Posts this week on incident management, debugging certification issues, Kubernetes abstractions, cloud management tooling, network security and more.

StackHawk sponsors Devops Weekly

With StackHawk’s new GitHub Action, you can integrate AppSec testing directly into your GitHub CI/CD pipeline. See how:
http://sthwk.com/github-actions

News

Managing incidents well often means clear incident leadership. This post looks at the balance between dedicated roles and emergent roles, and when to hire an incident commander.
https://firehydrant.io/blog/when-to-hire-an-incident-commander/

A discussion of Kubernetes, focused on the maturing higher level abstractions for developers.
https://www.eficode.com/blog/the-future-of-kubernetes-and-why-developers-should-look-beyond-kubernetes-in-2022

A handy trick, automatically building documentation on changes in versions of CLI tools by scraping and storing the help output in Git.
https://simonwillison.net/2022/Feb/2/help-scraping/

A primer on debugging certificate errors, including incomplete chains, expired certs, IP address issues and more.
https://www.netmeister.org/blog/debugging-certificate-errors.html

A comprehensive up-to-date guide on all things network infrastructure security.
https://media.defense.gov/2022/Mar/01/2002947139/-1/-1/0/CTR_NSA_NETWORK_INFRASTRUCTURE_SECURITY_GUIDANCE_20220301.PDF

A post on monitoring haproxy, covering how to enable monitoring and which are the key metrics to watch.
https://sematext.com/blog/haproxy-monitoring/

Generics are (finally) coming to Go in 1.18. With all the Go in the devops ecosystem, I think this is a quality of life improvement for lots of projects.
https://dev.to/42atomys/how-will-go-generics-in-go-118-change-your-life-2e5i

Tools

Idem is a set of tools that can scan a cloud environment (or other API-driven system) and generate a description of that state that can be modified and re-applied. Based on some of the underlying parts of Salt.
https://www.idemproject.io
https://gitlab.com/vmware/idem

Healthcheck is a dedicated monitoring and alerting system for cron, with a nice looking dashboard and various alerting options.
https://github.com/healthchecks/healthchecks