Cloud management tagging tips, deployment and serverless case studies, databases, an interesting attack matrix and several new Kubernetes management tools this week.

From our sponsor, VictorOps

DevOps is all about continuous improvement and learning. So, to help out, VictorOps lays out a bunch of educational resources, podcast episodes, videos and more in the new learning library. Check it out:
https://go.victorops.com/devopsweekly-learning-library

News

A detailed look at Slack’s deployment process, covering batching deploys, fast/atomic deploys and staggered rollouts to catch issues quickly.
https://slack.engineering/deploys-at-slack-cd0d28c61701

A great piece of critique of PostgresSQL, with 10 specific issues based on a wealth of production experience.
https://medium.com/@rbranson/10-things-i-hate-about-postgresql-20dbab8c2791

An attack matrix for Kubernetes-based systems. A comprehensive breakdown of potential points of attack, useful when considering systematic defences.
https://www.microsoft.com/security/blog/2020/04/02/attack-matrix-kubernetes/

A post describing an approach to spinning up and down development environments on GCP using Google Cloud Functions and Terraform.
https://roobert.github.io/2020/04/04/GKE-Cluster-Nodepool-Scaler/

An introduction and case study looking at building serverless applications using the Serverless Framework for application management and deployment.
https://medium.com/ssense-tech/serverless-framework-in-the-real-world-bd962635fb50

A look at some of the use cases for tagging of resources in cloud deployments, including ownership, cost tracking, compliance regimes and more.
https://k9security.io/docs/guide-to-tagging-cloud-deployments/

A quick guide to service mesh and various tools in the space, looking at AWS App Mesh, Consul Connect, Istio, Linkerd and more.
https://thenewstack.io/an-exploratory-guide-to-the-service-mesh-platforms/

Tools

kpt is a toolkit to help you manage, manipulate, customize, and apply Kubernetes Resource configuration.
https://googlecontainertools.github.io/kpt/
https://github.com/GoogleContainerTools/kpt

Fleet is a new tool for managing fleets of Kubernetes clusters. It’s been designed specifically for edge use cases, where users might have thousands or more small clusters.
https://github.com/rancher/fleet

Pipx is a handy tool for installing and running Python applications in isolated environments, building on top of the Pip package manager.
https://pipxproject.github.io/pipx/
https://github.com/pipxproject/pipx

DevOps is all about continuous improvement and learning. So, to help out, VictorOps lays out a bunch of educational resources, podcast episodes, videos and more in the new learning library. Check it out:
https://go.victorops.com/devopsweekly-learning-library