DEVOPS WEEKLY ISSUE #548 - 27th June 2021
A couple of posts looking at the Twelve Factor App and back at the ensuring influence of Heroku. Also several Kubernetes policy-related posts featuring Open Policy Agent and Kyverno for different use cases.
StackHawk sponsors Devops Weekly
Get ready for some GraphQL! Tune in this Tuesday, June 29 at 9 AM PT for an automated GraphQL security testing learning lab. Register:
https://sthwk.com/graphql-learninglab
News
The Twelve Factor App methodology is 10 years old. But how does it hold it to modern application needs? This post explores each of the factors.
https://codersociety.com/blog/articles/twelve-factor-app-methodology
A post on the need to watch out for the pitfall of counterfactuals when analyzing incidents, with good examples of potential issues.
https://www.michaelnygard.com/blog/2021/06/counterfactuals-are-not-causality/
We’re definitely seeing higher and higher levels of abstraction when it comes to cloud services, but the user interface for developers is still key. A post considering this issue and the influence of Heroku.
https://redmonk.com/sogrady/2021/06/23/aws-heroku/
The Kyerno policy engine for Kubernetes can be used as a mutating webhook as well as a validating one, which opens up several use cases. This post looks at ensuring pull secrets are available in new namespaces and podspecs.
https://medium.com/hepsiburadatech/how-i-tackle-docker-hub-rate-limiting-policy-with-a-policy-engine-kyverno-ea263ea95035
A post on getting Gatekeeper violation information from your Kubernetes cluster into Prometheus and Grafana for improved visibility.
https://itnext.io/expose-open-policy-agent-gatekeeper-constraint-violations-with-prometheus-and-grafana-6b7ac92ea07f
Tools
An online editor and visualisation tool, along with a built-in tutorial, for writing Kubernetes network policies.
https://editor.cilium.io/?id=s3WhlNQCdjA4UGOG
Rocky Linux is a new Linux Operating System designed to be a drop-in replacement for CentOS, operating in the same manner CentOS did previously as a downstream project.
https://rockylinux.org
https://github.com/rocky-linux
Kube Karp is a handy tool with a specific purpose, to add a floating virtual IP to Kubernetes cluster nodes to make load balancing easy.
https://github.com/immanuelfodor/kube-karp