE]
- github.com/infrahouse/terraform-aws-ecs π [ENTERPRISE-STABLE]
- dev.to/bennyfmo_237: Deploying Basic Infrastructure on AWS with Terraform π [ENTERPRISE-STABLE]
- New β Self-Service Provisioning of Terraform Open-Source Configurations with AWS Service Catalog πππ π [ENTERPRISE-STABLE]
- github.com/aws-observability π [ENTERPRISE-STABLE]
- aws-observability.github.io: AWS Observability Accelerator for Terraform π π [ENTERPRISE-STABLE]
- aws-observability.github.io: Tracing on Amazon EKS π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-eks π π [ENTERPRISE-STABLE]
- github.com/maddevsio/aws-eks-base: Boilerplate for a basic AWS infrastructure with EKS cluster π π [ENTERPRISE-STABLE]
- github.com/aws-samples/aws-eks-accelerator-for-terraform: AWS EKS Accelerator for Terraform π π [ENTERPRISE-STABLE]
- sebinxavi.medium.com: EKS cluster deployment using Terraform π [ENTERPRISE-STABLE]
- itnext.io: How to Design and Provision a Production-Ready EKS Cluster π [CASE-STUDY]
- faun.pub: Building an EKS Fargate cluster with Terraform π [ENTERPRISE-STABLE]
- medium.com/devgurus: Building production grade EKS clusters using Terraform π [ENTERPRISE-STABLE]
- medium.com/devops-mojo: Terraform β Provision Amazon EKS Cluster using Terraform π [ENTERPRISE-STABLE]
- garutilorenzo/k8s-aws-terraform-cluster π [ENTERPRISE-STABLE]
- github.com/terraform-aws-modules/terraform-aws-eks: AWS EKS Terraform module π [ENTERPRISE-STABLE]
- itnext.io: Build EKS cluster with Terraform π π [ENTERPRISE-STABLE]
- faun.pub: Amazon EKS with Terraform and GitOps in minutes π [ENTERPRISE-STABLE]
- awstip.com: Streamlining AWS EKS Cluster Volume Management with Helm and Terraform: EBS CSI Driver + Self-Managed AddOn Option π [ENTERPRISE-STABLE]
- hewi.blog: Deploying an EKS cluster using Terraform π [ENTERPRISE-STABLE]
- platformwale.blog: Create Amazon EKS Cluster within its VPC using Terraform π [ENTERPRISE-STABLE]
- medium.com/@ernestkwashie3: Provisioning Amazon Elastic Kubernetes Service (EKS) Cluster using Terraform π [ENTERPRISE-STABLE]
- dev.to/aws-builders: Navigating AWS EKS with Terraform: Understanding VPC Essentials for EKS Cluster Management π [ENTERPRISE-STABLE]
- dev.to/verifacrew: How to assume an AWS IAM role from a Service Account in EKS with Terraform π [CASE-STUDY]
- medium.com/@vajrapuvinod: Mastering Ingress Context Path Based Routing in AWS EKS using AWS Load Balancer Controller through Terraform π [ENTERPRISE-STABLE]
- awscc π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing Terraform AWS Cloud Control Provider Tech Preview π [ENTERPRISE-STABLE]
- hashicorp.com: Using the Terraform AWS Cloud Control Provider π [ENTERPRISE-STABLE]
- aws.amazon.com: New β AWS Control Tower Account Factory for Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: HashiCorp Teams with AWS on New Control Tower Account Factory for Terraform π [ENTERPRISE-STABLE]
- aws.amazon.com: AWS Control Tower π [ENTERPRISE-STABLE]
- trek10.com: Control Tower: Then vs Now π [ENTERPRISE-STABLE]
- porscheofficial/terraform-aws-ecr-watch π [ENTERPRISE-STABLE]
- serverless.tf: Doing serverless with Terraform π [ENTERPRISE-STABLE]
- registry.terraform.io: Terraform Azure Resources π π [ENTERPRISE-STABLE]
- build5nines.com: Get Started with Terraform on Azure π [ENTERPRISE-STABLE]
- medium: Using Terraform with Azure β the right way π [ENTERPRISE-STABLE]
- github.com/kuhlman-labs/terraform-azurerm-landing-zone π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Implement Azure landing zones with HashiCorp Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: Configuring Azure Application Gateway with Consul-Terraform-Sync π [ENTERPRISE-STABLE]
- azureviking.com: Terraform module: Azure DNS Private Resolver π [ENTERPRISE-STABLE]
- github.com/thomast1906/terraform-on-azure π [ENTERPRISE-STABLE]
- blog.cloudtrooper.net: DRY Terraform code for Private Link and DNS π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Deploy Azure Function App with Consumption Plan π [ENTERPRISE-STABLE]
- hashicorp.com: Building a secure Azure reference architecture with Terraform π [ARCHITECTURE-GUIDE]
- medium.com/@noelgass: Azure Common Monitoring With Terraform π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Simplifying Onboarding to Microsoft Defender for Cloud with Terraform π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Create an Azure OpenAI, LangChain, ChromaDB, and Chainlit chat app in AKS using Terraform π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Deploy Azure App Service with Key Vault Secret Integration π [ENTERPRISE-STABLE]
- youtube: Using Azure Storage for Terraform State - Best Practices | Ned in the cloud π₯ π [ENTERPRISE-STABLE]
- hashicorp.com: Build secure AI applications on Azure with HashiCorp Terraform and Vault π [ENTERPRISE-STABLE]
- linkedin.com/pulse: Deploying Microsoft Sentinel via - ARM Template vs Terraform π [ENTERPRISE-STABLE]
- blog.xmi.fr: Terraform vs Bicep: the differences you should really know π π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Terraform on Azure February 2024 Update π [ENTERPRISE-STABLE]
- azureviking.com: Terraform Module: azurerm-alz-subnet π [ENTERPRISE-STABLE]
- hlokensgard.no/knowledge-sharing: Miro Mind map over Azure Landing Zones element, Terraform modules, GitHub Code π [ENTERPRISE-STABLE]
- learn.microsoft.com: Introduction to using Azure Verified Modules for Terraform π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Enabling PostgreSQL flexible server logs and configuring a retention period using Terraform π [ENTERPRISE-STABLE]
- awstip.com: Deploying Azure Infrastructure with Terraform π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Import Existing Azure Resources into State (.tfstate) π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Deploy Azure App Service with Key Vault Secret Integration π [ENTERPRISE-STABLE]
- build5nines.com: What is Azure Private Link and How to Deploy with Terraform π [CASE-STUDY]
- thomasthornton.cloud: Writing reusable Terraform modules (azure) π [ENTERPRISE-STABLE]
- github.com/Azure/aztfexport π [ENTERPRISE-STABLE]
- learn.microsoft.com: Overview of Azure Export for Terraform π [ENTERPRISE-STABLE]
- learn.microsoft.com: Using Azure Export for Terraform in advanced scenarios π [ENTERPRISE-STABLE]
- spacelift.io: Azure Terraform Export: Importing Resources with Aztfexport π [ENTERPRISE-STABLE]
- github.com/Azure/terraform-azurerm-caf-enterprise-scale π [ENTERPRISE-STABLE]
- registry.terraform.io/modules/Azure/lz-vending π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Azure Landing Zones Accelerators for Bicep and Terraform. Announcing General Availability! π [ENTERPRISE-STABLE]
- blog.cloud63.fr: Landing Zone networking using Terraform π [ENTERPRISE-STABLE]
- github.com/kaysalawu/azure-network-terraform: Azure Network Architecture - Terraform Examples π π [ARCHITECTURE-GUIDE]
- build5nines.com: Deploying Hub-and-Spoke Network Topology in Microsoft Azure using Terraform π [ENTERPRISE-STABLE]
- registry.terraform.io/modules/Azure/avm-ptn-alz: ALZ Terraform Module π [ENTERPRISE-STABLE]
- Announcing Azure Terrafy and AzAPI Terraform Provider Previews π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Azure Terrafy β Import your existing Azure infrastructure into Terraform HCL π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Announcing AzAPI Dynamic Properties π [ENTERPRISE-STABLE]
- build5nines.com: Using AzAPI Terraform Provider Dynamic Properties Feature instead of jsonencode π [ENTERPRISE-STABLE]
- adamtheautomator.com: How to Build Infrastructure with Terraform in Azure DevOps π π [CASE-STUDY]
- faun.pub: Azure DevOps: Deploying Azure Resources using Terraform π [ENTERPRISE-STABLE]
- build5nines.com: Deploy Terraform using Azure DevOps YAML Pipelines π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Deploy Terraform using Azure DevOps π [ENTERPRISE-STABLE]
- ibrahims.medium.com: Azure Terraform Pipeline β DevOps π [ENTERPRISE-STABLE]
- registry.terraform.io/modules: azure-terraformer - azuredevops provider π [ENTERPRISE-STABLE]
- devblogs.microsoft.com/devops: Introduction to Azure DevOps Workload identity federation (OIDC) with Terraform π [ENTERPRISE-STABLE]
