Unreliable platform engineering, scaling databases, configuration management, software supply chain security and more this week. A good mix of interesting topics I think.

StackHawk sponsors Devops Weekly

[ICYMI] DAST is Dead! Long Live DAST! The Evolution of Dynamic API security Testing webinar is now available on YouTube. Watch on-demand here.
https://sthwk.com/long-live-dast-webinar

News

A post on some of the pitfalls of platform engineering teams, including the ability for central teams to generate work for everyone else, and lose sight of their internal customers’ needs.
https://www.srepath.com/danger-of-unreliable-platform-engineering/

A classic database scaling story, looking at horizontally sharding an existing large Postgres database.
https://www.figma.com/blog/how-figmas-databases-team-lived-to-tell-the-scale/

An update to the yearly RedMonk language rankings. Some interesting observations about both popular and emerging languages.
https://redmonk.com/sogrady/2024/03/08/language-rankings-1-24/

A good post on using Terraform to manage Grafana dashboard configurations across multiple regional environments.
https://medium.com/tblx-insider/global-products-global-monitoring-terraform-strategies-for-seamless-grafana-dashboards-1e8c2af68512

A nice breakdown of a problem with the npm ecosystem, making it susceptible to certain supply chain security attacks.
https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem

Tools

Garnet is a remote cache-store that offers strong performance (throughput and latency), scalability, storage, recovery, cluster sharding, key migration, and replication features. It’s Reds compatible as well.
https://github.com/microsoft/garnet

Retina is a cloud-agnostic, Kubernetes network observability platform based on eBPF that provides a centralized hub for monitoring application health, network health, and security.
https://github.com/microsoft/retina