DevOps / SRE - Top Links Last Week

Week 10 - Issue #69

The Future of Kubernetes

Kubernetes has been the primary container orchestration tool for a while, and it'll continue to be for quite some time. But developers should explore other paradigms. For instance, Kubernetes came about because of Docker containers, which have been around since Linux variants. Furthermore, Kubernetes is popular because it was built on top of Docker containers, and after Docker's focus on developer experience made them popular, they took off. One more reason for Kubernetes' popularity is that it did not change things--namely, when it came into play, how nodes are scheduled within clusters (aka orchestrated).

Building Password Purgatory with Cloudflare Pages and Workers

Somewhere in my Microsoft 365 spam filter, an email found its way and consumed some time. I've been planning the best revenge tactics for when this happens again. First, the spammers have to be punished! One of those methods is a place or state where they will suffer named "Password Purgatory." Do you know how we despise password complexity criteria? That's what I'm now referring to as Password Purgatory - that temporary state of misery - and you're going to do it too. All the Michelle's need to do first is create their passwords. They'll end up on the troy hunt website after all. This idea was clever, no?

Deploy Portainer for Easier Container Management

One way to make container management efficient is by utilizing a GUI tool that provides access from anywhere on your LAN. Portainer is especially helpful for managing containers with many moving parts, such as scaling up deployments. Portainer makes this process more manageable, and it functions smoothly on Kubernetes or Docker-based platforms like Docker Swarm. So for anyone looking for a GUI application to manage containers effectively and reliably - we recommend Portainer!

Software Supply Chain Security: Tearing Down the Silos

The nature of Kubernetes, which allows you to scale, distribute and share applications, can also create many weak points in containerized environments. There are attack vectors like open-source code developers use to build applications code with hidden vulnerabilities. Furthermore, there are numerous interconnected containers with multiple dependencies and microservices that security teams must monitor. The version control repository for GitOps (GitHub, GitLab, and Bitbucket), the entire CI/CD pipeline and cloud infrastructure, as well as K8S clusters themselves, are all on the security team's watch list.

As cloud costs spiral upward, enterprises turn to a thing called FinOps

Despite the cost savings it offered for the first few years of cloud computing, now businesses are faced with spiraling costs. There's even a word for this- "FinOps." Organizations continue to waste significant amounts of money on their cloud usage. Flexera's recently released 2022 State Of The Cloud Report estimates that 32% of spending goes inefficiently down the drain because many organizations underestimate how much they waste when utilizing public clouds.

Datree are sponsors of the phpops project