- medium.com/@antoine.loizeau: Add a switch to simplify Terraform debugging π [ENTERPRISE-STABLE]
- github.com/microsoft/terraform-provider-azuredevops/releases/tag/v1.0.0 π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Error: spawn terraform ENOENT when running Terraform in Azure DevOps Pipeline π [ENTERPRISE-STABLE]
- hashicorp.com: Announcing Azure Stack Hub Provider 1.0 π [ENTERPRISE-STABLE]
- medium.com/@mariusz_kujawski: Terraform for a Data Engineer π [ENTERPRISE-STABLE]
- github.com/Azure/terraform-azurerm-aks π [ENTERPRISE-STABLE]
- learnk8s.io/terraform-aks π π [ENTERPRISE-STABLE]
- itnext.io: How We Used Terraform to Create and Manage a HA AKS Kubernetes Cluster in Azure π [ENTERPRISE-STABLE]
- medium: Using Terraform with Azure β the right way π [ENTERPRISE-STABLE]
- github.com/kuhlman-labs/terraform-azurerm-landing-zone π [ENTERPRISE-STABLE]
- hashicorp.com: Build a Quick AKS Cluster the Easy Way with Terraform Cloud π π [ENTERPRISE-STABLE]
- build5nines.com: Terraform: Create an AKS Cluster π π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Building and deploying to an AKS cluster using Terraform and Azure DevOps with Kubernetes and Helm providers π [ENTERPRISE-STABLE]
- medium.com/@piyush.sachdeva055: Deploy AKS Cluster in Azure With Terraform π [ENTERPRISE-STABLE]
- thomasthornton.cloud: Deploying Azure AKS GitOps Flux extension with Terraform π [ENTERPRISE-STABLE]
- github.com/amitmavgupta/azure-terraform π [ENTERPRISE-STABLE]
- github.com/Azure-Samples/aks-platform-engineering Building a Platform Engineering Environment on Azure Kubernetes Service (AKS) π π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: How to deploy a production-ready AKS cluster with Terraform verified module π [CASE-STUDY]
- linode.com: Terraforming Kubernetes Series Introduction π [ENTERPRISE-STABLE]
- medium.com/@eoneoff: Installing Istio multicluster deployment with Terraform π [ENTERPRISE-STABLE]
- dev.to: Deploy Kubernetes Resources in Minikube cluster using Terraform π [ENTERPRISE-STABLE]
- medium: From AWS CloudFormation to Terraform: Migrating Apache Kafka π [ENTERPRISE-STABLE]
- qainsights.com: Deploy JMeter on AWS using Terraform π [ENTERPRISE-STABLE]
- github.com/infrahouse/terraform-aws-openvpn π [ENTERPRISE-STABLE]
- youtube: Terraform Tutorial for beginners | AWS Infrastructure as Code | Github Actions π π₯ π [CASE-STUDY]
- CDK for Terraform π π [ENTERPRISE-STABLE]
- hashicorp.com: GKE Cluster Setup with CDK for Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: CDK for Terraform Is Now Generally Available π [ENTERPRISE-STABLE]
- dev.to/aws-builders: Unleashing the Power of CDK and Terraform in Cloud Deployments π [ENTERPRISE-STABLE]
- graphviz.org π [ENTERPRISE-STABLE]
- edotor.net π [ENTERPRISE-STABLE]
- dreampuf.github.io/GraphvizOnline π [ENTERPRISE-STABLE]
- graphviz.online π [ENTERPRISE-STABLE]
- offensive-terraform.github.io: Offensive Terraform Modules π π [ENTERPRISE-STABLE]
- digitalocean.com: How To Build a Custom Terraform Module π [CASE-STUDY]
- thomasthornton.cloud: Writing reusable Terraform modules (azure) π [ENTERPRISE-STABLE]
- blog.devops.dev: Terraform Modules π [ENTERPRISE-STABLE]
- dev.to: Terraform Modules for Advanced Users π [ENTERPRISE-STABLE]
- blog.devops.dev: How to manage multiple environments with terraform with the use of modules? π [CASE-STUDY]
- betterprogramming.pub: Reusable EC2 Instances Using Terraform Modules π [ENTERPRISE-STABLE]
- github.com/terraform-aws-modules π [ENTERPRISE-STABLE]
- The Segment AWS Stack π [ENTERPRISE-STABLE]
- segmentio/stack π [ENTERPRISE-STABLE]
- Junos-terraform: JUNOS Terraform Automation Framework (JTAF) π [ENTERPRISE-STABLE]
- mitchellh/terraform-provider-multispace π [ENTERPRISE-STABLE]
- kyma-incubator/terraform-provider-kind: Terraform Provider for kind (Kubernetes IN Docker) π [ENTERPRISE-STABLE]
- github.com/circa10a/terraform-provider-mailform π [ENTERPRISE-STABLE]
- env0.com: How to Use Terraform Providers π [CASE-STUDY]
- hashicorp.com: Terraform 1.8 provider functions for AWS, Google Cloud, and Kubernetes π [ENTERPRISE-STABLE]
- github.com/tlkamp/terraform-provider-validation: Validation Provider π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform AWS Cloud Control Provider β Under the Hood π [ENTERPRISE-STABLE]
- infoq.com: Elastic Releases Terraform Providers for the Elastic Stack and Elastic Cloud π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Codify Management of Vault Enterprise Using Terraform π [ENTERPRISE-STABLE]
- hashicorp.com: Terraform AzureRM 3.0 Brings Enhanced Azure Function Support π [ENTERPRISE-STABLE]
- registry.terraform.io: Data Source: azurerm_ip_groups (new) π [ENTERPRISE-STABLE]
- registry.terraform.io/modules/hlokensgard/rbac-administrator π [ENTERPRISE-STABLE]
- prcode.co.uk: Terraform Code Quality π [ENTERPRISE-STABLE]
- github.com/terraform-linters/tflint π [ENTERPRISE-STABLE]
- learn.hashicorp.com: Enforce Policy with Sentinel π [ENTERPRISE-STABLE]
- github.com/GoogleCloudPlatform/terraformer π π [ENTERPRISE-STABLE]
- medium.com/@nanditasahu031: Terraformer β Generate Terraform Files from Existing Infrastructure π [ENTERPRISE-STABLE]
- Brainboard π π [ENTERPRISE-STABLE]
- terrascan π π [ENTERPRISE-STABLE]
- tfsec π π [ENTERPRISE-STABLE]
- Rover - Terraform Visualizer π π [ENTERPRISE-STABLE]
- hashicorp.com: Rover - Terraform Visualizer π [ENTERPRISE-STABLE]
- cloudify.co: Cloudify and Terraform Integration. Supercharge Your Terraform Templates π [ENTERPRISE-STABLE]
- cloudquery.io: Announcing CloudQuery Terraform Drift Detection π [ENTERPRISE-STABLE]
- run-x/opta: Opta - Supercharge DevOps on any cloud π [ENTERPRISE-STABLE]
- cncf.io: Introducing Opta: Terraform on Rails π [ENTERPRISE-STABLE]
- mineiros-io/terramate π [ENTERPRISE-STABLE]
- cycloidio/inframap: Inframap π π [ENTERPRISE-STABLE]
- bridgecrewio/AirIAM π [ENTERPRISE-STABLE]
- badarsebard/terraforge π [ENTERPRISE-STABLE]
- infracloud.io: 5 Tools to Auto-Generate Terraform Configuration Files π π [ENTERPRISE-STABLE]
- spacelift.io: 18 Most Useful Terraform Tools to Use in 2023 π [ENTERPRISE-STABLE]
- github.com/idoavrah/terraform-tui: TFTUI - The Terraform textual UI π [ENTERPRISE-STABLE]
- github.com/jamesw4/confirm-tfvars π [ENTERPRISE-STABLE]
- umeshtyagi829.medium.com: Secure Terrafrom IaC code using Checkov π [ENTERPRISE-STABLE]
- github.com/inkdrop-org/inkdrop-visualizer π [ENTERPRISE-STABLE]
- github.com/seal-io/tap: Terraform Advanced Patcher (TAP) π [ENTERPRISE-STABLE]
- github.com/RoseSecurity/Terramaid π [ENTERPRISE-STABLE]
- github.com/cloudposse/atmos π [ENTERPRISE-STABLE]
- github.com/leg100/pug: PUG π [ENTERPRISE-STABLE]
- hashicorp.com: Writing Terraform for unsupported resources π π [ENTERPRISE-STABLE]
- Kubestack: Terraform GitOps Framework π π [ENTERPRISE-STABLE]
- gruntwork.io π [ENTERPRISE-STABLE]
- terragrunt.gruntwork.io π [ENTERPRISE-STABLE]
- blog.gruntwork.io: Introducing: The Gruntwork Module, Service, and Architecture Catalogs π [ARCHITECTURE-GUIDE]
- medium: Terragrunt cheat sheet π [ENTERPRISE-STABLE]
- pie-r/terragrunt-vs-terraspace π [ENTERPRISE-STABLE]
- gruntwork-io/terragrunt-infrastructure-live-example π [ENTERPRISE-STABLE]
- medium.com/predictivehire: Why we should use Terraform and Terragrunt to manage Kubernetes (with example code) π [ENTERPRISE-STABLE]
- medium.com/@nanditasahu031: How to Start with Terragrunt π π [CASE-STUDY]
- infoq.com: Patcher, a Tool to Keep Updating Infrastructure as a Code π [ENTERPRISE-STABLE]
- Terraspace.cloud π [ENTERPRISE-STABLE]
- itnext.io: My Journey to HashiCorp Certified: Terraform Associate π [ENTERPRISE-STABLE]
- medium.com/bb-tutorials-and-thoughts: 250 Practice Questions For Terraform Associate Certification π [CASE-STUDY]
- tomwechsler/HashiCorp_Certified_Terraform_Associate π [ENTERPRISE-STABLE]
- AutomatizaciΓ³n de aplicaciones Spring Boot con Terraform, Ansible y GitHub Actions π [ENTERPRISE-STABLE]
- Teaser: Chapter 2 of Terraform Authoring and Operations Professional Study Guide π [ARCHITECTURE-GUIDE]
Kustomize¶
-
kustomize.io π π [ENTERPRISE-STABLE]
- Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into
kubectlasapply -k.- Kustomize traverses a Kubernetes manifest to add, remove or update configuration options without forking.
