Several good posts this week with an architecture theme, along with posts on Kubernetes tooling, BPF, sharing Grafana dashboards and more.

StackHawk sponsors Devops Weekly

Planetly saved weeks of work by implementing StackHawk instead of building an internal ZAP service. See how:
https://sthwk.com/plantely-picks-stackhawk

News

A detailed discussion of why it’s a bad idea to treat an event broker as a database, even with strong consistency guarantees.
https://blog.swim.ai/brokers-arent-databases

A post coining the term PAGNI, for things you probably are going to need to implement, or that benefit you to have early, like automated deployment, continuous integration, mobile kill switches and more.
https://simonwillison.net/2021/Jul/1/pagnis/

A good primer on BPF, taking the angle of helping add observability using BPF to your own software.
https://brendangregg.com/blog/2021-07-03/how-to-add-bpf-observability.html

A set of best practices for anyone using Helm with Kubernetes. Tips on documentation, dependencies, labels, testing and secrets and more.
https://codersociety.com/blog/articles/helm-best-practices

Grafana supports sharing reusable dashboards, and this post contains some interesting examples covering everything from Splunk to Elixir and Kubernetes to GitHub.
https://grafana.com/blog/2021/06/22/grafana-dashboard-showcase-visualizations-for-prometheus-home-energy-usage-github-and-more/

A tongue-in-cheek post on emulating the design of 30 year old software using modern multi-language, multi-service, architecture.
https://blog.davetcode.co.uk/post/21st-century-emulator/

Tools

Kubewarden is a new entry into the policy engine space for Kubernetes. Policies are written in existing programming, as long as they can be compiled to webassembly.
https://www.kubewarden.io

DuckDB is an open source in-process SQL database management system. Lots of interesting use cases and packages available for various programming languages.
https://duckdb.org
https://github.com/duckdb/duckdb

Ever wanted to distribute APT packages publicly, or without having to set up a repository infrastructure? This plugin allows for using a standard OCI container registry for package distribution.
https://github.com/AkihiroSuda/apt-transport-oci

Leapp is a local tool for managing cloud resources, keeping the credentials encrypted locally and provisioning time-limited credentials for management when needed.
https://github.com/Noovolari/leapp