|
| 1 | +Subject: =?utf-8?Q?Devops=20Weekly=20#691?= |
| 2 | +Date: Sun, 31 Mar 2024 07:39:59 +0000 |
| 3 | + |
| 4 | +DEVOPS WEEKLY |
| 5 | +ISSUE #691 - 31st March 2024 |
| 6 | + |
| 7 | +eBPF=2C OIDC=2C A 20 year journey to fixing profiling=2C a platform maturi= |
| 8 | +ty model and a range of other topics this week. |
| 9 | + |
| 10 | + |
| 11 | +StackHawk sponsors Devops Weekly |
| 12 | +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= |
| 13 | +=3D=3D=3D=3D |
| 14 | + |
| 15 | +[ICYMI] DAST is Dead! Long Live DAST! The Evolution of Dynamic API securi= |
| 16 | +ty Testing webinar is now available on YouTube. Watch on-demand here. |
| 17 | + |
| 18 | +https://sthwk.com/long-live-dast-webinar |
| 19 | + |
| 20 | + |
| 21 | +News |
| 22 | +=3D=3D=3D=3D |
| 23 | + |
| 24 | +A good post highlighting the importance of OpenID Connect=2C looking at fi= |
| 25 | +ne-grained RBAC for GitHub Action using Vault. |
| 26 | + |
| 27 | +https://www.digitalocean.com/blog/fine-grained-rbac-for-github-action-work= |
| 28 | +flows-hashicorp-vault |
| 29 | + |
| 30 | + |
| 31 | +An exciting 20 year journey to fix frame pointers in Linux so that profile= |
| 32 | +rs can work more accurately. |
| 33 | + |
| 34 | +https://www.brendangregg.com/blog/2024-03-17/the-return-of-the-frame-point= |
| 35 | +ers.html |
| 36 | + |
| 37 | + |
| 38 | +A look at the recently published CNCF platform maturity model and how you= |
| 39 | + can use it to assess your current platform investments. |
| 40 | + |
| 41 | +https://www.getport.io/blog/using-the-platform-engineering-maturity-model-= |
| 42 | +to-evaluate-your-investment-in-internal-developer-platforms |
| 43 | + |
| 44 | + |
| 45 | +A look at the native sidecar capabilities in Kubernetes 1.29+ for Jobs and= |
| 46 | + CronJobs. A very nice quality of life improvement that simplifies a commo= |
| 47 | +n use case. |
| 48 | + |
| 49 | +https://medium.com/teamsnap-engineering/properly-running-kubernetes-jobs-w= |
| 50 | +ith-sidecars-in-2024-k8s-1-28-ad9b51d17d50 |
| 51 | + |
| 52 | + |
| 53 | +CI and testing infrastructure are too often not treated like the productio= |
| 54 | +n environments they are. This post explores how you can use monitoring too= |
| 55 | +ls to improve the developer experience for CI systems. |
| 56 | + |
| 57 | +https://www.datadoghq.com/blog/best-practices-for-monitoring-software-test= |
| 58 | +ing/ |
| 59 | + |
| 60 | + |
| 61 | +A post on using Tetragon for monitoring file change events=2C and why eBPF= |
| 62 | + makes things like this scalable. |
| 63 | + |
| 64 | +https://isovalent.com/blog/post/file-monitoring-with-ebpf-and-tetragon-par= |
| 65 | +t-1/ |
| 66 | + |
| 67 | + |
| 68 | +A run down of some of the problems with documenting software projects=2C a= |
| 69 | +nd why storing the documentation with the code can have benefits. |
| 70 | + |
| 71 | +https://www.tabnine.com/blog/documentation-as-code-principles-workflow-and= |
| 72 | +-challenges/ |
| 73 | + |
| 74 | + |
| 75 | +Tools |
| 76 | +=3D=3D=3D=3D=3D |
| 77 | + |
| 78 | +Bytesize Architecture Sessions are a prescriptive format for a 45m to 90m= |
| 79 | + architecture session focused on helping teams build a shared language and= |
| 80 | + common understanding of a system. |
| 81 | + |
| 82 | +https://bytesizearchitecturesessions.com/ |
| 83 | + |
| 84 | + |
| 85 | + |
| 86 | + |
| 87 | +If you received this email directly then you're already signed up=2C thank= |
| 88 | +s! If however someone forwarded this email to you and you'd like to get it= |
| 89 | + each week then you can subscribe at http://devopsweekly.com |
| 90 | + |
0 commit comments