- It is available both as a standalone binary and as a native feature of kubectl.
- Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into
-
kubernetes.io: Introducing kustomize; Template-free Configuration Customization for Kubernetes π [ENTERPRISE-STABLE]
- Declarative Management of Kubernetes Objects Using Kustomize π [ENTERPRISE-STABLE]
- blog.tomarrell.com: Kustomize: Traefik v2.2 as a Kubernetes Ingress Controller π [ENTERPRISE-STABLE]
- Kubestack Gitops Framework π [ENTERPRISE-STABLE]
- 3 ways to customize off-the-shelf Helm charts with Kustomize - Kubernetes π [ENTERPRISE-STABLE]
- dex.dev: YAML Templating Solutions: Helm & Kustomize π [ENTERPRISE-STABLE]
- blog.stack-labs.com: Kustomize - The right way to do templating in Kubernetes π [ENTERPRISE-STABLE]
- opensource.com: Modify your Kubernetes manifests with Kustomize π [ENTERPRISE-STABLE]
- dev.to: Introduction to Kustomize - How to customize Kubernetes objects kubernetes π [CASE-STUDY]
- mirantis.com: Kustomize Tutorial: Creating a Kubernetes app out of multiple pieces π [CASE-STUDY]
- codefresh.io: Applied GitOps with Kustomize π [ENTERPRISE-STABLE]
- tech.aabouzaid.com: Set OpenAPI patch strategy for Kubernetes Custom Resources - Kustomize π [ENTERPRISE-STABLE]
- nakamasato.medium.com: Comparison between Helm and Kustomize for Kubernetes yaml management π [ENTERPRISE-STABLE]
- pauldally.medium.com: Kustomize Best Practices (Part 1) π [ENTERPRISE-STABLE]
- pauldally.medium.com: Kustomize Best Practices (Part 2) π [ENTERPRISE-STABLE]
- notmattlucas.com: Kubernetes Configuration with Kustomize π [ENTERPRISE-STABLE]
- medium.com/@nanditasahu031: How to Start with Kustomize β itβs Features π [CASE-STUDY]
- harness.io: Comparing Helm vs Kustomize π [ENTERPRISE-STABLE]
- nicolasbarlatier.hashnode.dev: Introduction Kubernetes and Kustomize: How to easily customize any resource configuration with Kustomize? π [CASE-STUDY]
- github.com/kostis-codefresh: How to Model Your Gitops Environments with kustomize π π [CASE-STUDY]
- dev.to: Kubernetes Kustomize Tutorial: A Beginner-Friendly Developer Guide! π [ARCHITECTURE-GUIDE]
- pauldally.medium.com: Kustomize Best Practices (part 3) π [ENTERPRISE-STABLE]
- levelup.gitconnected.com: Helm vs. Kustomize: Navigating Kubernetes Configuration Complexity π [ENTERPRISE-STABLE]
- devopscube.com/kustomize-tutorial: Kustomize Tutorial: Comprehensive Guide For Beginners π π [ARCHITECTURE-GUIDE]
- blog.devgenius.io: Kustomize β K8 manifest patching π [ENTERPRISE-STABLE]
- faun.pub: How to build a GitOps workflow with ArgoCD, Kustomize and GitHub Actions π [CASE-STUDY]
- techiescamp.com: Kubernetes Kustomize Crash Course π [ENTERPRISE-STABLE]
- itnext.io: Generating, transforming, and patching Kubernetes configuration with Kustomize π [ENTERPRISE-STABLE]
- Secretize π π [ENTERPRISE-STABLE]
- itnext.io: Helm Is Not Enough, You Also Need Kustomize π [ENTERPRISE-STABLE]
- harness.io: Comparing Helm vs Kustomize π π [ENTERPRISE-STABLE]
- nakamasato.medium.com: Comparison between Helm and Kustomize for Kubernetes yaml management π [ENTERPRISE-STABLE]
- chrisns/k8s-opa-boilerplate π [ENTERPRISE-STABLE]
Ansible¶
- k21academy.com: Ansible for Beginners | Overview | Architecture & Use Cases π π [ARCHITECTURE-GUIDE]
-
devopsinside.com: Is Kubernetes killing tools like Ansible? π [ENTERPRISE-STABLE]
- Kubernetes is not a replacement for ansible: Despite their overlapping functionality, it is important to note that Kubernetes is not a replacement for ansible. Both tools have their own strengths and use cases, and they can be used together to achieve different goals.
- Kubernetes and ansible can be used together: Kubernetes and ansible can be used together to complement each other. For example, ansible can be used to automate the provisioning and configuration of Kubernetes clusters, while Kubernetes can be used to manage the deployment and scaling of applications within those clusters.
- Kubernetes is not a replacement for ansible: Despite their overlapping functionality, it is important to note that Kubernetes is not a replacement for ansible. Both tools have their own strengths and use cases, and they can be used together to achieve different goals.
-
youtube playlist: Ansible Tutorial - by Infra Xpertzz π π [CASE-STUDY]
- ansible.com: What's new in Ansible Automation Platform 2: automation controller π [ENTERPRISE-STABLE]
- ansible.com: Automating Red Hat Satellite with Ansible π [ENTERPRISE-STABLE]
- galaxy.ansible.com: letsencrypt This collection contains a role for issuing ssl certificates from Let's Encrypt via dns or http-challenge
-
Foreman π [ENTERPRISE-STABLE]
- Ansible Modules to manage Foreman and Katello installations
- Foreman Ansible Modules (FAM) Ansible modules for interacting with the Foreman API and various plugin APIs such as Katello.
- RFC: Foreman Operations Ansible Collection
- theforeman.org: Updating Foreman inventory with system facts
- theforeman.org: Foreman 3.0 is here!
