DevOps&SRE Library

- Consulting
- Embedded
- Infra Team

tfvar is a Terraform's variable definitions template generator. It scans your Terraform configurations or modules and extracts the variables into formats of your choice for editing, e.g., tfvar, environment variables, etc.

This is an implementation of the Terraform registry protocol used to host a private Terraform registry.

Terragrunt alternative to keep your Terraform code consistent and DRY

Leveraging Terraform to automate the setup and configuration of SSO resources, streamline user management, and enhance security.

We investigated Crossplane at a deep level and found it wasn't for us. Read on to learn about our investigation and the issues we found.

TL:DR At Spotify, we run containerized workloads in production across our entire organization in five regions where our main production workloads are in Google Kubernetes Engine (GKE) on Google Cloud Platform (GCP). If we detect suspicious behavior in our workloads, we need to be able to quickly analyze it and determine if something malicious has happened. Today we leverage commercial solutions to monitor them, but we also do our own research to discover options and alternative methods.

One such research project led to the discovery of a new method for conducting memory analysis on GKE by combining three open source tools, AVML, dwarf2json, and Volatility 3, the result being a snapshot of all the processes and memory activities on a GKE node.

This new method empowers us and other organizations to use an open source alternative if we do not have a commercial solution in place or if we want to compare our current monitoring to the open source one.

In this blog post, I’ll explain in detail how memory analysis works and how this new method can be used on any GKE node in production today. 

The Saga pattern is often positioned as a better way to handle distributed transactions. I see no point in discussing Saga's disadvantages because the problem is that Saga should not be used in the microservices at all:

If you need distributed transactions across a few microservices, most likely you incorrectly defined and separated domains.

Below is a long explanation why.

Command line tool allowing to convert the barely usable output of the terraform graph command to something more meaningful and explanatory.

A solution for versioning multiple Terraform module while preserving your Monorepo