DEVOPS WEEKLY ISSUE #621 - 20th November 2022
KubeCon, reproducible builds, internet infrastructure, low-level VM performance research and Kubernetes security posts this week.
StackHawk sponsors Devops Weekly
Attending re:Invent? Join StackHawk and Snyk at the Code Faster. Safer. Happy Hour for a night of great food, conversation, limited edition swag, and tasty Hawktails. Nov. 9, 6 PM-9 PM. Add yourself to the list!
https://sthwk.com/reinvent-happy-hour
News
An in-depth summary of the recent KubeCon event in Detroit, with lots of links to topics discussed and presentations given.
https://blog.getambassador.io/kubecon-na-2022-summary-maintainers-open-standards-and-the-rumoured-demise-of-devops-e4f12486263c
More interesting posts on the infrastructure of the internet, this time looking at the diversity of authoritative NS records in gTLDs.
https://www.netmeister.org/blog/nsauth-diversity.html
Some observations from a survey on the state of Kubernetes open source security tooling and integration costs, with a full report downloadable too.
https://landing.armosec.io/state-of-kubernetes-open-source-security-2022
Some OCAML specifics, but a good post on reproducible software tooling and why it’s important for certain use cases.
https://blog.osau.re/articles/reproducible.html
A good overview of the state of performance research around VM warmup, with good references and a review of recent research in the space.
https://tratt.net/laurie/blog/2022/more_evidence_for_problems_in_vm_warmup.html
One of the challenges with the size of AWS, especially for older services, is the optionality. One example is how best to manage access to RDS, which this handy blog post covers in detail.
https://blog.symops.com/2022/11/17/rds-access/
Tools
Katana is a new crawling and spidering framework with a handy CLI tool. Useful for all sorts of things.
https://github.com/projectdiscovery/katana
MergeStat enables SQL queries for data in git repositories (and related sources, such as the GitHub API). It allows you to ask questions about the history and contents of your source code.
https://github.com/mergestat/mergestat