Lots of good posts this week I feel across a wide range of topics. KubeCon wrap ups, detailed incident reports, production readiness reviews, scaling storage, threat modelling and deep internet networking knowledge to name a few.
StackHawk sponsors Devops Weekly
Join Snyk and StackHawk on November 2 @ 10:30 AM ET to learn how to implement automated security testing across your CI/CD pipeline. Register:
KubeCon finished up in LA a week and a bit ago, and we have several posts this week recapping the event, with lots of links, observations and some opinions.
An insightful post on the sometimes hard-to-define distinction between application and infrastructure. A static/dynamic linking analogy, how the Kubernetes API and Crossplane fit in, and the potential for a new type of marketplace for applications.
Game servers are a super interesting scaling challenge. This post, about recent outstages for a large game, goes into some great operational, data storage and architecture details.
A look at how one team is evolving a large NFS file storage setup towards something that is easier to scale horizontally and automatically.
More deep internet networking insights, this time looking under the hood about what makes a valid hostname. It’s worse than you think.
A good introduction to the extensibility benefits of Kubernetes, looking at the high-level API, custom resources and the operator pattern.
A post on introducing a production readiness review process, in particular in smaller teams.
hcltm is a tool for describing a thread model in HCL, and then generating various outputs from it including markdown documents and data flow diagrams.
Snowcat is a tool that gathers and analyzes the configuration of an Istio cluster and audits it for potential violations of security best practices.