Lots of new tools this week, with several useful to help with surfacing information as part of normal developer workflows , as well as posts on incident management, testing microservices and Kubernetes.

StackHawk sponsors Devops Weekly

There are only 2 days left until ZAPCon! Don’t miss the chance to join our free virtual conference and level-up your security automation skills. Save your spot now:
https://sthwk.com/zapcon-registration

News

Incident management is a team activity, but too often revolves around a single person coming to the rescue. This post looks at the perils of a single hero solving problems.
https://incident.io/blog/no-capes

A detailed series of posts on testing microservice-based applications, covering environment/request isolation, staging environment issues and more.
https://blog.getambassador.io/testing-microservices-youre-thinking-about-environment-isolation-all-wrong-84f22034a6ef
https://blog.getambassador.io/testing-microservices-isolating-requests-not-environments-with-telepresence-f22535789253
https://blog.getambassador.io/testing-microservices-how-to-share-staging-environments-without-tripping-over-each-other-b07e393eb31c

This guide provides a well documented, opinionated, step-by-step framework for successfully going to production on the public cloud. Lots of concrete details and explicit steps rather than just the high level.
https://docs.gruntwork.io/docs/guides/production-framework/

Some thoughts about Kubernetes adoption in 2022, focused on more clusters vs bigger clusters.
https://traefik.io/blog/pets-vs-cattle-the-future-of-kubernetes-in-2022/

An experience report after using AWS EKS for a few years. Lots of useful operational observations around SSO integration, networking, storage and more.
https://matduggan.com/aws-eks/

Tools

Infracost shows cloud cost estimates for Terraform in PR status checks. A handy way of surfacing cost as part of the development process.
https://github.com/infracost/infracost

Status Red Team is a handy toolset which allows for emulating offensive attack techniques against cloud infrastructure.
https://github.com/DataDog/stratus-red-team
https://stratus-red-team.cloud/

Encites is an interesting tool for anyone looking to make Git activity more visible. It provides an API and tools for rendering the data to Markdown. Lots of things you could do with this in status checks or batch reports.
https://github.com/cutenode/encites

Pyrra is a tool for managing SLOs with Prometheus. Provides useful dashboards and support for multi burn rates and alerts. The demo is a handy way of getting a feel for the tool.
https://github.com/pyrra-dev/pyrra
https://demo.pyrra.dev