CatOps

30 May 2024 11:54

As you may know, I'm a part of the DevOps Days Ukraine organizers committee, and I'm proud to finally present you this year conference!

This year, the focus of the conference is security.

We'll discuss context-based security, cloud hacking scenarios, information security in the cloud, defense against cyberattacks and the complexities of cyber warfare, vulnerability management implementation with AWS services, OWASP Top Web Application Security Risks, and more.

Just to name a few speakers: Nazar Tymoshyk — CERT-UA State Communications Engineer, Anastasiia Voitova — Head of Security Engineering at Cossack Labs, Brian Tarbox — Principal Solutions Architect at Caylent, Rotem Refael — Director of Engineering and open-source ARMO, and many more!

Check out the agenda & register for free 👉 https://www.devopsdays.com.ua

When? June 4-5
Where? Online

And of course, there are going to be open space discussions after each day of the conference!

See you there!

CatOps

28 May 2024 12:15

An old but great article about load balancing by Matt Klein - the creator of Envoy Proxy.

"Load balancing" is the term we often throw around, so it's always a good thing to take a glance on how does it work.

Another old article is a comparison of the circuit breaking functionality between Envoy (and inherently Istio) and Netflix Hystrix, which is a dedicated circuit breaker library.

#networking

CatOps

22 May 2024 12:16

​​This channel was created exactly 7 years ago. So yeah, today is CatOps' bithday!

Fun fact: this channel had a different name when it was created, but was renamed to CatOps shortly after.

Another fact: y'all know that I usually post donation requests on Mondays, but again, we kinda have a special occasion today. There's a long-standing tradition to give presents on one's birthday. You can give CatOps a little birthday present by donating for FPV drones for Territorial Defense of Mykolaiv.

Each 20k UAH is a single drone, so let's see how many we can get! You can donate via this Monobank jar:

https://send.monobank.ua/jar/3u6w8ar23z

to this card directly: 5375 4112 1759 7652

#catops #birthday #donations #Ukraine

CatOps

19 May 2024 10:26

There are discounts on Linux Foundation’s courses again.

So, if you want to get certified, it might be a good chance now!

#courses

CatOps

15 May 2024 09:03

Some say that 2024 will finally be a year of serverlessless /s

So, here’s a comparison from Ahrefs of their costs of running physical data centers vs running in a cloud.

However, many these comparisons lack an important point. At least, Ahrefs acknowledges that:

 article doesn’t take into account other aspects that would make the comparison even more complicated. These include people skills, financial controls, cash flow, capacity planning depending on the load type, etc.

CatOps

12 May 2024 15:54

A new issue of the CatOps digest is here, even though it's one week late:

https://newsletter.catops.dev/p/catops-digest-2024-05-12

#digest #newsletter

CatOps

08 May 2024 13:05

The biggest problem in software engineering is distractions.

This is what this article is about. So, I have distracted myself to read it and now I'm distracting you with this post.

Enjoy!

#culture

CatOps

06 May 2024 14:08

​​A friend of mine is raising funds for an FPV complex for his brother that works as an instructor in the Foreign Legion.

Monobank Jar:
https://send.monobank.ua/jar/2P9ANBRRp4

Card number: 5375411213105070

The goal is 125k UAH and we're almost there.

You can find more info about this fundraiser (in Ukrainian) via these links:

- https://www.instagram.com/reel/C6eCeExtr9B/?igsh=MXM2aHJ4NTc3ejB6eQ==
- https://www.facebook.com/share/v/BvQUapoc2j7jyr3E/?

CatOps

02 May 2024 13:49

A couple of articles I stumbled upon when researching some things for work.

- You can use ARG in the FROM definition in a Dockerfile. I didn't know that it's possible. Back in a day I tried using ENV there and it didn't work, so I assumed it's non-configurable. Apparently, it is. You may argue if it's a good practice to alter the FROM configuration this way, but I can clearly see use cases for that.

- A workaround for Terraform's `default_tags` definition. This way you can "exclude" the default_tags for some resoures in Terraform. For example, if you're using the default subnets, etc. that were imported in Terraform. You cannot change tags for those things in AWS, so you need to workaround that. Again, using defaults in AWS is probably not a good practice, but sometimes those things are in use for historical reasons, etc.

Again, these two articles have no relation whatsoever, just want to share them with you.

#aws #terraform #docker

CatOps

30 Apr 2024 11:45

At last! A new issue of our Voice Chat is out! It took me way longer, because I had to switch from Davinci Resolve to Kdenlive, since Davinci doesn't really work on Linux despite their claims.

In any case, here we are. We talked about Jenkins this time: who uses it, why is it still in use, and what alternatives would we use instead.

The voice chat is in Ukrainian and is available on:

- YouTube
- Substack
- Spotify
- Apple Podcasts
- or via a direct RSS feed

#voice_chat #cicd #jenkins

CatOps

25 Apr 2024 16:28

Two small security-related articles for you today.

- About vulnerabilities in AI and ML applications. tl;dr: with the raise of popularity of AI/ML applications, the number of potential security holes raises as well. Especially interesting is the fact, that sometimes hackers exploit the same attack vectors that were used against the web applications long ago and were mostly mitigated since then.
- A small excerpt from the DevOpsSec report if you'd rather stick with an "old and prooven" technology, there are some bad news for you as well - according to the DevSecOps2024 report, 90% of Java services have vulnerabilities.

#security

CatOps

23 Apr 2024 11:28

Ha! I was sure I shared this article with y'all before, but when I tried to find it on the channel today, I was unable to. In any case, even it was here, it won't hurt to repeat it.

So, here it is - denisstortisilva/kubernetes-eks-calico-and-custom-admission-webhooks-a2956b49bd0d">Kubernetes: EKS, Calico and custom Admission Webhooks.

This article sheds some light on the EKS networking. The gist is that if you use anything except the native VPC CNI, your control plane pods (API, scheduler, etc.) and workload pods will end up in different networks, because you cannot install any custom pods into the control plane.

Unless you use admission webhooks, you probably won't even notice; but if you do, API won't be able to contact your admission controller pods without some workarounds.

This is the nature of managed services: you gain something - you loose something.

#kubernetes #eks #aws

CatOps

21 Apr 2024 12:44

A fresh issue of the CatOps Digest is here:

https://newsletter.catops.dev/p/catops-digest-2024-04-21

#digest #newsletter

CatOps

18 Apr 2024 12:08

If you work with Kubernetes, there won't be any new information for you. However, when you encounter a namespace stuck in the "Termination" state the first time, it might be dumbfounding.

This article describes what to do in such situations. Also, it's good to learn about finalizers at some point anyway.

#kubernetes

CatOps

16 Apr 2024 15:42

I had a whole talk about testing of the Helm charts, but it's not the only (almost) YAML that you could test!

This blog post describes how one could test their Prometheus alerts. Which is more productive than waiting till something happens.

#observability#testing

CatOps

29 May 2024 19:06

Yet another DevOps books bundle by Packt.

I’m not familiar with many of these books, so I cannot vouch for any of them, but this bundle is also cheaper compared to those from O’Reilly.

#books

CatOps

23 May 2024 11:37

Another book bundle for y’all!

This time it specifically focuses on DevOps.

One of the books there - “How Linux Works” was a book I used to learn Linux back in a day. I have been always recommending it and I cannot recommend it more.

So yeah, that’s a good bundle. I would buy it just for that one book. However, there are some other great books as well.

#books

CatOps

21 May 2024 15:37

As you may have already heard, there's a new joint fundraiser by the Comeback Alive foundation and DOU.ua.

The goal is to raise 50M UAH for equipment for the 95th Assault Brigade. They also have a raffle for a car among those who has donated between 18th of May and 24th of August. So, I dunno, maybe you also need a car.

#donations #Ukraine

CatOps

17 May 2024 14:42

We are all aware of questinos like: "What happens when you type google.com in a browser?" or "What happens when you do kubectl apply?", but do you know What Happens on GitLab When You do git push?

#gitlab #git #cicd

CatOps

13 May 2024 12:42

​​Dzyga's Paw foundation raises money for anti-drone systems, which are crucially important for our defenders.

You can read more about this fundraiser here.

The goal is $30 000.

#donations #Ukraine

CatOps

09 May 2024 13:39

This may not classify as a technical post per-se, but apparently you can run amplification attacks using Mastodon - a popular open-source decentralized social network.

The idea is very simple: when you post a link, it will try to fetch a preview. Since this is a decentralized platform, each federated node will try to fetch assets on its own.

And this issue just exists. Frankly, I don’t think the mitigation is any different from a generic DDoS protection. It’s just an interesting fact about federated social networks.

P.S. Now, I wonder if Blue Sky has this problem as well.

#security

CatOps

07 May 2024 15:51

Go is super popular in platform engineering. Just recently I participated in a discussion about it on Reddit :D

And at last, HumbleBundle has a book collection dedicated to this language!

#go #programming #books

CatOps

03 May 2024 08:17

https://itnext.io/benchmark-results-of-kubernetes-network-plugins-cni-over-40gbit-s-network-2024-156f085a5e4e

CatOps

01 May 2024 13:36

A curious story about S3 billing. So, AWS charges you for unauthorized access attempts to your buckets. Thus, it’s possible to maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1">create an attack to inflate someone’s AWS bill if you know the buckets’ names.

Honestly, I’m not sure what’s the moral of this story. Make your buckets private unless public access is strictly required. Do not use common names or if you have to, use prefixes or/and suffixes to distinguish buckets or randomize the names.

#aws #s3 #security

CatOps

29 Apr 2024 16:21

For today's Donations Monday together with AWS Notes and UA Responders we are raising funds for rehabilitation of our warriors.

After the time in hospitals additional rehabilitation is still required for those who lost their limbs or eyesight. The goal of this fundraiser is to provide additional recovery courses for these people.

You can donate to the Monobank Jar:
https://send.monobank.ua/jar/4H6tH9GEPR

Or via a speacial Stripe link (Monobank jars do not always work with non-Ukrainian cards, at least for me).
https://bit.ly/43GbxKj

#donations #Ukraine

CatOps

24 Apr 2024 12:22

A couple of articles on how to improve your CLI experience.

- 7 Amazing CLI Tools You Won't Be Able To Live Without - I really enjoyed this one and borrowed some configuration from there. It also comes with a complimentary video, so you can see those configs in action.
- How I setup my terminal for max productivity - came in the Substack email today. This is basically just a list of many CLI tools, some of them are useful, others less so. You may find something for you there, though.

#cli #productivity

CatOps

22 Apr 2024 11:45

​​For today’s Donations Monday I would like to remind you about the UA Responders foundation that raises funds for medical equipment.

I know these folks personally, so I can vouch for them.

#donations #Ukraine

CatOps

19 Apr 2024 14:15

Some lightweight read for you on Friday.

From the 80's to 2024 - how CI tests were invented and optimized sneak peeks into the history of automated testing. And evaluates possible future avenues where testing strategies could go.

Fun fact: Jenkins is apparently 20 years old. I didn't know that :D
Another fun fact: we had a voice chat about Jenkins recently. Yet, I still need to find some moral power to edit it.

#cicd

CatOps

17 Apr 2024 14:36

I'm no Azure user - this thing came from the chat.

Azure has a collection of verified modules for Terraform and Bicep (their own IaC tool).

So, if you happened to work with Azure, check it out! Maybe, it could make your life a bit easier.

#iac #terraform #azure

CatOps

15 Apr 2024 14:01

or today's Donations Monday, I'd like to remind you about a big fundraiser by "Come Back Alive" to support the Ukrainian snipers there's still a long way to go, but the majority of the funds are already there.

#donations#Ukraine