- Ansible Modules to manage Foreman and Katello installations
-
ansible.com π [ENTERPRISE-STABLE]
- docs.ansible.com π [ENTERPRISE-STABLE]
- dureka.co: What Is Ansible? π [ENTERPRISE-STABLE]
- Dzone: Part 2: Deploying Applications π [ENTERPRISE-STABLE]
- Dzone: 10 easy to use modules in ansible π [ENTERPRISE-STABLE]
- Dzone: Running Ansible at Scale π [ENTERPRISE-STABLE]
- Udemy.com: Ansible Essentials: Simplicity in Automation (Free Tutorial) π [CASE-STUDY]
- Deployment of Microservices in Cloud With Ansible π [ENTERPRISE-STABLE]
- opensource.com: How to install software with Ansible π [CASE-STUDY]
- opensource.com: Automate your container orchestration with Ansible modules for Kubernetes π π [ENTERPRISE-STABLE]
- opensource.com: A quickstart guide to Ansible π π [ARCHITECTURE-GUIDE]
- opensource.com: 7 things you can do with Ansible right now π [ENTERPRISE-STABLE]
- opensource.com: Integrate your calendar with Ansible to avoid schedule conflicts π π [ENTERPRISE-STABLE]
- opensource.com: My first day using Ansible π [ENTERPRISE-STABLE]
- siliconangle.com: Red Hat ties Ansible automation to Kubernetes cluster management π π [ENTERPRISE-STABLE]
- thenewstack.io: Red Hat Brings Ansible Automation to Kubernetes π π [ENTERPRISE-STABLE]
- openshift.com: Ansible and OpenShift: Connecting for Success π π [ENTERPRISE-STABLE]
- zdnet.com: ed Hat expands Ansible ready to run cloud programs π π [ENTERPRISE-STABLE]
- theregister.com: Juggling Ansible, OpenShift and K8s? This is for you: Red Hat couples automation to cluster management π [ENTERPRISE-STABLE]
- redhat.com: Ansible Essentials: Simplicity in Automation Technical Overview (Free Course) π π [ENTERPRISE-STABLE]
- opensource.com: 10 Ansible modules for Linux system automation c π [ENTERPRISE-STABLE]
- redhat.com: Renewing my thrill at work with Ansible π [ENTERPRISE-STABLE]
- opensource.com: Set up an Ansible lab in 20 minutes π [ENTERPRISE-STABLE]
- opensource.com: 4 lines of code to improve your Ansible play π [ENTERPRISE-STABLE]
- redhat.com: Demystifying Ansible for Linux sysadmins π π [ENTERPRISE-STABLE]
- redhat.com: Quick start guide to Ansible for Linux sysadmins π π [ARCHITECTURE-GUIDE]
- opensource.com: 10 ways Ansible is for everyone π π [ENTERPRISE-STABLE]
- ansible.com: Ansible Network Resource Modules: Deep Dive on Return Values π [ENTERPRISE-STABLE]
- linkedin.com: Ansible what is it and what not π [ENTERPRISE-STABLE]
- redhat.com: How to automate system reboots using the Ansible reboot module π [CASE-STUDY]
- developer.okta.com: Tutorial: Ansible and Account Automation with Okta π [CASE-STUDY]
- redhat.com: Got automation? Here's a quick guide to get you up to speed on Ansible π π [ARCHITECTURE-GUIDE]
- opensource.com: How Ansible got started and grew π [ENTERPRISE-STABLE]
- ansible.com: Announcing the Community Ansible 3.0.0 Package π π [ENTERPRISE-STABLE]
- toptechskills.com: Ansible Tutorials & Courses π π [CASE-STUDY]
- toptechskills.com: How to Speed Up Your Ansible Playbooks Over 600% π π [CASE-STUDY]
- opensource.com: 5 everyday sysadmin tasks to automate with Ansible π π [ENTERPRISE-STABLE]
- redhat.com: 8 steps to developing an Ansible role in Linux π π [ENTERPRISE-STABLE]
- ansible.com: Ansible whitepaper π [ENTERPRISE-STABLE]
- redhat.com: How to use Ansible to send an email using Gmail π [CASE-STUDY]
- redhat.com: How to use Ansible to configure a reverse proxy π π [CASE-STUDY]
- Ansible 3.3.0 released π [ENTERPRISE-STABLE]
- fedoramagazine.org: Using Ansible to configure Podman containers π π [ENTERPRISE-STABLE]
- acloudguru.com: Ansible vs Puppet: Which is right for you? π [ENTERPRISE-STABLE]
- redhat.com: Add a repo and install a package the Ansible way π [ENTERPRISE-STABLE]
- redhat.com: Introduction to RHEL System Roles π π [ENTERPRISE-STABLE]
- linuxtechlab.com: Ansible Tutorial: Introduction to simple Ansible commands π [CASE-STUDY]
- analyticsindiamag.com: Ansible vs Docker: A Detailed Comparison Of DevOps Tools π [ENTERPRISE-STABLE]
- redhat.com: 6 steps to automating code pushes with Ansible Automation Platform π π [ENTERPRISE-STABLE]
- redhat.com: 4 steps to create Linux users from a csv file with Ansible π [ENTERPRISE-STABLE]
- cyberciti.biz: How to define multiple when conditions in Ansible π [CASE-STUDY]
- dev.to: DevOps 101 : Introduction to Ansible π [ENTERPRISE-STABLE]
- redhat.com: How to set up and use Python virtual environments for Ansible π [CASE-STUDY]
- redhat.com: Deep dive into Ansible ad hoc commands π [ENTERPRISE-STABLE]
- redhat.com: How to install software packages with an Ansible playbook π [CASE-STUDY]
- getbetterdevops.io: Build Docker Images Using Ansible and Packer π [ENTERPRISE-STABLE]
- developers.redhat.com: Automate Red Hat JBoss Web Server deployments with Ansible π [ENTERPRISE-STABLE]
- redhat.com: How to create dynamic configuration files using Ansible templates π [CASE-STUDY]
- redhat.com: 16 AnsibleFest presentations for sysadmins π [ENTERPRISE-STABLE]
- opensource.com: How I keep my file folders tidy with Ansible π [ENTERPRISE-STABLE]
- developers.redhat.com: Four reasons developers should use Ansible π [ENTERPRISE-STABLE]
- opensource.com: How I keep my file folders tidy with Ansible π [ENTERPRISE-STABLE]
- vitux.com: How to speed-up an Ansible Playbook π π [CASE-STUDY]
- youtube: Ansible Automation | How to Secure and Protect Critical Information Playbooks Using Ansible Vault π₯ π [CASE-STUDY]
- opensource.com: 9 ways to learn Ansible this year π π [ENTERPRISE-STABLE]
- cloud.google.com: How to deploy the Google Cloud Ops Agent with Ansible π [CASE-STUDY]
- cloudbees.com: Getting Started Quickly With Ansible Ad Hoc Commands π [ENTERPRISE-STABLE]
- redhat.com: 8 ways to speed up your Ansible playbooks π [ENTERPRISE-STABLE]
- middlewareinventory.com: Ansible List Examples β How to create and append items to List π π [CASE-STUDY]
- middlewareinventory.com: Ansible Dictionary β How to create and add items to dict π [CASE-STUDY]
- middlewareinventory.com: How to use ansible with S3 β Ansible aws_s3 examples | Devops Junction π [CASE-STUDY]
- techbeatly.com: Ansible for Infrastructure Provisioning in AWS | Ansible Real Life Series - youtube π [ENTERPRISE-STABLE]
- redhat.com: How to create dynamic inventory files in Ansible π [CASE-STUDY]
- redhat.com: How to write a Python script to create dynamic Ansible inventories π [CASE-STUDY]
- redhat.com: How to write an Ansible plugin to create inventory files π [CASE-STUDY]
- dlford.io: Orchestrate Your Systems with Ansible Playbooks - How to Home Lab Part 10 π π [CASE-STUDY]
- learning-devops-tools-with-nandita.blogspot.com: Overview of Ansible and Ansible Playbooks π [ENTERPRISE-STABLE]
- blog.learncodeonline.in: Everything about Ansible Variables π π [ENTERPRISE-STABLE]
- blog.learncodeonline.in: Managing File Operations With Ansible π π [ENTERPRISE-STABLE]
- developers.redhat.com: How to install VMs and Ansible Automation Platform on Mac M1 π [CASE-STUDY]
- devopscube.com: How to Setup Ansible AWS Dynamic Inventory π [CASE-STUDY]
- ansible.com: Creating Custom Rules for Ansible Lint π [ENTERPRISE-STABLE]
- ansible.com: The Top 10 Ansible Blogs of 2022 π [ENTERPRISE-STABLE]
- tomsitcafe.com: Getting started with Ansible playbooks: more steps towards DevOps π [ENTERPRISE-STABLE]
- tomsitcafe.com: Conditional statements β making decisions in Ansible code π [ENTERPRISE-STABLE]
- tomsitcafe.com: How to implement and use handlers in Ansible code? π [CASE-STUDY]
- tomsitcafe.com: Configuration file blueprints: Jinja2 templates in the Ansible code π [ENTERPRISE-STABLE]
- tomsitcafe.com: Handling sensitive data with Ansible Vault: encrypting strings instead of files π [ENTERPRISE-STABLE]
- ansible.com: Kubernetes Meets Event-Driven Ansible π π [ENTERPRISE-STABLE]
- sayali.hashnode.dev: Day 56: Understanding Ad-hoc commands in Ansible π π [ENTERPRISE-STABLE]
- tomsitcafe.com: Letβs use a more flexible directory structure for an Ansible project π [ENTERPRISE-STABLE]
- tomsitcafe.com: Enhancing Ansible Automation: Exploring the Power of Ansible Semaphore, a Modern Open-Source GUI π [ENTERPRISE-STABLE]
- tomsitcafe.com: Mastering Ansible: Navigating the Most Common Errors and Mistakes π [ENTERPRISE-STABLE]
- tomsitcafe.com: Automating APIs with Ansible: A Comprehensive Guide π [ARCHITECTURE-GUIDE]
- medium.com/@Techie1: Networking tasks in production using Ansible π [ENTERPRISE-STABLE]
- medium.com/cloud-native-daily: Getting Started with Ansible: A Comprehensive Guide for DevOps Beginners π [ARCHITECTURE-GUIDE]
- community.ibm.com: Red Hat Ansible Automation Platform on IBM Z and IBM LinuxONE is generally available now! π [ENTERPRISE-STABLE]
