CatOps
DevOps and other issues by Yurii Rochniak (@grem1in) - SRE @ Preply && Maksym Vlasov (@MaxymVlasov) - Engineer @ Star. Opinions on our own. We do not post ads including event announcements. Please, do not bother us with such requests!
Mostrar más5 763
Suscriptores
+1824 horas
+397 días
+9630 días
Distribuciones de tiempo de publicación
Carga de datos en curso...
Find out who reads your channel
This graph will show you who besides your subscribers reads your channel and learn about other sources of traffic.
Análisis de publicación
| Mensajes | Vistas | Acciones | Ver dinámicas |
01 At last! A new issue of our Voice Chat is out! It took me way longer, because I had to switch from Davinci Resolve to Kdenlive, since Davinci doesn't really work on Linux despite their claims.
In any case, here we are. We talked about Jenkins this time: who uses it, why is it still in use, and what alternatives would we use instead.
The voice chat is in Ukrainian and is available on:
- YouTube
- Substack
- Spotify
- Apple Podcasts
- or via a direct RSS feed
#voice_chat #cicd #jenkins | 678 | 1 | Loading... |
02 For today's Donations Monday together with AWS Notes and UA Responders we are raising funds for rehabilitation of our warriors.
After the time in hospitals additional rehabilitation is still required for those who lost their limbs or eyesight. The goal of this fundraiser is to provide additional recovery courses for these people.
You can donate to the Monobank Jar:
https://send.monobank.ua/jar/4H6tH9GEPR
Or via a speacial Stripe link (Monobank jars do not always work with non-Ukrainian cards, at least for me).
https://bit.ly/43GbxKj
#donations #Ukraine | 982 | 0 | Loading... |
03 Two small security-related articles for you today.
- About vulnerabilities in AI and ML applications. tl;dr: with the raise of popularity of AI/ML applications, the number of potential security holes raises as well. Especially interesting is the fact, that sometimes hackers exploit the same attack vectors that were used against the web applications long ago and were mostly mitigated since then.
- A small excerpt from the DevOpsSec report if you'd rather stick with an "old and prooven" technology, there are some bad news for you as well - according to the DevSecOps2024 report, 90% of Java services have vulnerabilities.
#security | 1 660 | 11 | Loading... |
04 A couple of articles on how to improve your CLI experience.
- 7 Amazing CLI Tools You Won't Be Able To Live Without - I really enjoyed this one and borrowed some configuration from there. It also comes with a complimentary video, so you can see those configs in action.
- How I setup my terminal for max productivity - came in the Substack email today. This is basically just a list of many CLI tools, some of them are useful, others less so. You may find something for you there, though.
#cli #productivity | 1 544 | 40 | Loading... |
05 Ha! I was sure I shared this article with y'all before, but when I tried to find it on the channel today, I was unable to. In any case, even it was here, it won't hurt to repeat it.
So, here it is - Kubernetes: EKS, Calico and custom Admission Webhooks.
This article sheds some light on the EKS networking. The gist is that if you use anything except the native VPC CNI, your control plane pods (API, scheduler, etc.) and workload pods will end up in different networks, because you cannot install any custom pods into the control plane.
Unless you use admission webhooks, you probably won't even notice; but if you do, API won't be able to contact your admission controller pods without some workarounds.
This is the nature of managed services: you gain something - you loose something.
#kubernetes #eks #aws | 1 432 | 9 | Loading... |
06 For today’s Donations Monday I would like to remind you about the UA Responders foundation that raises funds for medical equipment.
I know these folks personally, so I can vouch for them.
#donations #Ukraine | 1 422 | 1 | Loading... |
07 A fresh issue of the CatOps Digest is here:
https://newsletter.catops.dev/p/catops-digest-2024-04-21
#digest #newsletter | 1 435 | 3 | Loading... |
08 Some lightweight read for you on Friday.
From the 80's to 2024 - how CI tests were invented and optimized sneak peeks into the history of automated testing. And evaluates possible future avenues where testing strategies could go.
