Linux Foundation has some discounts for its courses and certifications till the end of February. Including Kubernetes, ArgoCD, and Istio certifications.
They are still not cheap, but you can save up to 50%, which is nice.
#kubernetes #training #courses
They are still not cheap, but you can save up to 50%, which is nice.
#kubernetes #training #courses
Linux Foundation - Training
Promo Inactive - Linux Foundation - Training
Sign up for our newsletter to get updates on our latest promotions.
For you to know: the full Kubernetes CKS (certified security specialist) is available on YouTube. There are both theory and practice, but obviously you will need to take the exam separately.
#kubernetes
#kubernetes
YouTube
Kubernetes CKS Full Course Theory + Practice + Browser Scenarios
All you need for your Certified Kubernetes Security Specialist (CKS) preparation!
I will present each CKS topic in a simple and visual way. We'll run through various practical hands-on challenges.
You'll setup own CKS cluster in which you'll learn, simple…
I will present each CKS topic in a simple and visual way. We'll run through various practical hands-on challenges.
You'll setup own CKS cluster in which you'll learn, simple…
Some time ago I had a task to split the
So, I found this issue in the Helm’s repository. People were suggesting using AWK for that, but that didn’t work well for me at the time, so I opted out for YQ.
A couple of days ago someone left a comment to that issue that apparently there is a tool called Kubesplit that can do exactly that. So, feel free to use it if you need to achieve something similar to what I did.
#kubernetes
helm template
output into separate files per object.So, I found this issue in the Helm’s repository. People were suggesting using AWK for that, but that didn’t work well for me at the time, so I opted out for YQ.
A couple of days ago someone left a comment to that issue that apparently there is a tool called Kubesplit that can do exactly that. So, feel free to use it if you need to achieve something similar to what I did.
#kubernetes
GitHub
feature request: option in `helm template` to split output files when using {{ range }} · Issue #4680 · helm/helm
Hi When using helm template to generate static yaml files, and when using --output-dir , helm correctly generate multiple files according to source files.. would be useful if in I can add some hint...
Today marks the 2 year of the russian full-scale invasion of Ukraine.
Today there are going to be rallies in many cities around the globe.
You can find the list here:
https://ukrainianvictory.org/publications/announcement-pro-ukrainian-rallies-marking-the-second-anniversary-of-the-russian-invasion-updated/
Go there, take your family, take your friends, take your colleagues.
Remind you local politicians that war is not over and that there would be no peace in this world until ruzzia exists!
Today there are going to be rallies in many cities around the globe.
You can find the list here:
https://ukrainianvictory.org/publications/announcement-pro-ukrainian-rallies-marking-the-second-anniversary-of-the-russian-invasion-updated/
Go there, take your family, take your friends, take your colleagues.
Remind you local politicians that war is not over and that there would be no peace in this world until ruzzia exists!
International Center for Ukrainian Victory | ICUV
Announcement: Pro-Ukrainian Rallies Marking the Second Anniversary of the Russian Invasion (updated) - International Center for…
On February 24th, Ukrainians and supporters of Ukraine worldwide will mark the second anniversary of Russia’s full-scale invasion of Ukraine with mass actions. We will gather in city squares to raise awareness of the devastating war Ukraine is enduring. On…
For today’s Donations Monday I would like to remind you about Pavlo and Naya, who raise money on drones and telecommunication equipment.
P.S. Here’s a photo of a drone you helped to buy last week and it’s already on its way to the place.
P.S. Here’s a photo of a drone you helped to buy last week and it’s already on its way to the place.
Resend had a 12 hour outage on the 21st of February.
tl;dr:
> The database migration accidentally deleted data from production servers…
> … we performed a database migration command locally, but it incorrectly pointed to the production environment instead…
You can read it in more details is the article, but here are some of the action items from this postmortem:
- No accessible user role should have write privileges on the production database.
- Improve local development to reduce risks related to database migrations.
- Create redundancy to preserve sending function even during a database outage.
- Increase cadence for disaster recovery tests.
- Implement incident banner on Resend dashboard to inform users quickly.
So, I dunno, check your database. Maybe, you have such a risk as well.
Also, it’s kinda strange that people rarely talk about network isolation not only between their production and non-production environments, but also between their local environment and production. Make production access conscious. Put it on a separate role/VPN. Add some friction accessing it.
Moreover, for the love of god, validate your DB backups.
#postmortem #databases
tl;dr:
> The database migration accidentally deleted data from production servers…
> … we performed a database migration command locally, but it incorrectly pointed to the production environment instead…
You can read it in more details is the article, but here are some of the action items from this postmortem:
- No accessible user role should have write privileges on the production database.
