The article is a blog post by Nathan Peck, a Senior Developer Advocate at AWS, about rethinking infrastructure as code from scratch. In the post, Nathan discusses his thoughts on the current state of infrastructure as code and how it could be improved. He suggests that the current tools and practices for infrastructure as code are too complex and error-prone, and proposes a new approach that focuses on simplicity and ease of use.
https://nathanpeck.com/rethinking-infrastructure-as-code-from-scratch/
https://nathanpeck.com/rethinking-infrastructure-as-code-from-scratch/
Nathan Peck
Rethinking infrastructure as code from scratch
Recently I’ve been thinking a lot about infrastructure complexity, and the current state of infrastructure as code.
This is problem space that many talented people are tackling.
This is problem space that many talented people are tackling.
Bash noscript to tail Kubernetes logs from multiple pods at the same time
https://github.com/johanhaleby/kubetail
https://github.com/johanhaleby/kubetail
GitHub
GitHub - johanhaleby/kubetail: Bash noscript to tail Kubernetes logs from multiple pods at the same time
Bash noscript to tail Kubernetes logs from multiple pods at the same time - johanhaleby/kubetail
A new type of DDoS attack has been discovered
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
The Cloudflare Blog
HTTP/2 Zero-Day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous…
👍1
A post looking at how to ensure platform and product teams work well together, by aligning around business metrics and using incidents as a learning opportunity.
https://firehydrant.com/blog/align-platform-and-product-engineering-teams-over-incidents/
https://firehydrant.com/blog/align-platform-and-product-engineering-teams-over-incidents/
Firehydrant
Align platform and product engineering teams over incidents
In this blog post, I'll talk about how to align platform and product engineering teams by implementing business value proxy metrics and using incidents to inform them.
A discussion of opinionated infrastructure and platform engineering. The importance of golden paths and guardrails, and some discussion of the importance of frictionless onboarding.
https://redmonk.com/videos/opinionated-infrastructure-platform-engineering-for-productivity-golden-paths-and-guardrails/
https://redmonk.com/videos/opinionated-infrastructure-platform-engineering-for-productivity-golden-paths-and-guardrails/
RedMonk
Opinionated Infrastructure: Platform Engineering for Productivity. Golden Paths and Guardrails
Discover how Golden Paths revolutionize software development in this episode of Opinionated Infrastructure. Unveiling the challenges faced by the industry, James Governor emphasizes the need for platform teams to simplify complexity, optimize workflows, and…
Build your cloud asset inventory and break down your cost at the resource level 💰
https://github.com/tailwarden/komiser
https://github.com/tailwarden/komiser
GitHub
GitHub - tailwarden/komiser: Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources…
Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide! - tailwarden/komiser
The article discusses how to use Kustomize and Helm together to manage Kubernetes manifests in a declarative and dynamic way. It shows how to use the helmChartInflationGenerator feature of Kustomize to integrate Helm charts with Kustomize overlays.
https://medium.com/@brent.gruber77/the-power-of-kustomize-and-helm-5773d0f4d95e
https://medium.com/@brent.gruber77/the-power-of-kustomize-and-helm-5773d0f4d95e
Medium
The Power of Kustomize and Helm
If you are new to Kubernetes, one of the first things you might do after securing your cluster, setting up your local kubectl config and…
Bridge the gap between security and development teams by sharing valuable context on common web application threats. Check out 5 common threats to address together here:
https://sthwk.com/common-web-threats
https://sthwk.com/common-web-threats
DevOps.com
Communicating Common Web App Security Threats to Developers
Safeguarding applications and a sound security posture requires security and developer teams to have an understanding of common threats.
Comprehensive comparison for k8s authentication https://www.tremolosecurity.com/post/kubernetes-authentication-comparing-solutions
www.tremolo.io
Kubernetes Authentication - Comparing Solutions
Compare multiple Kubernetes authentication options: OpenUnison, KeyCloak, Dex, and Pinniped. This post deploys each with common enterprise requirements, including manifests with step-by-step instructions for each project. .
A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and CLI.
https://github.com/mogenius/punq
https://github.com/mogenius/punq
GitHub
GitHub - mogenius/punq: A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and CLI.
A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and CLI. - mogenius/punq
Good talk about security problems that can be caused of using opensource in you company.
https://www.youtube.com/watch?v=vU2rkVRuuTc
https://www.youtube.com/watch?v=vU2rkVRuuTc
YouTube
AWS re:Inforce 2022 - Open-source software supply chain: Your weakest link (Checkmarx) (DEM-204-S)
The concept of shared security responsibility is increasingly applicable to application security. Security teams safeguard the environments in which applications run, and developers are responsible for the security within applications. Because about 80–95…
👍2❤1👎1
2023_final_report_sodr.pdf
16.1 MB
Become available State of DevOps Report by DORA/Google Cloud 2023 year
https://cloud.google.com/devops/state-of-devops
https://cloud.google.com/devops/state-of-devops
💩1
The article explains how to configure Fluentd, a log aggregator, with Loki, a log analysis system, to collect and visualize JFrog Platform service logs.
https://medium.com/@dmitrey.kazin/loki-fluentd-analyzing-jfrog-platform-services-logs-71e0c5942c25
https://medium.com/@dmitrey.kazin/loki-fluentd-analyzing-jfrog-platform-services-logs-71e0c5942c25
Medium
Loki & Fluentd: Analyzing JFrog Platform Services Logs
In this piece, we’ll explore the ins and outs of configuring Fluentd with Grafana Loki to streamline JFrog Platform service logs. Plus…
Blogpost shows how to use Kubernetes features and best practices to build a resilient and fault-tolerant application that can handle any disruption without downtime.
https://medium.com/devops-dev/how-to-achieve-zero-downtime-application-with-kubernetes-ba52fdea9a9b
https://medium.com/devops-dev/how-to-achieve-zero-downtime-application-with-kubernetes-ba52fdea9a9b
Medium
How to Achieve Zero-Downtime Application with Kubernetes
I’ve worked on on-premised and managed Kubernetes clusters for more than seven years. What I can say is that containers have drastically…