DevOps & Infrastructure — Useful Sites

Certbot

2026-10-18T00:00:00Z

The EFF client that obtains and renews Let's Encrypt certificates; the site gives exact commands once you pick your web server and OS. Unlike lightweight clients such as acme.sh, it can edit nginx and Apache configuration itself.

https://certbot.eff.org/

Flame Graphs

2026-10-18T00:00:00Z

Brendan Gregg's page on the flame graph visualisation: how to read one, the CPU/memory/off-CPU variants, generation tools and talks. You learn from its creator how to show profiler output as a stack tree instead of a flat list.

https://www.brendangregg.com/flamegraphs.html

Floci

2026-10-18T00:00:00Z

A local AWS emulator for development and CI that needs no account or token; the AWS SDK, CLI and Terraform simply point at port 4566. Its difference from LocalStack is that it aims to be a drop-in image swap without feature gates or authentication.

https://floci.io/floci/

iximiuz Labs

2026-10-18T00:00:00Z

Hands-on labs and challenges teaching Linux, containers, Kubernetes and networking in real VMs inside the browser. Unlike articles that only explain, each lesson comes with a running environment.

https://labs.iximiuz.com/

Kubernetes Production Best Practices

2026-10-18T00:00:00Z

A checklist to review before running Kubernetes in production: resource limits, health checks, networking, security and observability. Unlike general tutorials it is framed as 'check this before going live'.

https://learnkube.com/production-best-practices

Kubernetes The Hard Way

2026-10-18T00:00:00Z

Kelsey Hightower's guide to bootstrapping a Kubernetes cluster by hand, component by component, without automation. It exposes the certificates, etcd and API server details that installers hide, making it the standard route to understanding cluster internals. It differs from installers by showing the steps they hide.

https://github.com/kelseyhightower/kubernetes-the-hard-way

post-mortems

2026-10-18T00:00:00Z

A collection of real post-mortems of outages and system failures published by companies. Unlike general DevOps lists it focuses only on incident write-ups, useful for learning from failures and for interviews.

https://github.com/danluu/post-mortems

Ansible

2026-09-18T00:00:00Z

Configuration management and automation that provisions servers with YAML playbooks. Unlike Puppet and Chef, it needs no agent on the target and works over SSH.

https://www.ansible.com

Argo

2026-09-18T00:00:00Z

A suite of Kubernetes-native workflow and GitOps continuous-delivery tools (Argo CD, Workflows). Unlike CI servers such as Jenkins, it runs inside the cluster and treats Git as the single source of truth, continuously syncing cluster state to the repo.

https://argoproj.github.io

Awesome Actions

2026-09-18T00:00:00Z

A list of ready actions for GitHub Actions, automating your workflow. Unlike the Marketplace it is curated, grouping proven actions by use.

https://github.com/sdras/awesome-actions

Awesome Ansible

2026-09-18T00:00:00Z

A list of roles and resources for Ansible, the Python-based IT configuration tool. Unlike Puppet and Chef, it works over SSH with no agent installed on the target machine.

https://github.com/ansible-community/awesome-ansible

Awesome Backstage

2026-09-18T00:00:00Z

A resource list for Backstage, building internal developer portals. Unlike general DevOps lists, it gathers plugins, deployment examples and write-ups for this Spotify-born portal.

https://github.com/shano/awesome-backstage

Awesome CDK

2026-09-18T00:00:00Z

A resource list for the AWS CDK, defining infrastructure with real code. Unlike Terraform, you write infrastructure in general-purpose languages such as TypeScript or Python instead of HCL, and it compiles to CloudFormation.

https://github.com/kolomied/awesome-cdk

Awesome Kubernetes

2026-09-18T00:00:00Z

A list of tools, tutorials and production experience for the Kubernetes ecosystem. Unlike the official docs it gathers community tools and real-world patterns together.

https://github.com/ramitsurana/awesome-kubernetes

Awesome Nix

2026-09-18T00:00:00Z

A list of tools, libraries and guides for the Nix package manager and NixOS. Unlike general Linux lists it focuses on reproducible, declarative configuration.

https://github.com/nix-community/awesome-nix

Awesome OpenTofu

2026-09-18T00:00:00Z

A resource list for OpenTofu, the open-source fork of Terraform. Unlike Terraform, it stays under an open-source (MPL) licence at the Linux Foundation; it was born when HashiCorp moved to the BSL in 2023.

https://github.com/virtualroot/awesome-opentofu

Awesome Prometheus

2026-09-18T00:00:00Z

A list of exporters and resources for Prometheus, the open-source monitoring system. Unlike push-based monitoring it pulls metrics from targets; the list gathers exporters, dashboards and tools.

https://github.com/roaldnefs/awesome-prometheus

Awesome Splunk

2026-09-18T00:00:00Z

A resource list for Splunk, the log-search and monitoring platform. Unlike lists for open-source stacks such as ELK or Loki, it focuses on the commercial Splunk ecosystem — apps, SPL queries, add-ons.

https://github.com/sduff/awesome-splunk

Awesome Terraform

2026-09-18T00:00:00Z

A list of modules and resources for Terraform, managing infrastructure as code. Unlike OpenTofu lists, it centres on HashiCorp’s original tool and its older, broader module ecosystem.