- Improve local development to reduce risks related to database migrations.
- Create redundancy to preserve sending function even during a database outage.
- Increase cadence for disaster recovery tests.
- Implement incident banner on Resend dashboard to inform users quickly.
So, I dunno, check your database. Maybe, you have such a risk as well.
Also, it’s kinda strange that people rarely talk about network isolation not only between their production and non-production environments, but also between their local environment and production. Make production access conscious. Put it on a separate role/VPN. Add some friction accessing it.
Moreover, for the love of god, validate your DB backups.
#postmortem #databases
Resend
Incident report for February 21st, 2024 · Resend
Detailed postmortem of the outage on February 21st.
S3 cache for GitHub Actions - a drop-in replacement for the native GHA
I haven’t used it personally and I don’t have an AWS account to test it. This thing comes as a part of RunsOn - a solution to setup your self-hosted runners for GHA in AWS.
Might be worth checking if you want to bring your own worker nodes to GHA but don’t want the hustle configuring them.
#github #gha #cicd
cache
functionality that is technically unlimited because of S3.I haven’t used it personally and I don’t have an AWS account to test it. This thing comes as a part of RunsOn - a solution to setup your self-hosted runners for GHA in AWS.
Might be worth checking if you want to bring your own worker nodes to GHA but don’t want the hustle configuring them.
#github #gha #cicd
Runs-On
S3 cache for GitHub Actions
Use an S3 bucket as a cache backend for your actions, to enjoy faster download and upload speeds + unlimited cache sizes
Kubernetes: tracing requests with AWS X-Ray, and Grafana data source is a step-by-step guide on how to setup tracing in your EKS cluster using AWS X-Ray by Arseniy Zinchenko - a member of the Ukrainian DevOps community.
Also, make sure to subscribe to his Substack! He posts new things quite often and I have no idea where does he find time and willpower to do so 😅
#aws #kubernetes #observability
Also, make sure to subscribe to his Substack! He posts new things quite often and I have no idea where does he find time and willpower to do so 😅
#aws #kubernetes #observability
RTFM! DevOps[at]UA
Kubernetes: tracing requests with AWS X-Ray, and Grafana data source
Launching AWS X-Ray on AWS Elastic Kubernetes Service, creating a Python Flask with the AWS X-Ray SDK, and connecting a Grafana data source for X-Ray
I got a bit distracted in the recent days, so I make posts with delays.
Today we have a Donations Monday with a twist.
We are raising funds for two foundations at the same time:
- For NayTak for camouflage nets.
- For UA Responders an IVL and a defibrillator for medics from Kraken.
The twist is that you can win a remnant of an S-300 rocket (on the picture).
Every donation for >50 UAH is a chance to win!
You can donate on:
- a Monobank jar: https://send.monobank.ua/jar/5SizeGGzBM
- top up the card directly: 5375 4112 1191 0851
Please, add your contact details if you don’t use MonoBank for donations, so they know how to find you in case you win.
P.S. Tomorrow I will send a new newsletter issue, that I should’ve sent yesterday.
#Donations #Ukraine
Today we have a Donations Monday with a twist.
We are raising funds for two foundations at the same time:
- For NayTak for camouflage nets.
- For UA Responders an IVL and a defibrillator for medics from Kraken.
The twist is that you can win a remnant of an S-300 rocket (on the picture).
Every donation for >50 UAH is a chance to win!
You can donate on:
- a Monobank jar: https://send.monobank.ua/jar/5SizeGGzBM
- top up the card directly: 5375 4112 1191 0851
Please, add your contact details if you don’t use MonoBank for donations, so they know how to find you in case you win.
P.S. Tomorrow I will send a new newsletter issue, that I should’ve sent yesterday.
#Donations #Ukraine
A new issue of the CatOps digest is here!
I know it’s not Sunday today, but better late than sorry.
https://newsletter.catops.dev/p/catops-digest-2024-03-05
#digest #newsletter
I know it’s not Sunday today, but better late than sorry.
https://newsletter.catops.dev/p/catops-digest-2024-03-05
#digest #newsletter
newsletter.catops.dev
CatOps Digest 2024-03-05
What was on CatOps in the last couple of weeks...
I know that many folks have a mix of corporate and private repositories on their laptops. By private, I mean their small projects,
Here's an interesting guide on one of the ways of how to keep separate users (email, signing key, name) for different repositories.
This would also work if you have repositories backed by different provides. For example, if you need to push to both GitHub and GitLab and use different SSH keys for that.