- intellipaat.com: Ansible vs Kubernetes vs Docker π [ENTERPRISE-STABLE]
- redhat.com/sysadmin/ansible-lists-dictionaries-yaml: How to work with lists and dictionaries in Ansible π π [CASE-STUDY]
- github.com/naveensilver/Ansible π [ENTERPRISE-STABLE]
- ansible.ai π [ENTERPRISE-STABLE]
- redhat.com: Red Hat Ansible Lightspeed with IBM watsonx Code Assistant π [ENTERPRISE-STABLE]
- Semaphore UI π π [ENTERPRISE-STABLE]
- thenewstack.io: How to Put a GUI on Ansible, Using Semaphore π [CASE-STUDY]
- infraxpertzz.com: Deploying Custom Files with Jinja2 Template π π [ENTERPRISE-STABLE]
- jinja π π [ENTERPRISE-STABLE]
- docs.ansible.com: Developing Ansible modules π [ENTERPRISE-STABLE]
- techforce1.nl: Creating your first Ansible module π [ENTERPRISE-STABLE]
- linuxctl.com: Ansible - Interacting with external REST API π [ENTERPRISE-STABLE]
- steampunk.si: Let us give Ansible a REST π [ENTERPRISE-STABLE]
- redhat.com: Using Ansible to interact with web endpoints π [ENTERPRISE-STABLE]
- opensource.com: Using Ansible with REST APIs π [ENTERPRISE-STABLE]
- ansible.com: Automating your business application's REST API with Ansible π [ENTERPRISE-STABLE]
- youtube playlist: Ansible Tutorial - by Thetips4you π π₯ π [CASE-STUDY]
- youtube: Ansible for beginners - by XavkiEn π₯ π [ENTERPRISE-STABLE]
- youtube: Exercises / Monitoring : How to install node exporter π π₯ π [CASE-STUDY]
- Ansible for DevOps Examples π [ENTERPRISE-STABLE]
- github.com/k3s-io/k3s-ansible π π [ENTERPRISE-STABLE]
- github.com/PyratLabs/ansible-role-k3s π π [ENTERPRISE-STABLE]
- developers.redhat.com: Set up mod_cluster for Red Hat JBoss Web Server with Ansible π [ENTERPRISE-STABLE]
- middlewareinventory.com: Ansible Playbook Examples β Sample Ansible Playbooks | Devops Junction π [ENTERPRISE-STABLE]
- Ansible Collections π π [ENTERPRISE-STABLE]
- Amazon AWS Collection π π [ENTERPRISE-STABLE]
- Radware/radware-ansible: Radware Ansible Collection π [ENTERPRISE-STABLE]
- ansible.com: Fundamentals of Network Automation with Ansible Validated Content using the network.base collection π [ENTERPRISE-STABLE]
- redhat.com: Red Hat Ansible Automation Platform Enhancements and New Certified Ansible Content Collections Refine the Automation Experience to Drive Business Imperatives π [ENTERPRISE-STABLE]
- ansible.com: Red Hat Ansible Automation Platform 1.2 π [ENTERPRISE-STABLE]
- pypi.org: ansible-navigator π π [ENTERPRISE-STABLE]
- ansible.com: Introducing Ansible Automation Platform 2 π [ENTERPRISE-STABLE]
- redhat.com: From the datacenter to the edge: The open hybrid cloud vision for Red Hat Ansible Automation Platform 2 π [ENTERPRISE-STABLE]
- redhat.com: Redefining the possibilities of IT automation across your ecosystem with Red Hat partners π [ENTERPRISE-STABLE]
- crn.com: IBMβs Red Hat Reveals Ansible Automation Platform 2 Early Access π [ENTERPRISE-STABLE]
- devops.com: Red Hat Extends Scope of Ansible Automation Ambitions π [ENTERPRISE-STABLE]
- redhat.com: Red Hat Ansible Automation Platform 2 Drives Cloud-Native Automation and Helps Developers Become Automators π [ENTERPRISE-STABLE]
- venturebeat.com: Red Hat brings Ansible IT automation engine to Azure π [ENTERPRISE-STABLE]
- redhat.com: Red Hat Brings Industry-Leading Ansible Automation Platform to Microsoft Azure π [ENTERPRISE-STABLE]
- wraltechwire.com: Red Hat expands hybrid cloud efforts in Ansible deal with Microsoft Azure π [ENTERPRISE-STABLE]
- ansible.com: Automation services catalog, the newest addition to the Ansible Automation Platform π [ENTERPRISE-STABLE]
- List of Red Hat Supported Maintained Ansible Collections π π [ENTERPRISE-STABLE]
- opensource.com: 5 tips for choosing an Ansible collection that's right for you π [ENTERPRISE-STABLE]
- ansible.com: Announcing the Red Hat Enterprise Linux Certified Ansible Collection π π [ENTERPRISE-STABLE]
- youtube: Ansible Collections π π₯ π [ENTERPRISE-STABLE]
- docs.ansible.com: Working With Playbooks π [ENTERPRISE-STABLE]
- linuxtechi.com: How to Use Loops in Ansible Playbook π [CASE-STUDY]
- Ansible Let's Encrypt Collection π [ENTERPRISE-STABLE]
- redhat.com: 6 troubleshooting skills for Ansible playbooks π π [ENTERPRISE-STABLE]
- redhat.com: How to pass extra variables to an Ansible playbook π [CASE-STUDY]
- Dzone: Running Ansible Playbooks From Jenkins π [ENTERPRISE-STABLE]
- itnext.io: Ansible and Jenkins β automate your scritps π π [ENTERPRISE-STABLE]
- Ansible Tower π [ENTERPRISE-STABLE]
- Ansible Tower Docs π [ENTERPRISE-STABLE]
- Ansible AWX π [ENTERPRISE-STABLE]
- AWX Operator π [ENTERPRISE-STABLE]
- ansible.com/blog/topic/ansible-tower π [ENTERPRISE-STABLE]
- Red Hat Ansible Tower Monitoring: Using Prometheus + Node Exporter + Grafana π [ENTERPRISE-STABLE]
- linuxsysadmins.com: Install Ansible AWX on Kubernetes in 5 minutes π [ENTERPRISE-STABLE]
- steampunk.si: Managing infrastructure using Ansible Tower π [ENTERPRISE-STABLE]
- maquinasvirtuales.eu: Docker Swarm: Instalar Ansible AWX π [ENTERPRISE-STABLE]
- techsupportpk.com: Install Ansible AWX on CentOS, RHEL 7, 8 π [ENTERPRISE-STABLE]
- medium: Ansible AWX: from scratch to REST API (part 4 of 8) π [ENTERPRISE-STABLE]
- galaxy.ansible.com/geerlingguy/awx π π [ENTERPRISE-STABLE]
- AWX Ansible Collection: galaxy.ansible.com/awx/awx π [ENTERPRISE-STABLE]
- vagrant: ansible tower π [ENTERPRISE-STABLE]
- vagrant: centos-awx π [ENTERPRISE-STABLE]
- github.com/tom-256/ansible-awx-packer π [ENTERPRISE-STABLE]
- github.com/scorputty/packer-centos-awx π [ENTERPRISE-STABLE]
- github.com/jsmartin/ansible-tower-packer π [ENTERPRISE-STABLE]
- artifacthub.io: Helm Charts - AWX π [ENTERPRISE-STABLE]
- AWS Marketplace (AMIs): AWX/Tower π [ENTERPRISE-STABLE]
- Jenkins π [ENTERPRISE-STABLE]
- ansible.com: Fast vs Easy: Benchmarking Ansible Operators for Kubernetes π [ENTERPRISE-STABLE]
- Ansible Molecule π [ENTERPRISE-STABLE]
- jeffgeerling.com: Testing your Ansible roles with Molecule π [ENTERPRISE-STABLE]
- PDF: Practical Ansible Testing with Molecule π [ENTERPRISE-STABLE]
- opensource.com: Testing Ansible roles with Molecule π [ENTERPRISE-STABLE]
- medium.com: Test driven Development with Ansible using Molecule π [ENTERPRISE-STABLE]
- tomsitcafe.com: How to test Ansible code with Molecule π [CASE-STUDY]
- ansiblefordevops.com π [ENTERPRISE-STABLE]
- ansibleforkubernetes.com π π [ENTERPRISE-STABLE]
- redhat.com: The Automated Enterprise π [ENTERPRISE-STABLE]
- github.com/automateyournetwork/automate_your_network: Automate Your Network - John Capobianco - July 1st 2023 π [ENTERPRISE-STABLE]
- galaxy.ansible.com π [ENTERPRISE-STABLE]
- galaxy.ansible.com/geerlingguy π [ENTERPRISE-STABLE]
- redhat.com: A brief introduction to Ansible roles for Linux system administration π π [ENTERPRISE-STABLE]
- Ansible Role: Docker π π [ENTERPRISE-STABLE]
- Tronde/ansible-role-rhel-patchmanagement π [ENTERPRISE-STABLE]
- konstruktoid/ansible-hvault-inventory: Dynamic Ansible inventory using HashiCorp Vault SSH OTP and local password rotation π [ENTERPRISE-STABLE]
- medium.com/opstree-technology: Understanding Ansible: Helm diff plugin π π [ENTERPRISE-STABLE]
- docs.ansible.com: kubernetes.core.helm module β Manages Kubernetes packages with the Helm package manager π [ENTERPRISE-STABLE]
- docs.ansible.com: kubernetes.core.helm_plugin module β Manage Helm plugins π [ENTERPRISE-STABLE]
- https://github.com/jdauphant/awesome-ansible π [FOUNDATIONAL]
- https://github.com/awesome-devops/awesome-ansible π [FOUNDATIONAL]
- The Beginnerβs Guide to the Ansible Inventory π [ARCHITECTURE-GUIDE]
- Public Cloud Guides π π [ARCHITECTURE-GUIDE]
- Ansible to automate Microsoft Azure π [ENTERPRISE-STABLE]
- medium: AWS Configuration with Web Server in EC2 Using Ansible π [ENTERPRISE-STABLE]
- docs.ansible.com: kubernetes.core.k8s β Manage Kubernetes (K8s) objects π [ENTERPRISE-STABLE]
- adamtheautomator.com: How to Use the Ansible Kubernetes Module π [CASE-STUDY]
- galaxy.ansible.com/nginxinc/nginx_core π [ENTERPRISE-STABLE]
- nginx.com: Announcing the NGINX Core Collection for Ansible π [ENTERPRISE-STABLE]
- dynatrace.com: Achieve faster time to value by deploying thousands of OneAgents at once with Ansible (Preview) π [ENTERPRISE-STABLE]
- redhat.com: Using Ansible to deploy Microsoft SQL Server 2019 on Red Hat Enterprise Linux 8 π [ENTERPRISE-STABLE]
- oci-ansible-collection.readthedocs.io π [ENTERPRISE-STABLE]
- github.com/oravirt/ansible-oracle π [ENTERPRISE-STABLE]
- github.com/oravirt/ansible-oracle-modules π [ENTERPRISE-STABLE]
- oravirt.wordpress.com: Getting started with ansible-oracle π [ENTERPRISE-STABLE]
- oravirt.wordpress.com: Changes in ansible-oracle v1.2 π [ENTERPRISE-STABLE]
