SRE Hamster

Контейнеры Kubernetes: процессы Linux под капотом 🔍 Ключевая концепция: Контейнеры — не виртуальные машины, а изолированные процессы Linux с ограниченными ресурсами. ▫️ Механизмы изоляции: - Namespaces (PID, сеть, IPC, mount) → виртуализация системных ресурсов - Cgroups → контроль CPU, памяти, дискового I/O - OverlayFS → эффективное управление слоями образов ▫️ Роль Kubernetes: - Абстракция над н…

🔥 SLA vs SLO: Главное, что путают даже профи ❌ Классическая ошибка: «Давайте сделаем SLA между командами!» — фраза, после которой SRE плачут в уголке. 🧩 Чем отличаются: - SLA (Service Level Agreement) — юридический договор с клиентом. Нарушил? Штрафы/компенсации 💸 - SLO (Service Level Objective) — внутренняя цель команды. Превысили? Заморозка релизов, но не суд 🎯 ⚡️ Пример: - *SLA*: «Простой >1 ч…

The latest edition of Technology Radar — Volume 30 The themes are: - AI-assisted software development teams - Open-ish source licenses - Dragging pull requests closer to proper continuous integration - Emerging architecture patterns for large language models (LLMs) #study #radar

Defining clear Incident Severity levels is a key component to an efficient Incident Management process that helps Engineering teams quickly respond to outages and mitigate customer impact. Operating an online platform with multiple nines of availability is a complex task, modern websites depend on thousands to hundreds of thousands of individual moving parts all of which need to work correctly in…

With the upcoming deprecation and subsequent removal of Pod Security Policies (PSPs) in Kubernetes, the time is near to find suitable alternatives. Those alternatives, it seems clear at present anyway, will need to be sourced from outside the Kubernetes project itself as there will be no replacement provided (edit: Pod Security Admission is the new, albeit incomplete, successor). The two leading…

Beyla is a vendor agnostic, eBPF-based, OpenTelemetry application auto-instrumentation tool, which lets you easily get started with Application Observability. eBPF is used to automatically inspect application executables and the OS networking layer, allowing us to capture essential application observability events for HTTP/S and gRPC services. From these captured eBPF events, we produce OpenTelem…

Robusta KRR (Kubernetes Resource Recommender) is a CLI tool for optimizing resource allocation in Kubernetes clusters. It gathers pod usage data from Prometheus and recommends requests and limits for CPU and memory. This reduces costs and improves performance. Link #observabilty #tools

Slow Down! Rate Limiting Deep Dive Now, why should you care about rate limiting? Well, consider a situation where your API is hit with a massive number of requests in a short span. This could be due to a surge in user traffic, a glitch causing repeated requests, or even an attempt to overwhelm your system using DDOS attack. Without rate limiting, your system could get overwhelmed, leading to slow…

Best Practices for Java Apps on Kubernetes - Piotr's TechBlog In this article, you will read about the best practices for running Java apps on Kubernetes. Most of these recommendations will also be valid for other languages. However, I’m considering all the rules in the scope of Java characteristics and also showing solutions and tools available for JVM-based apps. Some of these Kubernetes recomm…

Grafana Beyla eBPF-based auto-instrumentation of HTTP/HTTPS/GRPC Go services, as well as HTTP/HTTPS services written in other languages (intercepting Kernel-level socket operations as well as OpenSSL invocations). #tools #beyla #observability

Technology Radar #29 The themes are: - AI-assisted software development - How productive is measuring productivity? - A large number of LLMs - Remote delivery workarounds mature Radar #radar

Technology Radar #28 The themes are: - The meteoric rise of practical AI - Accessible accessibility - Lambda quicksand - Engineering rigor meets analytics and AI - To declare or program? Radar #radar