The first CNCF Air Gapped Working Group meeting happened this week. I was fortunate enough to be able to attend. Air gapped or disconnected environments have a few variants. But, the air gaps I’m most familiar with are those between unclassified and classified US government systems (TEMPEST, EMSEC, COMSEC, etc.). Also, given the attendance, there is a lot of interest from folks across the public and private sectors. If you’re interested in getting involved, we’re figuring out what the cadence of the meetings will be. The current scope of our work is to provide a “cookbook” for maintaining an air gapped cloud native environment. Join the CNCF SIG App Delivery mailing list and keep an eye out for messages to see how to get involved.

The 2020 election for the Open Source Initiative Board of Directors is rapidly approaching. I nominated myself for a seat on the board as an Individual Member. I spoke with a few friends in the months before submitting my nomination. It sounds like OSI could use my help given the week they’ve had. Open source software has done nothing but provide opportunity after opportunity in my life. It should be cared for and maintained so that everyone willing can benefit from it as much as I have (hopefully more). If you’re an OSI member, please considering me for a seat on the board. If you’re not an OSI member, you have until 1 March 2020 to join to vote. However, if you work with open source software, you should be an OSI member.

People

Kubernetes Contributor Summit Amsterdam Schedule Announced
“On top of the presentations, there will be a dedicated Docs Sprint as well as the New Contributor Workshop 101 and 201 Sessions. All told, we will have five separate rooms of content throughout the day on Monday.”

Ansible Contributor Summit Europe
“A European Contributor Summit will be held in Gothenburg, Sweden, ahead of the usual summit at AnsibleFest! On March 29 we’ll be welcoming new and old contributors alike. So if you already contribute to Ansible, or would like to, but don’t know how or where to start, this event is for you.”

The Horrifically Dystopian World of Software Engineering Interviews
“Why are we measuring people and not learning about people?”

šŸ“• The 25 most recommended programming books of all-time
This is an excellent list of books. I’d like to see a similar method for DevOps books.

DOJ Plans to Strike Against Encryption While the Techlash Iron Is Hot
The US Department of Justice intends to strike while the iron is hot in the encryption war as public opinion of tech companies wanes. This is a pretty serious deal and the US government might get away with it given how dependent the US is upon mass surveillance.

Process

Container Security - Nobody Knows What It Means But It’s Provocative
“[T]his post helps delineate the different areas of container security and why they’re each important. As a community ā€” not just security, but also embracing our friends in DevOps ā€” we must work to secure the containers lest we become contained by our own failures.”

Starting work on Operator Working Group
CNCF is also starting up an Operator working group. I hope to be able to participate in this as it’s going to be a fun space for a while.

How to solve the DevOps vs. ITSM culture clash
I know I faced this problem head on in a few organizations. “Declare a truce between ITSM and DevOps within your organization by learning these lessons.”

Open Source-based Cloud Observability
If you are like many of your friends in DevOps, you might prefer using open source solutions. Logz.io’s cloud observability platform is designed to help deliver the open source experience you love, at the scale you need. Log management and Cloud SIEM based on ELK, and Infrastructure monitoring based on Grafana. All on one unified platform to help you correlate quickly between logs and metrics. Sign up for a free trial today and receive a Logz.io t-shirt! SPONSORED

Mirantis Acquires Kubernetes Assets from Kontena
“Kontena role-based access control (RBAC) and multi-cluster management tools will find their way into Docker Kubernetes Service (DKS) and Universal Control Plane (UCP).”

Advanced Persistence Threats: The Future of Kubernetes Attacks
“Let’s explore the dark corners of clusters and shine a light on several new advanced attacks on Kubernetes, and learn how to detect and prevent them using practical, proven methods.”

DevOps: 5 tips on how to manage stronger remote teams
“Are you leading or working in a DevOps team where some people work remote? Building a healthy culture presents some challenges - but experts say remote teams can become masters of collaboration and flexibility”

Tools

Your new web notifications experience is here
Pretty sure I already f’ed this up. I need to stop using GitHub on mobile. But, I’m hopeful I can re-manage my notifications as opposed to having to be so beholden to email.

Free Software Foundation Aims To Launch Code Hosting / Collaboration Platform This Year
“The Free Software Foundation’s lead contender right now is using Pagure as the basis for their platform, but have some reservations over it since JavaScript is required for a pleasant experience. Gitea and Sourcehut are other options they are also exploring but have pros/cons for all of them.”

On-Demand Container Scanning API
“scan.vulnerablecontainers.org is an open python API built using Trivy, Flask, Gunicorn, and Nginx that for now has two public endpoints (more endpoints and tools coming). From the start, I designed it to be easy to use in the browser or on the command line for integration with CI/CD.”

Everyone might be a cluster-admin in your Kubernetes cluster
“What the installation guide doesn’t tell you is that this manifest grants cluster-admin privileges to every single Pod in the default namespace!” This is going to become a big problem pretty quick. You need to make sure you’re applying RBAC and security policies to anything you pull down from the web.

What happens behind the scenes of a rootless Podman container?
“Have you ever wondered what happens behind the scenes of a rootless Podman container? Let’s walk through an example.”

Let’s Encrypt Has Issued a Billion Certificates
Huge thank you to the folks at Let’s Encrypt and congratulations on building one of the most fantastic infrastructure services on the internet.

The Jellyfish-Inspired Database Under AWS Block Storage
“While it is highly unlikely that AWS will ever open source Physalia, it is possible that it will inspire others to re-create elements of its architecture that will be open source, much as has happened with many hyperscaler and cloud builder technologies in the past.”

Monitor Your Docker Containers More Effectively
See across all of your Docker containers, servers, apps, and services in one place withĀ Datadog’s custom dashboards, distributed tracing, and 400+ vendor-backed integrations. Start your free trial today, create one dashboard, and receive a freeĀ DatadogĀ t-shirt. SPONSORED

Crisis? What crisis? Netflix opensources incident management framework
“Netflix has open sourced its crisis management framework, giving organisations a standardised way to manage incidents and get back to a state of chill.” I see what you did there. šŸ‘€

Multicluster Kubernetes with Service Mirroring
“With service mirroring in place, the full observability, security, and routing features of Linkerd apply uniformly to both in-cluster and cluster-calls, and the application does not need to distinguish between those situations.”

Tig
Text-mode interface for Git

Implementing A Reverse Proxy Server In Kubernetes Using The Sidecar
DIY sidecar injection to help you understand the concept of having multiple containers in a single pod to form a fully functional web app.

DevOps’ish Tweet of the Week