- github.com/abessifi/ansible-sqlplus π [ENTERPRISE-STABLE]
- stackoverflow.com: Ansible playbook to execute Oracle script π [ENTERPRISE-STABLE]
- stackoverflow.com: Running Oracle SQL scripts with Ansible playbook π [ENTERPRISE-STABLE]
- Ansistrano π [ENTERPRISE-STABLE]
- Capistrano π [ENTERPRISE-STABLE]
- opensource.com: How I use Ansible and anacron for automation π [ENTERPRISE-STABLE]
- opensource.com: Use anacron for a better crontab π [ENTERPRISE-STABLE]
Securityascode¶
-
blog.styra.com: Open Policy Agent: The Top 5 Kubernetes Admission Control Policies π [ENTERPRISE-STABLE]
- Trusted Repo
- Label Safety
- Privileged Mode
- Ingress
- Egress
- Trusted Repo
-
kyverno.io: Implementing your best practices is simple with kyverno π [ENTERPRISE-STABLE]
- Startup Probe
- Liveness Probe
- Readiness Probe
- Graceful shutdown - be able to handle a sigterm in kubernetes
- Startup Probe
-
searchitoperations.techtarget.com: Kubernetes policy project takes enterprise IT by storm π [ENTERPRISE-STABLE]
- amazon.com: Policy-based countermeasures for Kubernetes β Part 1 π [ENTERPRISE-STABLE]
- medium: Automate policies enforcement with Policy-as-Code π π [ENTERPRISE-STABLE]
- blog.gitguardian.com: What is Policy-as-Code? An Introduction to Open Policy Agent π [ENTERPRISE-STABLE]
- OPA Open Policy Agent π π [ENTERPRISE-STABLE]
- magalix.com: Integrating Open Policy Agent (OPA) With Kubernetes π π [ENTERPRISE-STABLE]
- fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA) π [ENTERPRISE-STABLE]
- PolicyHub CLI, a CLI tool that makes Rego policies searchable π π [ENTERPRISE-STABLE]
- blog.styra.com: Integrating Identity: OAUTH2 and OPENID CONNECT in Open Policy Agent π [ENTERPRISE-STABLE]
- blog.styra.com: Rego Unit Testing π [ENTERPRISE-STABLE]
- github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools π [ENTERPRISE-STABLE]
- itprotoday.com: Who Needs Open Policy Agent? π [ENTERPRISE-STABLE]
- blog.styra.com: Dynamic Policy Composition for OPA π [ENTERPRISE-STABLE]
- blog.styra.com: 5 OPA Deployment Performance Models for Microservices π [ENTERPRISE-STABLE]
- thenewstack.io: Getting Open Policy Agent Up and Running π [ENTERPRISE-STABLE]
- siegert-maximilian.medium.com: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent π [ENTERPRISE-STABLE]
- blog.styra.com: Policy-based infrastructure guardrails with Terraform and OPA π π [ENTERPRISE-STABLE]
- medium: Automated Manifest File Validation Using Open Policy Agent and GitHub Actions | Ravindu Sandeepa Rathugama π [ENTERPRISE-STABLE]
- thenewstack.io: Weaveworks Adds Policy as Code to Secure Kubernetes Apps (Magalix) π [ENTERPRISE-STABLE]
- fugue.co: Securing a Kubernetes pod with Regula and Open Policy Agent π [ENTERPRISE-STABLE]
- dev.to: Load external data into OPA: The Good, The Bad, and The Ugly π [ENTERPRISE-STABLE]
- inspektor.cloud: Evaluating open policy agent in rust using wasm π [ENTERPRISE-STABLE]
- medium.com/4th-coffee: What is Policy-as-Code? An Introduction to Open Policy Agent π [ENTERPRISE-STABLE]
- infracloud.io: Kubernetes Pod Security Policies with Open Policy Agent π [ENTERPRISE-STABLE]
- banzaicloud.com: Istio and Kubernetes ft. OPA policies π [ENTERPRISE-STABLE]
- fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA) π [ENTERPRISE-STABLE]
- medium: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent π [ENTERPRISE-STABLE]
- kubermatic.com: Using Open Policy Agent With Kubermatic Kubernetes Platform π [ENTERPRISE-STABLE]
- k8s-security-policies π [ENTERPRISE-STABLE]
- medium: Deploying Open Policy Agent (OPA) on a GKE cluster β Step by Step π [ENTERPRISE-STABLE]
- github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools π π [ENTERPRISE-STABLE]
- blog.styra.com: Using OPA with GitOps to speed Cloud-Native development π [ENTERPRISE-STABLE]
- medium.com/gitguardian: What is Policy-as-Code? An Introduction to Open Policy Agent π [ENTERPRISE-STABLE]
- blog.openshift.com: Fine-Grained Policy Enforcement in OpenShift with Open Policy Agent π π [ENTERPRISE-STABLE]
- compile OpenPolicyAgent policies into WebAssembly and run them on the edge π [ENTERPRISE-STABLE]
- hashicorp.com: Securing Infrastructure In Application Pipelines π [ENTERPRISE-STABLE]
- IBM IAM for AI Agents π [ENTERPRISE-STABLE]
- Fugue: Container and Kubernetes. Runtime infrastructure security π [ENTERPRISE-STABLE]
- IBM Vault 2.0 UI Enhancements and Reporting Improvements π [ENTERPRISE-STABLE]
- GitHub Code Security Risk Assessment: Free Vulnerability Scanning π [ENTERPRISE-STABLE]
- Web-Check π [ENTERPRISE-STABLE]
- Docker Hardened Images for Every Developer π [ENTERPRISE-STABLE]
- thenewstack.io: Yor Automates Tagging for Infrastructure as Code π [ENTERPRISE-STABLE]
- yor.io π [ENTERPRISE-STABLE]
- checkov.io π [ENTERPRISE-STABLE]
- aws.amazon.com: Policy-based countermeasures for Kubernetes β Part 1 π [ENTERPRISE-STABLE]
- MagTape π [ENTERPRISE-STABLE]
- Selefra: Selefra is an open-source policy-as-code software that provides analytics for multi-cloud and SaaS. π [ENTERPRISE-STABLE]
- Kyverno π π [ENTERPRISE-STABLE]
- venturebeat.com: How Nirmata plans to βconquer Kubernetes complexityβ with open source Kyverno π [ENTERPRISE-STABLE]
- neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno π π [ENTERPRISE-STABLE]
- kyverno.io: 56 sample policies π π [ENTERPRISE-STABLE]
- dev.to: Using Kyverno To Enforce EKS Best Practices π [ENTERPRISE-STABLE]
- aws.amazon.com: Easy as one-two-three policy management with Kyverno on Amazon EKS π π [ENTERPRISE-STABLE]
- kyverno.io: Mutating Resources π [ENTERPRISE-STABLE]
- squadcast.com: Kyverno - Policy Management in Kubernetes π π [ENTERPRISE-STABLE]
- neonmirrors.net: Exploring Kyverno: Part 3, Generation π [ENTERPRISE-STABLE]
- kyverno.io: Check deprecated APIs π π [ENTERPRISE-STABLE]
- kyverno.io: Generating resources into existing namespaces π [ENTERPRISE-STABLE]
- kyverno.io: Add Pod Proxies π [ENTERPRISE-STABLE]
- kyverno.io: Auto-Gen Rules for Pod Controllers π [ENTERPRISE-STABLE]
- kyverno.io: Require PodDisruptionBudget π [ENTERPRISE-STABLE]
- nirmata.com: Kubernetes Supply Chain Policy Management with Cosign and Kyverno π [ENTERPRISE-STABLE]
- neonmirrors.net: Exploring Kyverno: Introduction π π [ENTERPRISE-STABLE]
- nirmata.com: Introducing Kyverno 1.4.2: Trusted And More Efficient! π [ENTERPRISE-STABLE]
- searchitoperations.techtarget.com: CNCF policy-as-code project bridges Kubernetes security gaps π [ENTERPRISE-STABLE]
- Policy Reporter π π [ENTERPRISE-STABLE]
- sesin.at: Securing Kubernetes with Kyverno: How to Protect Your Users From Themselves by Ritesh Patel π [CASE-STUDY]
- movi.hashnode.dev: Simplify Kubernetes Cluster Management with Kyverno π [ENTERPRISE-STABLE]
- arun-sisodiya.medium.com: KyvernoβββA Kubernetes native policy manager (Policy as Code) π [ENTERPRISE-STABLE]
- dev.to: Default Kyverno Policies for OpenEBS π [ENTERPRISE-STABLE]
- cloud.redhat.com: Automate Your Security Practices and Policies on OpenShift With Kyverno π π [ENTERPRISE-STABLE]
- A Kyverno policy to block custom snippet configurations for Kubernetes Nginx ingress (CVE-2021-25742 π [ENTERPRISE-STABLE]
- kyverno.io: Restrict Image Registries π [ENTERPRISE-STABLE]
- dev.to: Using Kyverno Policies for Kubernetes Governance π [ENTERPRISE-STABLE]
- medium.com/compass-true-north: Governing Multi-Tenant Kubernetes Clusters with Kyverno π [ENTERPRISE-STABLE]
- medium.com/@haseebshaukat2: Kyverno β Policy Engine for Kubernetes | Muhammad Haseeb Shaukat π [ENTERPRISE-STABLE]
- youtube: The Rise of Kubernetes Policy Engine | Ep 57 π₯ π [ENTERPRISE-STABLE]
- medium.com/compass-true-north: Governing Multi-Tenant Kubernetes Clusters with Kyverno π [ENTERPRISE-STABLE]
- blog.sigstore.dev: How to verify container images with Kyverno using KMS, Cosign, and Workload Identity π [CASE-STUDY]
- medium.com/@glen.yu: Why I prefer Kyverno over Gatekeeper for native Kubernetes policy management π [ENTERPRISE-STABLE]
- appsecengineer.com: Kubernetes Policy Management with Kyverno π [ENTERPRISE-STABLE]
- Cloud Custodian π [ENTERPRISE-STABLE]
- Apolicy π [ENTERPRISE-STABLE]
- sysdig.com: Sysdig and Apolicy join forces to help customers secure Infrastructure As Code and automate remediation π [ENTERPRISE-STABLE]
- Configure Microsoft Entra for Increased Security π [ENTERPRISE-STABLE]
- Azure Network Security Perimeter Concepts π [ENTERPRISE-STABLE]
Iac¶
-
medium.com/globant: Infrastructure as Code using Kubernetes π [ENTERPRISE-STABLE]
- Config Connector (KCC) is a solution to maintain Cloud Resources as Infrastructure as Code. It is built as an Open Source initiative and runs on Kubernetes clusters. As such, it leverages YAML files to maintain and operate such resources.
