DevOps’ish Last Week’s Top Five
- xkcd: Spreadsheets
- 9 people for sysadmins to follow on Twitter
- Goodbye Docker: Purging is Such Sweet Sorrow
- Decoupling database migrations from server startup: why and how
- Kubernetes and Containers Best Practices - Health Probes
People
X-Team Is Hiring a Team of DevOps Engineers (Remote)
We are looking for passionate DevOps engineers to work with the world’s leading brands, from anywhere. We love to work with Kubernetes, Docker, Serverless, and AWS tools. Travel the world while being part of the most energizing community of developers. Join X-Team SPONSORED
My Preparation Strategy for AWS Solutions Architect Associate Exam — One person’s person formula.
The inevitability of K8s: Pivotal CEO describes the pain and benefits of technology transition — Pivotal has been getting its teeth kicked in lately. It hasn’t been pretty to watch.
The Business Value of Developer Relations
Discover the true value of Developer Relations as you learn to build and maintain positive relationships with your developer community. Use the principles laid out in this book to walk through your company goals and discover how you can formulate a plan tailored to your specific needs. SPONSORED
Process
CapitalOne’s CapitalTwo Day by Corey Quinn — Corey points out what went right and what went wrong in the CaptialOne compromise.
The Technical Side of the Capital One AWS Security Breach — Another huge breach thanks to AWS IAM misconfiguration. “Since the Server’s IAM Role allowed for S3 access to those 700+ Buckets, [the suspect] was able to access them”
Capital One’s Cloud Misconfiguration Woes Have Been an Industry-Wide Fear
Linux Journal: The DevOps Issue (subscription required) — This month’s edition of Linux Journal is all about DevOps. I highly encourage everyone to share with folks getting started on their journey or somewhere along the trough of disillusionment.
JEDI: Oracle Playing Politics with Nation’s Defense — “Senator Marco Rubio has sent letters to the President urging further scrutinization of JEDI. [D]uring his failed presidential run in 2016, Senator Rubio took $4 million from Oracle co-founder Larry Ellison. It’s also worth noting that Oracle’s CEO was on Trump’s Transition Team.”
Amazon vs. Oracle: Effort to turn Trump against Amazon’s bid for $10B contract — “White House officials in recent weeks have shown Trump a document that alleges a large conspiracy to award Amazon a 10-year, $10 billion contract to build the Pentagon’s cloud computing network, according to three sources familiar with the matter. The document, obtained by CNN, is identical to one created by Oracle’s top Washington lobbyist, Kenneth Glueck, an executive vice president with the company, Glueck tells CNN.”
After Trump cites Amazon concerns, Defense Secretary Mark Esper’s Pentagon reexamines $10 billion JEDI cloud contract process (WaPo) — “The 11th-hour Oval Office intervention comes just weeks before the winning bid was expected to be announced and has now left a major military priority up in the air, said the officials, who spoke on the condition of anonymity to discuss the closed-door process freely.”
Kubernetes Pod Escape Using Log Mounts — “In this post you’ll see how a pod running as root and with a mount point to the node’s /var/log directory can expose the entire contents of its host filesystem to any user who has access to its logs. We’ll also talk about your options to mitigate this issue in your cluster.”
Praise — If nice people say nice things, save it somewhere for when the impostor syndrome kicks-in. “Self-promotion is a leadership and political skill that is critical to master in order to navigate the realities of the workplace and position you for success.” ― Bonnie Marcus
Treading in Haunted Graveyards by Liz Fong Jones — “[W]e switched from engineers using direct token access to modify our production environment to centralized push-on-green deployment”
Container Platform Security at Cruise — “Best practices for enterprise-grade Kubernetes security.”
Tools
Get $100 to Demo Blue Matador The Alert Automation Service
Blue Matador is alert automation for AWS and Kubernetes environments. Our proactive alerts take the time and toil out of monitoring. See production issues before anyone else. We’re so confident you’ll love it that we’re offering $100 to demo it with our team. SPONSORED
Introducing Fedora CoreOS — The successor to Fedora Atomic Host and CoreOS Container Linux has a preview build available.
Why Kubernetes will disappear — This went viral, for good reason. The article discusses how, “the prize of ubiquity is invisibility,” which, in my opinion, is much the same way Linux has become the universal standard. Kubernetes will eventually be the layer 7 commodity on top of the OS (or the OS itself if you’re looking at Google’s Container-Optimized OS). This is good! It’s good because it reminds us all that while Kubernetes is awesome, it still isn’t the destination.
Kubernetes: What is “reconciliation”? by Tim Hockin (slides) — A talk about controller reconciliation and the best practices around them.
Learn a little jq, awk, and sed — I think I blew a former co-worker’s mind when I showed them jq and sed piped together once. Throw in awk and you might as started thinking about building an operating system. j/k
5 Programming Languages That Are Probably Doomed — Ruby, Haskell, Objective-C, R, and Perl make up the list. I’m still blown away there’s as much Perl as there is in the world today. True story, my first job out of the Air Force was at McClatchy Interactive. The CMS that powered thirty-one daily newspaper sites was written in Perl. It was advanced architecturally though (some microservices, definitely some resource pools for different workloads, MySQL database sharding, and a lot of YAML). It ended up collapsing under its own weight but, more the weight of the market. It was the newspaper industry after all; the glory days had long past. But, to me, that was the last great Perl thing I worked on. What about you? Hit reply or comment on reddit.
IBM debuts integrations and consulting services for Red Hat’s OpenShift container platform — IBM is integrating Red Hat’s products into its existing product lineup. It’s not that big of a jump given the long bond between IBM and Red Hat. Plus, the acquisition was announced in Oct 2018. But, “Over 100 products across IBM’s extensive software library form the basis of Cloud Paks, all of which are optimized to run on OpenShift.” is a logical way for IBM to do it.
How We Built A Logging Stack at Grab — How Grab runs ELK
SolarWinds Tips: Alerting Best Practices — If you’re a Solarwinds user, here as some helpful tips on alerting.
airbnb/cloud-maker — “Building castles in the sky” CloudMaker is a tool for launching and configuring EC2 instances. It works as an extension to the Ubuntu CloudInit system.
TailorDev/Watson — “A wonderful CLI to track your time!”
deadpixi/mtm “Perhaps the smallest useful terminal multiplexer in the world.”
servian/aws-auto-remediate — “Open source application to instantly remediate common security issues through the use of AWS Config”
lucperkins/strato — “An all-in-one data service for microservices, FaaS functions, etc. gRPC and HTTP interfaces.”
estafette/estafette-gke-preemptible-killer — “Kubernetes controller that ensures deletion of preemptible nodes in a GKE cluster is spread out to avoid the risk of all getting deleted at the same time after 24 hours”
DevOps’ish Tweet of the Week
Notes from this week’s issue can be found on GitHub.