Here's a condensed version of this article on StackOverflow.
#git
dotfiles
repo, forks of public repositories, etc.Here's an interesting guide on one of the ways of how to keep separate users (email, signing key, name) for different repositories.
This would also work if you have repositories backed by different provides. For example, if you need to push to both GitHub and GitLab and use different SSH keys for that.
Here's a condensed version of this article on StackOverflow.
#git
DEV Community
Multiple Identity Gitconfig (with GPG signing)
Have you ever had these problems like I did? You work with multiple groups or companies, or you wan...
On behalf of the Architecture Stage organizational committee I want to invite you to the DOU Day Conference!
It’ll take place offline in Kyiv on the 18th of May.
The thing is that if you buy a ticket now, you will get -50% off for the second one. So, a great opportunity to grab some tickets together with your teammates.
#event
It’ll take place offline in Kyiv on the 18th of May.
The thing is that if you buy a ticket now, you will get -50% off for the second one. So, a great opportunity to grab some tickets together with your teammates.
#event
For today’s Donations Monday I want to remind you that a fundraiser from Come Back Alive for the Ukrainian snipers is still ongoing.
You can support it via this link: https://savelife.in.ua/sniping/
#donations #Ukraine
You can support it via this link: https://savelife.in.ua/sniping/
#donations #Ukraine
savelife.in.ua
Снайпінг - savelife.in.ua
Збираємо 220 мільйонів гривень для снайперів, які працюють на великі і надвеликі дистанції
A new episode of our voice chat (in Ukrainian) is here!
We discussed OpenTofu and Terraform's license change in general and tried to find people, who already migrated to the new tool.
The episode is available on:
- YouTube
- Substack
- Spotify
- Apple Podcasts
#voice_chat
We discussed OpenTofu and Terraform's license change in general and tried to find people, who already migrated to the new tool.
The episode is available on:
- YouTube
- Substack
- Spotify
- Apple Podcasts
#voice_chat
YouTube
Говорилка CatOps: OpenTofu vs Terraform
У цьому випуску шукаємо людей, що вже спробували пересісти на OpenTofu і готові поділитись своїми враженнями, а також обговорюємо ситуацію навколо зміни ліцензії Terraform в цілому.
Матеріали, що згадуються у випуску:
- https://blog.terramate.io/10-biggest…
Матеріали, що згадуються у випуску:
- https://blog.terramate.io/10-biggest…
The core idea of this article is pretty simple: you need to protect your Terraform states. I don't think this is a debatable topic, and anyone has a different opinion on this matter.
To quote the article itself:
However, in the very end, this article provides some suggestions that I never saw implemented IRL:
- Store the state lock in a separately permissioned location
- Use a read-only role for t
#terraform
To quote the article itself:
an attacker can modify the Terraform state file it’s game over and bad times ahead.
However, in the very end, this article provides some suggestions that I never saw implemented IRL:
- Store the state lock in a separately permissioned location
- Use a read-only role for t
erraform plan
executions#terraform
Plerion
Hacking Terraform State for Privilege Escalation
What can an attacker do if they can edit Terraform state? The answer should be 'nothing' but is actually 'take over your CI/CD pipeline'.
I don’t know how many of you here work with networks, but if you do, there’s a book bundle for you to check out.
#books
#books
Humble Bundle
Humble Tech Book Bundle: Networking by Packt
IT pros, level up your skill set with 20 books covering mission critical topics & career-boosting certs! Your purchase supports the Global Foodbanking Network.
For todays Donations Monday I want to share with you a fundraiser for 101 Starlink terminals by Dzyga Paw foundation:
https://dzygaspaw.com/starlinks-101
#Donations #Ukraine
https://dzygaspaw.com/starlinks-101
#Donations #Ukraine
I’m a bit busy this week, so there are going to be only some “low-effort” posts this week.
So, here’s a book bundle about data pipelines.
#books
So, here’s a book bundle about data pipelines.
#books
Humble Bundle
Humble Tech Book Bundle: Pipelines and NoSQL by O'Reilly
Tackle the most complex disciplines in the realm of data with 14 books on pipelines, privacy, machine learning & more! Your purchase helps Code for America.
A new (delayed) issue of the CatOps Digest is here!
https://newsletter.catops.dev/p/catops-digest-2024-03-24
Better late than never, right?
#digest #newsletter
https://newsletter.catops.dev/p/catops-digest-2024-03-24
Better late than never, right?
#digest #newsletter
newsletter.catops.dev
CatOps Digest 2024-03-24
What was on CatOps in the last few weeks