163: Mozilla and DigitalOcean Layoffs, NSA discloses Windows vuln, Kubernetes Bug Bounty Program, PrivateBin, and more

Got a jam-packed newsletter this week, complete with relevant stories from The Washington Post and New York Times. It’s an exciting time to be alive. I remember when something had to be earth-shattering to make these papers. Nowadays, it seems commonplace to read about low level, tech news (like the .org registry issues), and high stakes tech news all the same (like the NSA disclosing a Windows vuln). But, what these two stories this week highlight is the importance of governance. In one case, there is seemingly poor governance. In the other case, there is potentially the saving of billions of dollars of economic impact. Hopefully, we can somehow save the .org registry in the same way the NSA helped Microsoft this week. Events DeliveryConf Seattle, WA January 21-22, 2020 DELIVERY|CONF 2020 is being held to give people a place to get deeper technical information about Continuous Integration (CI) and Continuous Delivery (CD). Our goal isn’t to just tell you to “do the technical thing”; it is to show you real world examples of how others have done it. DELIVERY|CONF 2020 is a not-for-profit event being created by an all-volunteer team with many years of experience both in the technology and with creating conferences. Use discount code DEVOPSISH_10 for 10% admission. ...

January 19, 2020 · 7 min · Chris Short

162: kubectl tree, SHA-1, Pulse Secure VPN vulnerability, data gravity, Falco, eBPF, Bash-my-AWS, and more

It felt like security dominated the news this week. A Pulse Secure VPN vulnerability is getting exploited. SHA-1 is effectively busted now. Firefox exploits need patching too. Meanwhile, Kubernetes news abounds with new talks, tools, and tips. Enjoy some other awesome deep dives, stories, and posts from across the industry too. Have a great week! Events DeliveryConf Seattle, WA January 21-22, 2020 DELIVERY|CONF 2020 is being held to give people a place to get deeper technical information about Continuous Integration (CI) and Continuous Delivery (CD). Our goal isn’t to just tell you to “do the technical thing”; it is to show you real world examples of how others have done it. DELIVERY|CONF 2020 is a not-for-profit event being created by an all-volunteer team with many years of experience both in the technology and with creating conferences. Use discount code DEVOPSISH_10 for 10% admission. Hacking With The Homies Developers Conference Ticket Detroit, MI Feb 29, 2020 This is the first Software Developer Conference with a 100% focus on Black and Brown software developers. All sessions will be led by developers and will contain an actual code walk-thru. All presenters have a 3 slide limit and everything else has to be code. We have a Happy Hour after the conference where you can network and mingle with other developers. The profits from the conference will go to funding Detroit Black Tech initiatives and events. ...

January 12, 2020 · 5 min · Chris Short

161: Getting you back in the groove, hello 2020, anxiety, Y2K, AWS RDS certificates, faasd, Apache Pulsar, DENT, WebAssembly, and more

Let’s begin the new year with the top ten stories from the past three issues of DevOps’ish to get you up to speed on what you might have missed while you were off lollygagging: 5 interview questions every Kubernetes job candidate should know How to actually get good at basic DevOps if i’m not already hired /r/devops RDS Pricing Has More Than Doubled (Medium) (please build your own blog in 2020) Kubernetes is booming, but consolidation is coming SSH to remote hosts though a proxy or bastion with ProxyJump 10 best sysadmin stories from the trenches The top 15 emerging jobs of 2020, according to LinkedIn Building Compassion - YouTube Operations Anti-Patterns: DevOps Solutions Top CI/CD resources to set you up for success A [CSV](https://devopsish.com(https://shortcdn.com/devopsish/devopsish-2020-new-year-catch-up.csv) is available with all the links sorted by total clicks if you want to get completely up to speed. Thank you to each and every one of you. The fact you subscribe to something I write and hopefully gain something from fuels my fire. In 2020, expect some changes, like always, as DevOps’ish is iterated on more and more. I hope to continue to provide the right information, to the right people at the right time. I have a question for all DevOps’ish readers though. If I were to choose a charity to donate a portion of all proceeds from sponsorships to, what would it be? Please use this form to make a suggestion. Thank you very much! ...

January 6, 2020 · 8 min · Chris Short

160: 2019 is a wrap, internet bifurcation, using ML to block BGP hijacking, monitoring entropy, Kubernetes Operators, ops anti-patterns, and more

Happy Holidays to everyone celebrating this time of year. I hope that your time with family and friends was wonderful and stress-free. I have both of my kids in the same place at the same time this weekend; I am thoroughly enjoying that. Life doesn’t go how you plan it. Much like in DevOps, it’s not how well you stick to the plan for life; it’s how you respond to anomalies and improve the system as a whole. I had a kid at 20. She grew up a military brat and didn’t have the easiest of childhoods. But, she’s in college now. She’s working her ass off too. But, she’s doing this so she can take knowledge from us and better herself in the long run. I know it’s hard; it’s not the life I dreamed for her. But, we have talked about how this will prime her for a better position in life when she graduates. We’re working together as a team to learn from some hard-fought lessons while allowing room for mistakes. But, the safties that I didn’t have are built-in so that when errors occur, their blast radius can be minimized. Raising kids and teaching young adults how to live is a whole lot like DevOps. Drive towards goals, address errors, build safeties into the system as you go, and continue to iterate on every cycle to find areas to improve. There are so many parallels between life and DevOps. ...

December 30, 2019 · 9 min · Chris Short

159: Kubernetes with extra sprinkles, skilling up in DevOps, Google Cloud’s Y2K(23), privileged containers on Santa’s naughty list, and more

X-Team is Hiring Go developers with strong AWS skills (Remote) We are looking for passionate Go developers with strong AWS skills to work with the world’s leading brands, from anywhere. We love to work with Kubernetes, Docker, Serverless, and AWS tools. Travel the world while being part of the most energizing community of developers. We provide the funding needed to help you achieve your goals and grow as a remote developer. Join X-Team! SPONSORED Events Security at Cloud Native Speed (webinar) Online January 9, 2020, 11:00 am PT | 2:00 pm ET Join our live discussion to get your questions answered on how to improve security and reduce your blast radius while increasing velocity in cloud-native environments. Our speaker, Chris Short, draws on his experience as a principal technical marketing manager for Red Hat, CNCF Ambassador, and editor of KubeWeekly and DevOps’ish to share best practices on applying gates during CI/CD, the critical features for container security, tapping the power of native controls in Kubernetes, leveraging automation to retain velocity. ...

December 23, 2019 · 8 min · Chris Short