DEVOPS WEEKLY ISSUE #541 - 9th May 2021

Quite a few KubeCon inspired posts this week, including several Kubernetes-related tools.

StackHawk sponsors Devops Weekly

Tune into ZAPCon After Hours this Tuesday at 8 am PT to learn how to include automated security testing in your builds with ZAP
http://sthwk.com/zapcon-3

News

Are developer portals (like those powered by Backstage) an anti-pattern? This post argues yes.
https://www.lastweekinaws.com/blog/developer-portals-are-an-anti-pattern/

The full playlist of talks from last week’s GitOps Con event with case studies and deep dive technical sessions.
https://www.youtube.com/playlist?list=PLXOML2VBdIo7xEp8Bo9kFB-d6tTlHK5Fk

An interesting post on hosting SQLite databases on static hosting, in this case GitHub pages. SQlite databases are just files, and the post shows how to compile SQLite itself to WASM for serving.
https://phiresky.github.io/blog/2021/hosting-sqlite-databases-on-github-pages/

AWS CDK now supports Java, allowing for native deployment tooling for another ecosystem. This post demonstrates deploying a Java app to Lambda using CDK.
https://aws.amazon.com/blogs/opensource/packaging-and-deploying-aws-lambda-functions-written-in-java-with-aws-cloud-development-kit/

Pyston is an alternative Python runtime (technically a fork of CPython) that purports to be 30% faster for common workloads. Originally developed at Dropbox, Pyston is now an open source project.
https://blog.pyston.org/2021/05/

Jobs

Gitpod.io is looking for senior engineers helping to build out our SRE team.

Want to work in open source and fully-remote with some of the world’s most talented K8s and developer tools engineers? You are obsessed with DevX and automating our workflows? We pioneered the concept of dev-environments-as-code and provision automated and ready-to-code development environments that blend in your existing workflow. We’d love to hear from you.
https://www.gitpod.io/careers/

Tools

Pixie is an observability stack for Kubernetes applications. It provides dashboards and a handy CLI tool, and doesn’t require complex instrumentation.
https://px.dev
https://github.com/pixie-labs/pixie

DazedAndConfused is a tool for helping identify dependency confusion attacks, with support for a wide range of different package managers.
https://github.com/salesforce/DazedAndConfused

kcp is a prototype of a Kubernetes API server that is not a Kubernetes cluster. If you’re interested in Kubernetes-like APIs but for other tools this might be interesting to watch.
https://github.com/kcp-dev/kcp

Pinniped is the easy, secure way to log in to your Kubernetes clusters, including support for OpenID Connect.
https://pinniped.dev