Fun fact: Jenkins is apparently 20 years old. I didn't know that :D
Another fun fact: we had a voice chat about Jenkins recently. Yet, I still need to find some moral power to edit it.
#cicd | 1 664 | 10 | Loading... |
09 If you work with Kubernetes, there won't be any new information for you. However, when you encounter a namespace stuck in the "Termination" state the first time, it might be dumbfounding.
This article describes what to do in such situations. Also, it's good to learn about finalizers at some point anyway.
#kubernetes | 1 793 | 19 | Loading... |
10 I'm no Azure user - this thing came from the chat.
Azure has a collection of verified modules for Terraform and Bicep (their own IaC tool).
So, if you happened to work with Azure, check it out! Maybe, it could make your life a bit easier.
#iac #terraform #azure | 1 839 | 9 | Loading... |
11 I had a whole talk about testing of the Helm charts, but it's not the only (almost) YAML that you could test!
This blog post describes how one could test their Prometheus alerts. Which is more productive than waiting till something happens.
#observability#testing | 1 854 | 23 | Loading... |
12 or today's Donations Monday, I'd like to remind you about a big fundraiser by "Come Back Alive" to support the Ukrainian snipers there's still a long way to go, but the majority of the funds are already there.
#donations#Ukraine | 1 730 | 0 | Loading... |
13 A programming books bundle on Humble Bundle by Manning Press.
There are a couple of books that could be interesting to you, even if programming is not your primary occupation.
#books #programming | 2 393 | 4 | Loading... |
14 Despite a clickbait title, this is actually a good article with a list of good practices for Kubernetes.
tl;dr list:
- Use ephemeral contianers for debug
- Use admission controllers
- Kustomize is a nice tool
- Autoscale based on custom metrics if it makes sense
- Tweak API Priority and Fairness (APF) if it makes sense
- Submariner for multicluster (I have used other tools for multi-cluster, there are many ways of connecting clusters, so it's up to you to decide, what to use)
- Use Topology Spread Constraints
#kubernetes | 2 170 | 32 | Loading... |
15 Sometimes, people claim that I am anti-certifications, which is not true. I haven't had an experience in my life when I had to get a certificate for a new job or a promotion. However, if certification works for you, it's great!
Besides, until the 16th of April, you can buy courses from CNCF with 30% discount.
#courses #cncf | 1 888 | 3 | Loading... |
16 For today's Donations Monday we need to support a member of our community - Oleksa Baida, who's going to join the Armed Forces of Ukraine soon.
He managed to cover most of the equipment and medical expenses on his own, but there are still things left.
Monobank Jar:
https://send.monobank.ua/jar/7sYxdJPVuo
Top-up a card directly:
5375411215704862
Bank requisites:
Отримувач: Байда Олексій Сергійович
IBAN: UA383220010000026202344355441
ІПН/ЄДРПОУ: 3139812353
Призначення платежу: Поповнення рахунку банки
Also, if you want to meet Oleksa in person, there gonna be a gathering in Kyiv tomorrow at 19:00 (Kyiv time).
If you want to join, please, fill out this form, so he can book a place with enough space for everyone.
https://forms.gle/Q6P6bHLGJcCEpUps8
#donations #Ukraine | 1 812 | 0 | Loading... |
17 A new issue of the CatOps Newsletter is here:
https://newsletter.catops.dev/p/catops-digest-2024-04-07
#newsletter #digest | 1 799 | 3 | Loading... |
18 Friday is a great day to listen to our CatOps voice chat (in Ukrainian)! Especially, since the topic of this episode is mental health and management.
We kinda slipped into discussing management at some point.
You can find the episode on:
- YouTube
- Substack
- Spotify
- Apple Podcasts
- RSS Feed
Enjoy!
