Documentation, application firewalls, container automation, platform as a service, securing email and more this week. Something of a smorgasbord. Just a note too that next week’s’ issue of Devops Weekly will likely be a bit later than usual as it will be coming direct from San Francisco.

Sponsor

Like DevOps? Register for All Day DevOps - a FREE online conference this October, offering 100 DevOps-focused sessions across six different tracks. Learn more & register:
http://bit.ly/2wLKpbV

Sponsored

Lessons learned while writing The DevOps Handbook

In a recent webinar, Gene Kim, co-author of The Phoenix Project, shared the top insights he discovered while co-authoring The DevOps Handbook. Read about the DevOps best practices he shared. As a bonus, you’ll also get lessons learned from Dynatrace’s own DevOps transformation – 26 major releases per year and 170 production deployments.
http://ow.ly/q22H30fm5Wh

News

A detailed practical look at email security, covering TLS, DMARC, SPF and DKIM covering why and how to implement these features.
https://www.ncsc.gov.uk/guidance/email-security-and-anti-spoofing

A neat approach to using Nix to make sharing scripts easier, using nix-shell and specifying the dependencies in the shebang line.
https://compiletoi.net/share-scripts-that-have-dependencies-with-nix/

A handy collection of the presentations from the recent Moby summit. Covers updates on everything from containerd, BuildKit, LinuxKit, Notary and more.
https://blog.mobyproject.org/moby-summit-los-angeles-recap-a41e6acf81f8

A series of posts looking at using a PaaS from the perspective of a single application written in Java. Explores the basic functionality, potential for lockin and the marketplace of services around Cloud Foundry.
http://www.codingthearchitecture.com/2017/09/27/paas_for_java_developers_part_1.html
http://www.codingthearchitecture.com/2017/09/28/paas_for_java_developers_part_2.html
http://www.codingthearchitecture.com/2017/09/29/paas_for_java_developers_part_3.html

Some good tips for automating container image building, and ensuring you create tags and metadata which will make using the images later easier.
https://container-solutions.com/tagging-docker-images-the-right-way/

An useful looking project to produce benchmarks for container orchestrators. The presentation has a few examples and a good explanation of the rationale.
https://docs.google.com/presentation/d/12s7nkblG7iey5dIF4K7tvVNbP8jCdTCEHuC6mIqx98k/mobilepresent
http://cnbm-co.cloudnative.sh/

An interesting history of query languages, looking at the rise of NoSQL and more recently how more databases are adopting SQL again.
https://blog.timescale.com/why-sql-beating-nosql-what-this-means-for-future-of-data-time-series-database-348b777b847a

A blog post looking at improving the security of a web site using a web application firewall and other techniques. A good starting place if you’re not familiar with the various components.
https://appsecbloke.ghost.io/adventures-in-waf/

Useful post on an approach to improving documentation by focusing on user stories and modularity.
https://opensource.com/article/17/9/modular-documentation

CNCF - Cloud Native Computing Foundation

Free Webinar - Cloud Native Apps from Development to Production October 12, Online

Learn about the advantages and elements of a cloud-native approach, and how GitLab is making it simpler to deploy cloud-native applications to production using Kubernetes.
https://goo.gl/fsSpPE

KubeCon + CloudNativeCon - Join leading Kubernetes, Docker, and Cloud Native technologists, December 6-8, in Austin for a broad range of technical sessions on the cloud native ecosystem. We sold out in Berlin and are excited to see thousands of you from the community join us, this time in Austin!
http://goo.gl/wbdqve

Tools

Kubesh is a handy tool for anyone managing several Kubernetes clusters. It allows for spawning new shells with different Kubernetes contexts.
https://medium.com/@lestrrat/handling-multiple-kubernetes-clusters-using-kubesh-a7e2a1606bfa
https://github.com/lestrrat/kubesh

Vespa is a new open source engine for executing and serving computations over large data sets in real time. It allows you to write and persist any amount of data, and execute high volumes of queries over the data which typically complete in tens of milliseconds.
http://vespa.ai/

Like DevOps? Register for All Day DevOps - a FREE online conference this October, offering 100 DevOps-focused sessions across six different tracks. Learn more & register:
http://bit.ly/2wLKpbV