File systems, serverless patterns, security journeys, GitHub Actions tips and the overlap between tools and devops culture. Lots to dive into this week.

From our sponsor, VictorOps

Learn how to modernize your approach to incident management and slash MTTA/MTTR in the latest webinar from VictorOps + Splunk:
https://go.victorops.com/devopsweekly-modernized-incident-management

News

A nice set of talks on devops culture from the recent Puppetize event. Several good discussions of the overlap between technical practices and developer adoption.
https://puppet.com/blog/the-evolution-of-devops-culture-sessions-from-puppetize-pdx

If you’ve started experimenting with GitHub Actions then you’ll likely find something of interest in this 24 post series. Using the GitHub Script action caught my eye in particular.
https://www.edwardthomson.com/blog/github_actions_advent_calendar.html

I’m a fan of asking the question “what does infrastructure mean to you?” because it always raises different viewpoints. This post is a good example, looking at infrastructure as code from a wider definition of infrastructure.
https://sysadvent.blogspot.com/2019/12/day-24-expanding-on-infrastructure-as.html

A nice collection of common AWS Serverless architecture patterns, covering gateways, quesing, proxies and more.
https://serverlesspatterns.io/

An interesting post proposing a model for thinking about operational incidents.
https://lorinhochstein.wordpress.com/2019/08/25/the-gamma-knife-model-of-incidents/

Mainly a personal story of encountering and then adopting devops practices for security, but it’s interesting to think back how you first came across some of the terms and approaches in your career too.
https://medium.com/cloud-security/my-history-of-devsecops-58defb149804

Tools

kf is a CLI tool for Knative which provides a cloud foundry-like deployment workflow. Just push your application code and the platform will build and run it.
https://github.com/google/kf

Chubaofs is a distributed file system and object storage service for cloud native applications. It supports multi-tenancy, a POSIX-compatible and mountable filesystem as well as the S3 object storage interface.
https://github.com/chubaofs/chubaofs

Static analysis of infrastructure as code is looking like a hot topic for 2020. Checkov is a new tool which scans cloud infrastructure provisioned using Terraform and detects security and compliance misconfigurations.
https://github.com/bridgecrewio/checkov

Learn how to modernize your approach to incident management and slash MTTA/MTTR in the latest webinar from VictorOps + Splunk:
https://go.victorops.com/devopsweekly-modernized-incident-management