Incident management, cloud complexity, open telemetry adoption as well as a few handy utilities this week. For those starting a holiday this week, I hope your on-call shifts are quiet.

StackHawk sponsors Devops Weekly

Wanna build secure, reliable GraphQL APIs without slowing down product delivery? StackHawk’s Deeper GraphQL Security Testing has got you covered! Get the inside scoop and learn how to cut through complexities- fast. Register for the webinar:
https://sthwk.com/Custom-Test-Data-GraphQL

News

A new report analysing 50,000 anonymised incidents, with interesting aggregate data and observations around the use of service catalogues and defined incident roles on recovery time.
https://firehydrant.com/reports/incident-benchmarks/

Do you secure internal traffic with certificates from let’s encrypt or a public CA? This post discusses why that’s not a great idea, and what you can do instead.
https://smallstep.com/blog/reasons-not-to-use-public-certificate-authorities/

A good case study on the adoption of open telemetry at scale.
https://tech.ebayinc.com/engineering/why-and-how-ebay-pivoted-to-opentelemetry/

Some thoughts on recent cloud outage trends, and the relationship between those and the complexity of real-world hybrid cloud environments.
https://www.infoworld.com/article/3663680/complexity-leads-to-cloud-outages-heres-the-proof.html

A series of posts on the low level details of the linux shell, looking at file descriptors, pipelines, process groups and more. Useful when you need to debug something at this level.
https://biriukov.dev/docs/fd-pipe-session-terminal/0-sre-should-know-about-gnu-linux-shell-related-internals-file-descriptors-pipes-terminals-user-sessions-process-groups-and-daemons/

Tools

Fx is a handy tool for exploring JSON documents, for instance from API responses. It’s an interactive command line explorer, with the ability to write reducers in JavaScript, Ruby or Python.
https://github.com/antonmedv/fx

Hurl is a neat HTTP testing tool. A simple DSL for writing assertions against web responses, including APIs, and testing those assertions.
https://github.com/Orange-OpenSource/hurl