- Config Connector has two versions: an Add-On for Google Kubernetes Engine (GKE) clusters and a manual installation for other Kubernetes distributions.
- Config Connector (KCC) is a solution to maintain Cloud Resources as Infrastructure as Code. It is built as an Open Source initiative and runs on Kubernetes clusters. As such, it leverages YAML files to maintain and operate such resources.
-
Platform Engineering Guide - 5 Key Use Cases of Internal Developer Platforms π [ARCHITECTURE-GUIDE]
- stackoverflow.blog: Infrastructure as code: Create and configure infrastructure elements in seconds π [ENTERPRISE-STABLE]
- invensislearning.com: Infrastructure as a Code Tutorial: How it Works, Types, and Best Practices π [CASE-STUDY]
- agileconnection.com: Infrastructure as Code: The Foundation of Effective DevOps π [ENTERPRISE-STABLE]
- cloudify.co: Infrastructure As Code β Is It REALLY Enough For DevOps? IAC DevOps Best Practices π π [ENTERPRISE-STABLE]
- bridgecrew.io: 5 tips for securely adopting infrastructure as code π [ENTERPRISE-STABLE]
- redhat.com: Pull vs. push in automated VM provisioning: What you need to know π [ENTERPRISE-STABLE]
- itnext.io: Platform-as-Code: how it relates to Infrastructure-as-Code and what it enables π [ENTERPRISE-STABLE]
- daffodilsw.medium.com: What is Infrastructure Automation in DevOps? π [ENTERPRISE-STABLE]
- thenewstack.io: IaC Cloud Misconfiguration Tools too Noisy without Context π [ENTERPRISE-STABLE]
- freecodecamp.org: Infrastructure as Code - Full Course ππ π [ENTERPRISE-STABLE]
- faun.pub: The best Infrastructure as Code tools for 2021 π [ENTERPRISE-STABLE]
- alpacked.io: Infrastructure as Code in DevOps π π [ENTERPRISE-STABLE]
- devops.com: Updating and Managing Infrastructure-as-Code (IaC) π [ENTERPRISE-STABLE]
- thenewstack.io: GUIs, CLI, APIs: Learn Basic Terms of Infrastructure-as-Code π [ENTERPRISE-STABLE]
- thenewstack.io: Infrastructure-as-Code: Increase Security, Scale Development π [ENTERPRISE-STABLE]
- thenewstack.io: Struggling with IT Staff Leaving? Try Infrastructure as Code π π [ENTERPRISE-STABLE]
- devopscube.com: Immutable Infrastructure Explained For Beginners π [ENTERPRISE-STABLE]
- medium.com/@bunnyshell: How to Overcome Infrastructure as Code (IaC) Challenges π [CASE-STUDY]
- dzone.com/articles: A Beginner's Guide to Infrastructure as Code π π [ARCHITECTURE-GUIDE]
- javacodegeeks.com: Infrastructure as Code: Best Tools For 2023 Included π [ENTERPRISE-STABLE]
- thenewstack.io: Infrastructure as Code or Cloud Platforms β You Decide! π [ENTERPRISE-STABLE]
- infoworld.com: 5 priorities that cut cloud costs and improve IT ops π [ENTERPRISE-STABLE]
- spacelift.io: Why Generic CI/CD Tools Will Not Deliver Successful IaC π [ENTERPRISE-STABLE]
- matt-rickard.com: Infrastructure as Code Will be Written by AI π [ENTERPRISE-STABLE]
- thenewstack.io: Achieve GitOps on Day One with IaC Automation π [ENTERPRISE-STABLE]
- medium.com/@faisalkuzhan: DAY_43/90 => Infrastructure as Code(IaC) π [ENTERPRISE-STABLE]
- build5nines.com: Benefits of Convention over Configuration for IaC Deployment Projects π [ENTERPRISE-STABLE]
- levelup.gitconnected.com: Short: Using IaC over Clickops π [ENTERPRISE-STABLE]
- thenewstack.io: Local Environment-as-Code: Is It Possible Yet? π [ENTERPRISE-STABLE]
- clickittech.com: Infrastructure as Code Tools, what are the best IaC tools? π π [ENTERPRISE-STABLE]
- intellipaat.com: Terraform vs Ansible: Key Differences Between Terraform and Ansible π π [ENTERPRISE-STABLE]
- clickittech.com: Terraform vs CloudFormation: The Final battle π π [ENTERPRISE-STABLE]
- k21academy.com: Terraform vs Ansible: Working, Difference, Provisioning π π [ENTERPRISE-STABLE]
- cncf.io: Cloudformation vs. Terraform: Which is better? π [ENTERPRISE-STABLE]
- cloudify.co: Ansible Vs Terraform π π [ENTERPRISE-STABLE]
- techcommunity.microsoft.com: Infrastructure as Code (IaC): Comparing the Tools π [ENTERPRISE-STABLE]
- spacelift.io: Terraform vs. Ansible : Key Differences and Comparison of Tools π [ENTERPRISE-STABLE]
- env0.com: Ansible vs Terraform: Choose One or Use Both? π [ENTERPRISE-STABLE]
- awstrainingwithjagan.com: Comprehensive Comparison of Top Infrastructure as Code (IaC) Tools π [ENTERPRISE-STABLE]
- Pulumi: Infrastructure as Code in Any Programming Language π [ENTERPRISE-STABLE]
- Terraform 1.15: Flexible Module Management, Deprecation Warnings, and Windows ARM64 Support π [ENTERPRISE-STABLE]
- IBM IAM for AI Agents π [ENTERPRISE-STABLE]
- Terraform Enterprise 2.0 π [ENTERPRISE-STABLE]
- Scale with Confidence Using Terraform: Better Cost Visibility, Stronger Governance, and Less Operational Overhead π [ENTERPRISE-STABLE]
- Terraform for Standardizing AWS Deployments π [ENTERPRISE-STABLE]
- Terraform & OpenTofu Skill for AI Agents π [ENTERPRISE-STABLE]
- Enterprise-Scale Azure Subscription Vending Using Azure Verified Modules (AVM) π [ENTERPRISE-STABLE]
- CloudCanvas - Diagramming for Cloud Infrastructure π [ENTERPRISE-STABLE]
- AZVerify: Bridging Azure Resources, Bicep Templates, and Diagrams with GitHub Copilot π [ENTERPRISE-STABLE]
- Azure Landing Zone IaC Accelerator Release Notes π [ENTERPRISE-STABLE]
- Terraform 2.0 in Practice: Using AI to Generate Infrastructure as Code π [ENTERPRISE-STABLE]
- Transitioning an Existing Azure Environment to the Azure Landing Zone Reference Architecture π [ARCHITECTURE-GUIDE]
- Terraform Provider for Google Cloud 7.0 is now GA π [ENTERPRISE-STABLE]
- AWS Organizations: The Key to Managing Your Cloud Infrastructure Effectively π [ENTERPRISE-STABLE]
- Terraform Azure Resource IPAM Module π [ENTERPRISE-STABLE]
- Ephemeral Values in Terraform π [ENTERPRISE-STABLE]
- Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager π [ENTERPRISE-STABLE]
- Announcing Public Preview of Terraform Export from the Azure Portal π [ENTERPRISE-STABLE]
- Announcing Public Preview of Terraform Export from the Azure Portal π [ENTERPRISE-STABLE]
- ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API π [ENTERPRISE-STABLE]
- Enhancing Infrastructure as Code Generation with GitHub Copilot for Azure π [ENTERPRISE-STABLE]
- Subscription Vending Implementation Guidance π [ENTERPRISE-STABLE]
