The aim of observability in a system is to gain deep insights into its internal state and behavior to facilitate troubleshooting, understanding, and improving its performance and reliability. In this post, I would like to focus on gathering and visualizing metrics that allow us to answer the following questions: How is the system performing? Are there any trends or patterns in the system behavior? Do we have any traffic/error anomalies? How are individual components of the system interacting with each other? RED (Rate, Errors, Duration) method provides a comprehensive view of component ..read more

Kubernetes Container Networking Interface We know all the container solutions that work with containers like rkt, Kubernetes, docker solve the networking challenges in kind of the same way and requires to configure networking between them like Kubernetes. So, We create a single standard approach that everyone can follow. We take all the ideas from different solutions and move all the networking portions of it into a single program or code. And since this is for the bridge network we call it Bridge. We created a program or script that performs all the required tasks to get the container at ..read more

Monitoring is crucial for ensuring the stability, performance, and availability of your Django applications. In this article, we’ll explore how to set up monitoring using Prometheus and Grafana, two powerful tools that provide deep insights into the behavior of your application. We will also use Docker Compose for more efficient deployment, but you may choose to install both of the tools manually. Why Monitoring Matters Before diving into the technical details, let’s understand why monitoring is essential. Monitoring helps you: Detect Issues Early: Identify potential problems before the ..read more

Pod-to-pod Communication within a Kubernetes ClusterIntroduction Kubernetes has revolutionized the way we deploy, manage, and scale containerized applications. At the heart of Kubernetes lies its networking model, which enables seamless communication between various components within a cluster. In this article, we’ll look into the mechanisms employed by Kubernetes for pod-to-pod communication, exploring its networking plugins, DNS resolution, service discovery, network policies, and monitoring tools. Understanding the Kubernetes Networking Model Kubernetes abstracts away the complexities ..read more

MySQL Galera Cluster is an excellent solution for high availability and database workload distribution. In this article, we will provide a step-by-step guide on how to create a MySQL Galera Cluster. Galera Cluster is a distributed database system where several MySQL servers work synchronously to provide database services, ensuring uninterrupted operation even if one server fails. 1. Determining Requirements Before starting the MySQL Galera Cluster installation, make sure you have the following components: - At least three MySQL servers - Three independent IP addresses - Ensure that each s ..read more

In the ever-evolving landscape of Kubernetes and container orchestration, security remains a top priority for DevOps professionals and system administrators. Helm, the package manager for Kubernetes applications, has become an indispensable tool for managing and deploying applications in a scalable and efficient manner. As organizations leverage Helm for orchestrating complex deployments, ensuring the integrity and authenticity of Helm charts becomes paramount. In this blog post, we’ll delve into the crucial practice of signing Helm charts using GPG (GNU Privacy Guard) keys and explore the si ..read more

Prerequisites You must perform this action from root account. You have a Microsoft Azure account and we will copy these and save for later use. Tenant ID Client ID Client Secret Subscription ID Step1: Configure your terminal with AKS cluster and run below command kubectl create namespace vaultkubens vault. #it will make vault your default namespace Step2: Login to azure portal i.e. portal.azure.com Step 3: Select Azure Active Directory and select Properties Step 4: Copy the Tenant ID that we can below name and save it in a new place with TENANT_ID. Step 5: From the side na ..read more

Introduction: As organisations started migrating their applications to Kubernetes, the need for secure communication becomes paramount. SSL/TLS certificates play a crucial role in ensuring encrypted and authenticated communication between services. However, managing certificates across multiple services and environments can be challenging. This is where Cert-Manager, a popular Kubernetes add-on, comes to the rescue. In this blog, we will explore what Cert-Manager is, its benefits, and provide step-by-step installation instructions to get you started. What is Cert-Manager? Cert-Manager is ..read more

If your organization using multiple AWS accounts, you probably know URL’s like https://d-XXX.awsapps.com/start/#/ where you could login with your identity provider and and get credentials for AWS account youu need. Yeah…that’s Enterprise baby! But what if that account list is a bit long…what if each of 268 accounts has more than one role?! What if you want to switch between them or sync credentials for multiple? DevOps Pass AI tries to simplify it a bit for you. Load AWS profiles from SSO First of all it allows you to import all that profiles to your ~/.aws/profiles file. If you ..read more

Introduction One of the changes in the latest Kubernetes version, 1.30 (Uwubnetes) is the transition from SPDY to websocket for some of the kubectl commands. Most of the updates get most of the attention, but this is no less important. Understanding SPDY: Google created SPDY to improve HTTP by speeding up webpage load times and enhancing security with a session layer. It allowed multiple data streams to be sent simultaneously, prioritized request values, and optimized communication by compressing headers. However, SPDY was deprecated in 2016 and replaced by HTTP/2, which is more advanced. Ther ..read more