DEVOPS WEEKLY ISSUE #499 - 19th July 2020
Learning from indecent response, cloud lift and shift, continuous delivery design patterns and some good tips and discussion of operations this week.
env0 sponsors Devops Weekly
Do you have an automated maintenance mode set up for your application and API? No matter how highly available your infrastructure might be, everyone should. Check out Omry’s blog post on how to easily build one using terraform (including all the code!)
https://www.env0.com/devops-maintnence-mode
News
The fundamental importance of learning from incidents in building resilient systems is often hard to fully understand when fighting to fix issues. This presentation neatly summarises a bunch of recent research.
https://www.adaptivecapacitylabs.com/blog/2020/07/16/presentation-findings-from-the-field/
A good post on migrating to the cloud via a lift and shift strategy. When is this the best choice, and what do you need to do to make it work in the long term.
https://info.acloud.guru/resources/the-lift-and-shift-shot-clock-cloud-migration
A presentation on the impact of uncertainty on operating systems. Elasticity, scalability, devops practices, playbooks; lots of good operations topics covered.
https://www.scalefactory.com/events/webinars/2020/04/16/operating-under-uncertainty/
What is SRE? This post discusses the evolution of SRE, the different component parts, popular team structures and how to get started.
https://www.firehydrant.io/blog/what-is-sre/
A tutorial on using Conftest and Open Policy Agent to test Dockerfiles for common security problems.
https://blog.madhuakula.com/dockerfile-security-checks-using-opa-rego-policies-with-conftest-32ab2316172f
A set of patterns for designing continuous delivery pipelines. Configuration in code, separating build and release, the importance of audit trails and more useful tips.
https://www.singlestoneconsulting.com/blog/7-pipeline-design-patterns-for-continuous-delivery/
The question of whether you should directly call one Lambda function from another comes up regularly in Serverless architecture conversations. This post has some tips why this isn’t always a good idea and when to avoid.
https://theburningmonk.com/2020/07/are-lambda-to-lambda-calls-really-so-bad/
A discussion of the benefits of structured logging, with a good Python and Elasticsearch example.
https://medium.com/hiredscore-engineering/logging-lets-do-it-right-41d568d3bfcd
Tools
Terraform CDK allows for writing Terraform code using Python or Typescript, rather than HCL.
https://github.com/hashicorp/terraform-cdk
If you’ve ever just wanted to make regularly running a shell script easier to do on Kubernetes then the shell operator is worth taking a look at.
https://github.com/flant/shell-operator