DEVOPS WEEKLY ISSUE #585 - 13th March 2022
Posts this week on incident management, debugging certification issues, Kubernetes abstractions, cloud management tooling, network security and more.
StackHawk sponsors Devops Weekly
With StackHawk’s new GitHub Action, you can integrate AppSec testing directly into your GitHub CI/CD pipeline. See how:
http://sthwk.com/github-actions
News
Managing incidents well often means clear incident leadership. This post looks at the balance between dedicated roles and emergent roles, and when to hire an incident commander.
https://firehydrant.io/blog/when-to-hire-an-incident-commander/
A discussion of Kubernetes, focused on the maturing higher level abstractions for developers.
https://www.eficode.com/blog/the-future-of-kubernetes-and-why-developers-should-look-beyond-kubernetes-in-2022
A handy trick, automatically building documentation on changes in versions of CLI tools by scraping and storing the help output in Git.
https://simonwillison.net/2022/Feb/2/help-scraping/
A primer on debugging certificate errors, including incomplete chains, expired certs, IP address issues and more.
https://www.netmeister.org/blog/debugging-certificate-errors.html
A comprehensive up-to-date guide on all things network infrastructure security.
https://media.defense.gov/2022/Mar/01/2002947139/-1/-1/0/CTR_NSA_NETWORK_INFRASTRUCTURE_SECURITY_GUIDANCE_20220301.PDF
A post on monitoring haproxy, covering how to enable monitoring and which are the key metrics to watch.
https://sematext.com/blog/haproxy-monitoring/
Generics are (finally) coming to Go in 1.18. With all the Go in the devops ecosystem, I think this is a quality of life improvement for lots of projects.
https://dev.to/42atomys/how-will-go-generics-in-go-118-change-your-life-2e5i
Tools
Idem is a set of tools that can scan a cloud environment (or other API-driven system) and generate a description of that state that can be modified and re-applied. Based on some of the underlying parts of Salt.
https://www.idemproject.io
https://gitlab.com/vmware/idem
Healthcheck is a dedicated monitoring and alerting system for cron, with a nice looking dashboard and various alerting options.
https://github.com/healthchecks/healthchecks