2 minute read

Lots of tools this week, and only a few posts, plus a few slide decks from last weeks QCon event in London. I’ve spotted lots of conversations recently about the cross-over (or not) between Serverless and the Cloud Native communities, if you spot any good posts please point me in their direction.

From our sponsor, VictorOps

Being on-call sucks. To make it better, sign up for the free webinar, “How to Make On-Call Suck Less”, to learn 5 simple steps you can take to improve the on-call experience and become a more efficient DevOps team:
http://try.victorops.com/devopsweekly/making-on-call-suck-less

News

Keynote talk from QCon London this week, on mature practices for microservices. Independent releases, loosely coupled teams, experimentation and devops.
https://speakerdeck.com/sarahjwells/qcon-london-2019-mature-microservices-and-how-to-operate-them

My talk from the Security Transformation track at QCon London this last week, all about parallels between where infrastructure as code was 10 years ago, and a desire to move security policy into code now.
https://speakerdeck.com/garethr/a-continuation-of-devops-policy-as-code

Two related posts on the relationship between serverless and Kubernetes that position them at different parts of the same stack.
https://medium.com/adobetech/serverless-microservices-and-service-mesh-oh-my-cd7903bd499d
https://medium.com/adobetech/why-i-a-serverless-developer-dont-care-about-your-containers-40c08d36aee4

eBPF is a Linux Kernel level observability feature that’s seeing more widespread adoption as tools are built atop it. The post explains what it is and contains some sample eBPF programs.
https://sematext.com/blog/linux-kernel-observability-ebpf/

An interesting post on the relationship between increasing the rate of change with more deployments, and the resulting stability of the system. The post explores what it actually takes to improve stability without sacrificing speed.
https://m.subbu.org/taming-the-rate-of-change-439e3dccbb5d

A little bit of a rant, but this post looks at the perils of IAM, and identity provision in general, to lock you in to specific tools or services.
https://forrestbrazeal.com/2019/02/18/cloud-irregular-iam-is-the-real-cloud-lock-in/

Jobs

Senior Devops Engineer @ Google, via Citrusbyte, CA Bay Area, $180,000 – $225,000 Citrusbyte is working with Google to build a DevOps team and has the ability to give a few individuals the opportunity to work for Google. You will work with the Google Cloud team to help onboard high-profile and strategic Google accounts to GCP. You’ll work with modern DevOps tools like Terraform, Kubernetes, and GCP and implement practices such as those from the Site Reliability Handbook.
https://citrusbyte.applytojob.com/apply/DIZpovyqjC?source=DevopsWeekly

Tools

Talos is a modern Linux distribution for Kubernetes that provides a number of capabilities optimised for a clustered environment and with no concept of host level access.
https://github.com/autonomy/talos

Keptn is a framework for shipping and running cloud-native applications. It’s deployed and run on top of a Kubernetes cluster and brings deployment pipelines, blue/green deployments and other higher-level integrations.
https://keptn.sh/

The Interplanetary Docker Registry is a Docker registry which supports the v2 registry API but is backed by IPFS, which is a global, versioned, peer-to-peer filesystem.
https://github.com/miguelmota/ipdr

Kraken is another take on a Docker registry, this one using a peer-to-peer system to distribute images across a large number of nodes quickly.
https://eng.uber.com/introducing-kraken/
https://github.com/uber/kraken

Being on-call sucks. To make it better, sign up for the free webinar, “How to Make On-Call Suck Less”, to learn 5 simple steps you can take to improve the on-call experience and become a more efficient DevOps team:
http://try.victorops.com/devopsweekly/making-on-call-suck-less

Updated: