Author: nim

[OPA Conftest] general-purpose policy engine

Posted on By nim No Comments on [OPA Conftest] general-purpose policy engine
[OPA Conftest] general-purpose policy engine

https://www.conftest.dev/ The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. Conftest is a utility to help you write tests (statically analyze) against structured configuration data. Using Conftest you can write tests for, + Terraform code, + Kubernetes Configurations + Dockerfile or any other…

Read More “[OPA Conftest] general-purpose policy engine” »

DevSecOps

[Monitoring] Understand percentiles in monitoring.

Posted on By nim No Comments on [Monitoring] Understand percentiles in monitoring.
[Monitoring] Understand percentiles in monitoring.

Trong ngữ cảnh giám sát và theo dõi (monitoring), p99 và p95 thường đề cập đến các giá trị phân vị (percentiles) trong phân phối dữ liệu. P99 và P95 là những chỉ số giúp đánh giá hiệu suất của một hệ thống. Chúng được dùng để xem xét độ trễ (thời gian phản hồi)…

Read More “[Monitoring] Understand percentiles in monitoring.” »

Grafana, Log, Monitor & Tracing

[Trivy] Protect your application by Trivy

Posted on By nim No Comments on [Trivy] Protect your application by Trivy
[Trivy] Protect your application by Trivy

1) Bacsic Trivy Trivy is a simple and comprehensive vulnerability scanner for containers and other artifacts. When you use –exit-code 0, you are telling Trivy to always return an exit code of 0, regardless of whether vulnerabilities are found or not. This means that even if Trivy detects vulnerabilities that match the specified severity, the…

Read More “[Trivy] Protect your application by Trivy” »

DevSecOps

[Golang] Writing a metrics exporter through Golang and Prometheus

Posted on By nim No Comments on [Golang] Writing a metrics exporter through Golang and Prometheus
[Golang] Writing a metrics exporter through Golang and Prometheus

Ờ bài này mình muốn tìn hiểu làm sao có thể view page để expose các metrics theo ý mình và sử dụng cho prometheus Sau đây mình sẽ thực hiện write theo video. 1) Using Demo of Prometheus Client. Đầu tiên chúng ta sẽ expose default golang metrics. file: main.go Bạn start chúng lên….

Read More “[Golang] Writing a metrics exporter through Golang and Prometheus” »

Golang

[DevSecOps] Dependency Check Basics and Vulnerabilities

Posted on By nim No Comments on [DevSecOps] Dependency Check Basics and Vulnerabilities
[DevSecOps] Dependency Check Basics and Vulnerabilities

NVD: National Vulnerability Database Imagine NVD as the ultimate library of computer vulnerabilities. It’s like Wikipedia, but for all the bad stuff that can happen to your computer. If a hacker finds a way to mess with a system, the NVD is where you’ll find all the deets. CVE: Common Vulnerabilities and Exposures CVE is…

Read More “[DevSecOps] Dependency Check Basics and Vulnerabilities” »

CI/CD, DevSecOps

[Kubernetes] Discover Health Check on K8s

Posted on By nim No Comments on [Kubernetes] Discover Health Check on K8s
[Kubernetes] Discover Health Check on K8s

Readiness Readiness configuration in Kubernetes is used to determine if a container within a pod is ready to accept traffic or serve requests. It ensures that a container is fully initialized and capable of handling requests before being exposed to any incoming traffic. This helps maintain the overall health and reliability of your application. Điều…

Read More “[Kubernetes] Discover Health Check on K8s” »

Kubernetes

[Fluent Bit / Datadog] How does Fluent bit collect logs and send them to multiple backend.

Posted on By nim No Comments on [Fluent Bit / Datadog] How does Fluent bit collect logs and send them to multiple backend.
[Fluent Bit / Datadog] How does Fluent bit collect logs and send them to multiple backend.

1) look into Fluent Bit. Đầu tiên chúng ta tìm hiểu về fluent bit. Bạn có thể coi video này để hiểu một chút về fluent Bit. Fluent Bit được việt bằng C nên là nó rất nhẹ. 1.1) Fluent Bit’s configuration file trong 1 main configuration file thì gồm 1 sections. Chúng ta sẽ…

Read More “[Fluent Bit / Datadog] How does Fluent bit collect logs and send them to multiple backend.” »

Fluent

For the love of god, stop using CPU limits on Kubernetes

Posted on By nim No Comments on For the love of god, stop using CPU limits on Kubernetes
For the love of god, stop using CPU limits on Kubernetes

Best practices for CPU limits and requests on Kubernetes Lets summarize: Tim Hockin (one of the original Kubernetes maintainers at Google) has recommended the same for years. What about memory limits and requests? Everything in this post is about CPU and not memory. Memory is different because it is non-compressible – once you give memory you can’t…

Read More “For the love of god, stop using CPU limits on Kubernetes” »

Kubernetes