https://github.com/shuaibiyy/awesome-terraform

Chaos Mesh

2026-09-18T00:00:00Z

A cloud-native, Kubernetes-integrated chaos-engineering (fault-injection) platform. Unlike Chaos Monkey, which only kills instances, you declare faults such as network latency, disk errors and clock skew as Kubernetes resources.

https://github.com/chaos-mesh/chaos-mesh

Cloudflare

2026-09-18T00:00:00Z

Infrastructure offering CDN, DNS, DDoS protection and edge computing in one platform. Unlike separate services it unites them in one dashboard with a generous free tier.

https://www.cloudflare.com/

Earthly

2026-09-18T00:00:00Z

A build tool with a syntax blending Dockerfile and Makefile, giving the same result locally and in CI. Unlike a plain Makefile every step is isolated in a container; the project is no longer actively maintained, so factor that into new setups.

https://earthly.dev

Harbor

2026-09-18T00:00:00Z

A private container-image registry with security scanning and access control, a CNCF graduated project. Unlike Docker Hub, it runs on your own infrastructure and scans images for vulnerabilities before release.

https://goharbor.io

Helm

2026-09-18T00:00:00Z

A package manager that packages and deploys Kubernetes applications as charts. Unlike plain YAML manifests, it adds templating, values files for environment differences and release rollback.

https://helm.sh

JitPack

2026-09-18T00:00:00Z

Makes GitHub repos that don’t publish jars usable directly as dependencies. Unlike publishing to Maven Central, no registration step is needed — it builds a tag and serves it as a package.

https://jitpack.io

K9s

2026-09-18T00:00:00Z

A fast, interactive terminal UI for managing Kubernetes clusters. Instead of typing kubectl commands one by one, you move through resources by keyboard and jump straight into logs and shells.

https://k9scli.io

Kubernetes

2026-09-18T00:00:00Z

The official site of the open-source system that deploys, manages and heals containers at scale. Unlike Docker Compose it scales across machines and self-heals; in exchange the learning and operating costs are high.

https://kubernetes.io

OpenTofu

2026-09-18T00:00:00Z

A community-driven open-source fork of Terraform that runs the same configurations. Unlike Terraform it stays under an open (MPL) licence at the Linux Foundation and adds its own features such as state encryption.

https://opentofu.org

Pants

2026-09-18T00:00:00Z

A build system that scales to large, multi-language monorepos (originated at Twitter). Compared with Bazel it is friendlier to the Python ecosystem and lighter to configure, since it infers dependencies from source.

https://www.pantsbuild.org/

Portainer

2026-09-18T00:00:00Z

A self-hosted tool that manages Docker and Kubernetes environments through a visual UI. Instead of the command line you manage containers, stacks and logs from a panel — for watching several environments in one place.

https://www.portainer.io

Prometheus

2026-09-18T00:00:00Z

An open-source monitoring system for metrics collection and alerting, with a time-series database. Unlike push-based systems it pulls metrics from targets and queries them with PromQL.

https://prometheus.io

Terraform

2026-09-18T00:00:00Z

HashiCorp’s tool to define and provision infrastructure as code, managing cloud resources declaratively. Unlike CloudFormation it is not tied to one cloud; it has been BSL-licensed since 2023 (IBM bought HashiCorp in 2025; the licence did not change), with OpenTofu as the openly licensed fork.

https://www.terraform.io

CNCF Sertifikasyon

2026-08-26T20:53:20Z

Kubernetes certifications through CKA, CKAD and CKS. Unlike cloud provider certificates they are vendor-neutral, and the exam happens at a terminal — not multiple choice, but tasks solved on a live cluster.

https://www.cncf.io/training/certification/

Cronmaster

2026-08-21T20:53:20Z

A self-hosted web interface for cron jobs that renders expressions in readable form and keeps a run log. Against `crontab -e` it shows the next run time and the last output, which makes silently failing jobs visible.

https://github.com/fccview/cronmaster

Crontab Generator

2026-08-21T20:53:20Z

Builds a cron expression from a form and states in words when it will fire. Against crontab.guru it runs the other way: instead of decoding an expression, it produces one from the schedule you describe.

https://crontab-generator.org/

FromLatest

2026-08-21T20:53:20Z

Analyses a Dockerfile, explains what happens layer by layer and suggests improvements. Against hadolint it is visual and states why each rule exists, which makes it usable for learning to write Dockerfiles rather than only linting them.

https://www.fromlatest.io/

K8s YAML Generator

2026-08-21T20:53:20Z

Generates Kubernetes manifests from a form, explaining each field beside it. Against copying from the docs you leave with a valid manifest and pick up what the fields mean on the way.

https://k8syaml.com/

ShellCheck

2026-08-21T20:53:20Z

A static analyser for shell scripts that finds unquoted variables, wrong test syntax and portability traps. Against `bash -n` it checks meaning rather than syntax, so it catches the script that runs and misbehaves.

https://www.shellcheck.net/

YAMLlint

2026-08-21T20:53:20Z

A YAML validator that surfaces indentation and quoting errors and prints the parsed document back. Against a JSON validator it catches YAML’s actual trap: indentation that silently produces the wrong structure.

https://www.yamllint.com/

Njalla

2026-08-19T16:10:10Z

Registers the domain in its own name on your behalf, so you do not appear in WHOIS. Unlike a privacy proxy the legal ownership sits with them, which makes it a question of trust.

https://njal.la/