1 minute read

KubeCon, reproducible builds, internet infrastructure, low-level VM performance research and Kubernetes security posts this week.

StackHawk sponsors Devops Weekly

Attending re:Invent? Join StackHawk and Snyk at the Code Faster. Safer. Happy Hour for a night of great food, conversation, limited edition swag, and tasty Hawktails. Nov. 9, 6 PM-9 PM. Add yourself to the list!
https://sthwk.com/reinvent-happy-hour

News

An in-depth summary of the recent KubeCon event in Detroit, with lots of links to topics discussed and presentations given.
https://blog.getambassador.io/kubecon-na-2022-summary-maintainers-open-standards-and-the-rumoured-demise-of-devops-e4f12486263c

More interesting posts on the infrastructure of the internet, this time looking at the diversity of authoritative NS records in gTLDs.
https://www.netmeister.org/blog/nsauth-diversity.html

Some observations from a survey on the state of Kubernetes open source security tooling and integration costs, with a full report downloadable too.
https://landing.armosec.io/state-of-kubernetes-open-source-security-2022

Some OCAML specifics, but a good post on reproducible software tooling and why it’s important for certain use cases.
https://blog.osau.re/articles/reproducible.html

A good overview of the state of performance research around VM warmup, with good references and a review of recent research in the space.
https://tratt.net/laurie/blog/2022/more_evidence_for_problems_in_vm_warmup.html

One of the challenges with the size of AWS, especially for older services, is the optionality. One example is how best to manage access to RDS, which this handy blog post covers in detail.
https://blog.symops.com/2022/11/17/rds-access/

Tools

Katana is a new crawling and spidering framework with a handy CLI tool. Useful for all sorts of things.
https://github.com/projectdiscovery/katana

MergeStat enables SQL queries for data in git repositories (and related sources, such as the GitHub API). It allows you to ask questions about the history and contents of your source code.
https://github.com/mergestat/mergestat

Updated: