DevOps&SRE Library

What is it? How does it work? When to use it and when not to use it?

Reliable software design is a discipline that involves a careful balance of numerous principles, each of which is intended to ensure the development of high-quality software that meets the needs of users and stakeholders.

hi! this article is aimed at folks who are interested in performance analysis or operations of software, and want to understand the impact on user experience. the examples will be centered around web applications and web services, but can be applied in other contexts as well.

We are going to describe how CloudFront can be integrated with API Gateway to provide lower-latency. And we will go through the attributes of the CloudFront resources in Terraform, including the ones that we need to create the distribution and configure origins and behaviors.

- Consulting
- Embedded
- Infra Team

tfvar is a Terraform's variable definitions template generator. It scans your Terraform configurations or modules and extracts the variables into formats of your choice for editing, e.g., tfvar, environment variables, etc.

This is an implementation of the Terraform registry protocol used to host a private Terraform registry.

Terragrunt alternative to keep your Terraform code consistent and DRY

Leveraging Terraform to automate the setup and configuration of SSO resources, streamline user management, and enhance security.

We investigated Crossplane at a deep level and found it wasn't for us. Read on to learn about our investigation and the issues we found.

TL:DR At Spotify, we run containerized workloads in production across our entire organization in five regions where our main production workloads are in Google Kubernetes Engine (GKE) on Google Cloud Platform (GCP). If we detect suspicious behavior in our workloads, we need to be able to quickly analyze it and determine if something malicious has happened. Today we leverage commercial solutions to monitor them, but we also do our own research to discover options and alternative methods.

One such research project led to the discovery of a new method for conducting memory analysis on GKE by combining three open source tools, AVML, dwarf2json, and Volatility 3, the result being a snapshot of all the processes and memory activities on a GKE node.

This new method empowers us and other organizations to use an open source alternative if we do not have a commercial solution in place or if we want to compare our current monitoring to the open source one.

In this blog post, I’ll explain in detail how memory analysis works and how this new method can be used on any GKE node in production today.