Posts this week on monitoring (with posts on scaling Prometheus and the relationship between testing and observability), Docker usage tips, modern Unix tools, hardening ubernetes and more.
StackHawk sponsors Devops Weekly
ICYMI ZAP Creator and Project Lead Simon Bennetts recently unveiled ZAP’s new automation framework. Watch the session and see how it works:
A great post on scaling Prometheus. Slow queries, data retention, high availability and more areas of discussion.
We often see hello-world CI/CD examples, but real world examples are invariably more complex. This post does a good job of avoiding some of the hello world issues, looking at a full pipeline with Kubernetes, Tekton and ArgoCD.
A post on a common problem, how to access secure resources (like from a private GitHub repository or Nexus or other private package repository) from within a Docker build, without leaking sensitive information in the resulting image.
Relational SQL accounts for maybe 20% of the current specification. This site contains lots of information about modern advances in SQL and the support in different databases for them.
I’ve always found the overlap between testing and monitoring interesting. This post delves into the topic, looking at observability, mutation testing, chaos testing and more.
Kubernetes hardening guidance from the NSA, covering scanning of containers and Pods for vulnerabilities or misconfigurations, running containers and Pods with the least privileges possible, and using network separation, firewalls, strong authentication, log auditing and more.
A collection of modern replacement tools for standard unix utilities like ls, grep, cut, sed, ping, history and more.
If you’re using Docker and needing to work with multiple cloud-provider container registries you’ll have had to jump through hoops when it comes to credentials. docker-credential-magic makes all of that much simpler.