- DevOps Roadmap for 2026 π [ENTERPRISE-STABLE]
- Awesome Sysadmin π [FOUNDATIONAL]
- Terraform Best Practices π [ENTERPRISE-STABLE]
- Enhanced Local IDE Experience for AWS Step Functions π [ENTERPRISE-STABLE]
- TerraSchema: Generate JSON Schema from Terraform Configurations π [ENTERPRISE-STABLE]
- Terraform Module Releaser GitHub Action π [ENTERPRISE-STABLE]
- The Maester - Terraform Module π [ENTERPRISE-STABLE]
- Azure Landing Zone IaC Accelerator π [ENTERPRISE-STABLE]
- Azure Landing Zone Technical Documentation π [ENTERPRISE-STABLE]
- Announcing General Availability of Terraform Azure Verified Modules for Platform Landing Zone (ALZ) π [ENTERPRISE-STABLE]
- Azure Landing Zone - Microsoft Cloud Adoption Framework π [ENTERPRISE-STABLE]
- The Beginnerβs Guide to the Ansible Inventory π [ARCHITECTURE-GUIDE]
- Terraform Provider for Azure IPAM π [ENTERPRISE-STABLE]
- AWS Well-Architected IaC Analyzer π [ENTERPRISE-STABLE]
- Checkmarx/kics π [ENTERPRISE-STABLE]
- gofireflyio/aiac π π [ENTERPRISE-STABLE]
- github.com/gofireflyio/aiac: AIaC π [ENTERPRISE-STABLE]
- The Definitive Guide to Importing Your Cloud Resources into IaC π [ARCHITECTURE-GUIDE]
- How Kubernetes Operators Fit into Platform Building and When Traditional IaC Isn't Enough π [ENTERPRISE-STABLE]
- The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece π [ENTERPRISE-STABLE]
- Azure Cloud Adoption Framework: Platform Landing Zone Implementation Options π [ENTERPRISE-STABLE]
- medium.com/nerd-for-tech: Kubernetes: Declaratively Deploying Infrastructure (IaC) π [ENTERPRISE-STABLE]
- cloud.google.com/config-connector π [ENTERPRISE-STABLE]
- youtube: Mitchell Hashimoto: The Inside Story of HashiCorp's IaC Journey | The IaC Podcast π₯ π [ENTERPRISE-STABLE]
- IaC and OpenShift Virtualization handshake (using Terraform for VMs on OCP) π [ENTERPRISE-STABLE]
- Building a FinOps-Ready Azure Landing Zone: Infrastructure Foundations for Cost Optimization π [ENTERPRISE-STABLE]
Crossplane¶
- crossplane.io π [ENTERPRISE-STABLE]
- Crossplane, a Universal Control Plane API for Cloud Computing π [ENTERPRISE-STABLE]
- Crossplane as an OpenShift Operator to manage and provision cloud-native services π [ENTERPRISE-STABLE]
- Crossplane: A Kubernetes Control Plane to Roll Your Own PaaS π [ENTERPRISE-STABLE]
- medium: Using Crossplane to Provision a Kubernetes Cluster in Google Cloud π [ENTERPRISE-STABLE]
- upbound/platform-ref-multi-k8s: Upbound's reference platform for multi-cloud Kubernetes with Crossplane π [ENTERPRISE-STABLE]
- codefresh.io: Using GitOps for Infrastructure and Applications With Crossplane and Argo CD π [ENTERPRISE-STABLE]
- itnext.io: Why do developers find Kubernetes so hard? π [ENTERPRISE-STABLE]
- faun.pub: Defining Infrastructure Declaratively with Crossplane π [ENTERPRISE-STABLE]
- itnext.io: GitOpsify Cloud Infrastructure with Crossplane and Flux π [ENTERPRISE-STABLE]
- symphony.is: Crossplane - The New Kid in Town π [ENTERPRISE-STABLE]
- Presentation: YAML your cloud π [ENTERPRISE-STABLE]
- askmeegs/yaml-your-cloud π [ENTERPRISE-STABLE]
Liquibase¶
- martinfowler.com π [ENTERPRISE-STABLE]
- wikipedia π [ENTERPRISE-STABLE]
- liquibase.org π [ENTERPRISE-STABLE]
- dzone: Introduction to Liquibase and Managing Your Database Source Code π [ENTERPRISE-STABLE]
- dzone: Managing Your Database With Liquibase and Gradle π [ENTERPRISE-STABLE]
- dzone: Executing Liquibase: 3 Use Cases π [ENTERPRISE-STABLE]
- percona: Database Schema Management Via Liquibase π [ENTERPRISE-STABLE]
- piotrminkowski.com: Blue-green deployment with a database on Kubernetes π π [ENTERPRISE-STABLE]
- Flyway π [ENTERPRISE-STABLE]
- dzone: Build a Spring Boot App With Flyway and Postgres π [ENTERPRISE-STABLE]
- liquibase.org: Liquibase vs. Flyway π [ENTERPRISE-STABLE]
- medium: Database version control β Liquibase versus Flyway π [ENTERPRISE-STABLE]
- docs.planetscale.com: The PlanetScale workflow π π [ENTERPRISE-STABLE]
- bytebase/bytebase π [ENTERPRISE-STABLE]
Chef¶
- chef.io π [ENTERPRISE-STABLE]
- learn.chef.io π [ENTERPRISE-STABLE]
Pulumi¶
- Pulumi π [ENTERPRISE-STABLE]
- Pulumi VS Terraform π [ENTERPRISE-STABLE]
- Pulumi Cloud Providers π [ENTERPRISE-STABLE]
- DRY (Donβt Repeat Yourself) on the cloud with Pulumi π [ENTERPRISE-STABLE]
- civo.com: Manage Kubernetes clusters using the Civo Pulumi provider π [ENTERPRISE-STABLE]
- build5nines.com: Beginnerβs Guide to Pulumi CI/CD Pipelines π [ARCHITECTURE-GUIDE]
- pulumi.com: From Terraform to Infrastructure as Software π [ENTERPRISE-STABLE]
- pulumi.com: Observability with Infrastructure as Code π [ENTERPRISE-STABLE]
- octopus.com: Create an AKS Cluster with Pulumi and Octopus Deploy π [ENTERPRISE-STABLE]
- build5nines.com: Beginnerβs Guide to Pulumi CI/CD Pipelines π [ARCHITECTURE-GUIDE]
- pulumi.com: Announcing Pulumi 3.0 π [ENTERPRISE-STABLE]
- devops.com: Pulumi Moves to Automate Cloud Infrastructure Provisioning π [ENTERPRISE-STABLE]
- thenewstack.io: The Next Step after DevOps and GitOps Is Cloud Engineering, Pulumi Says π [ENTERPRISE-STABLE]
- pulumi.com: From Kubernetes or Helm YAML π [ENTERPRISE-STABLE]
- travis.media: Pulumi Tutorial: Automate Kubernetes Deployments and Operations with this Complete Guide π [ARCHITECTURE-GUIDE]
- pulumi.com: Announcing the Pulumi REST API π [ENTERPRISE-STABLE]
- thenewstack.io: Pulumi Releases a Kubernetes Operator π [ENTERPRISE-STABLE]
- siliconangle.com: Pulumiβs new registry aims to ease sharing and reusing cloud infrastructure building blocks π [ENTERPRISE-STABLE]
- pulumi.com: Running Containers on ECS Fargate π [ENTERPRISE-STABLE]
- pulumi.com: Convert Your Terraform to Pulumi π [ENTERPRISE-STABLE]
- garden.io: Pulumi vs. Terraform: A comparison of Infrastructure as Code tools π [ENTERPRISE-STABLE]
- pulumi/kube2pulumi π [ENTERPRISE-STABLE]
- packetswitch.co.uk: Terraform is Good, but I Like Pulumi π [ENTERPRISE-STABLE]
Oauth¶
- rapidapi.com:What is OAuth2.0? π [ENTERPRISE-STABLE]
- curity.io: OAuth 2.0 Overview π [ENTERPRISE-STABLE]
- freecodecamp.org: How to Implement an OAuth2 Resource Server with Spring Security π [CASE-STUDY]
- curity.io: OpenID Connect Overview π [ENTERPRISE-STABLE]