DevOps / SRE - Top Links Last Week

Week 11 - Issue #70

NSA and CISA: Here's how to improve your Kubernetes cluster security

National Security Agency and Cybersecurity and Infrastructure Security Agency have published updated guidance about harden Kubernetes for managing container applications. NSA and CISA do not list the changes in the updated direction, but the industry didn't meet the initial recommendations with universal approval. CISA says the update contains additional details and explanations based on feedback from the industry, including more detailed info on logging and threat detection and other clarifications. The agencies maintain that Kubernetes is commonly targeted for data theft, computational power theft, or denial of service.

A Guide To Application Logging

The purpose of logging is to generate a trail of information that will help understand the route a user or information takes through your application. Adding logs to your application will help you find problems down the road and ultimately improve your and your team's understanding of the data flow in your application. In addition, it can aid in identifying bottlenecks and potential issues long before they occur in the wild. Add timestamps to every log output. Use a human-readable message. Using the correct time is critical to understanding the proper sequence of events, especially if you need to piece together the separate logs of different systems.

DevOps Roadmap 2022

DevOps Roadmap 2022: DevOps skills are high in demand, and constant learning is required to keep yourself in sync with market demand. Be fundamentally strong in networking technologies. Master Linux, scheduling, and troubleshooting from the command line utilities — awk, sed, jq, yq, curl, ssh, OpenSSL, etc. Master the operating system fundamentals, particularly Linux. Master how to run and orchestrate VMs in Kubernetes. Master various deployment strategies such as blue-green and canary.

Tracing the History of the Internet, Layer by Layer

Traceroute is a seven-episode podcast series that tells how the Internet came to be through the voices of those who built it and those who documented the story. Episode 1 covers the hardware and software innovations necessary to enable computer networking through the legal and societal changes, like the Telecommunications Act of 1996, that were instrumental to the Internet's success. Then, listen and subscribe to the entire backstory of the creation of the Internet: the origins of the infrastructure: fiber cables that helped bring you this web page built initially to carry oil and gas.

How To Setup Prometheus and Grafana Monitoring on Kubernetes

Monitoring is a crucial pillar of DevOps best practices to ensure performance and health. It is even more true in a distributed environment such as Kubernetes and microservices. This tutorial shows you how to build a modern monitoring stack with Prometheus & Grafana effectively:
Using the Prometheus Operator, we'll go over what Prometheus is, and the best way to deploy it is using the operator.
We'll see how to set up a monitoring platform with Prometheus and Grafanna.
The Prometheus Operator gains you time on the Prometheus installation and maintainability.