#voice_chat | 2 080 | 3 | Loading... |
19 I almost forgot to post it here.
Today I'm speaking at the GeekOpsUA Virtual Meetup (in Ukrainian) at 19:00 Kyiv time (18:00 CET).
There's no specific topic, it's going be just a fireside chat.
Here's the link you can join today
- GeekOpsUA on Telegram
- GeekOpsUA on LinkedIn
- GeekOpsUA on YouTube
See you there!
#event | 2 083 | 2 | Loading... |
20 A nice step-by-step guide of how to test a Python AWS Lambda function locally with LocalStack.
This guide doesn't cover fixtures in LocalStack, though. In my experience, adding fixtures into LocalStack is PITA, but I have a very specific scenario where I need to create a couple of thousands of S3 objects relatively fast.
#aws #serverless #python | 1 992 | 13 | Loading... |
21 For those who also had holidays.
Everything you need to know about the recent xz vulnerability in one place.
#security | 1 947 | 7 | Loading... |
At last! A new issue of our Voice Chat is out! It took me way longer, because I had to switch from Davinci Resolve to Kdenlive, since Davinci doesn't really work on Linux despite their claims.
In any case, here we are. We talked about Jenkins this time: who uses it, why is it still in use, and what alternatives would we use instead.
The voice chat is in Ukrainian and is available on:
- YouTube
- Substack
- Spotify
- Apple Podcasts
- or via a direct RSS feed
#voice_chat #cicd #jenkins
Jenkins
Цього разу діди наголосували тему Jenkins. Тож обговорюємо чи не першу CI/CD платформу, чому вона досі жива і популярна, а також, які ще варіанти існують на ринку. Музика на початку та в кінці випуску: Metre - Depth Charge
❤ 4🔥 2😁 2👍 1
YouTube
Substack
Spotify
Apple Podcasts
RSS feed
Support Ukraine 🇺🇦
For today's Donations Monday together with AWS Notes and UA Responders we are raising funds for rehabilitation of our warriors.
After the time in hospitals additional rehabilitation is still required for those who lost their limbs or eyesight. The goal of this fundraiser is to provide additional recovery courses for these people.
You can donate to the Monobank Jar:
https://send.monobank.ua/jar/4H6tH9GEPR
Or via a speacial Stripe link (Monobank jars do not always work with non-Ukrainian cards, at least for me).
https://bit.ly/43GbxKj
#donations #Ukraine
Безпечний переказ коштів
Надсилайте безкоштовно та безпечно кошти
❤ 5👍 3
Monobank Jar
Stripe link
Other ways to support Ukraine 🇺🇦
Two small security-related articles for you today.
- About vulnerabilities in AI and ML applications. tl;dr: with the raise of popularity of AI/ML applications, the number of potential security holes raises as well. Especially interesting is the fact, that sometimes hackers exploit the same attack vectors that were used against the web applications long ago and were mostly mitigated since then.
- A small excerpt from the DevOpsSec report if you'd rather stick with an "old and prooven" technology, there are some bad news for you as well - according to the DevSecOps2024 report, 90% of Java services have vulnerabilities.
#security
Vulnerabilities for AI and ML Applications are Skyrocketing
In their haste to deploy LLM tools, organizations may overlook crucial security practices. The rise in threats like Remote Code Execution indicates an urgent need to improve security measures in AI development.
🔥 3
Vulnerabilities for AI and ML Applications are Skyrocketing
90% of Java Services in Production Have Vulnerability Risk, DevSecOps Report Finds
Support Ukraine 🇺🇦
A couple of articles on how to improve your CLI experience.
- 7 Amazing CLI Tools You Won't Be Able To Live Without - I really enjoyed this one and borrowed some configuration from there. It also comes with a complimentary video, so you can see those configs in action.
- How I setup my terminal for max productivity - came in the Substack email today. This is basically just a list of many CLI tools, some of them are useful, others less so. You may find something for you there, though.
#cli #productivity
7 Amazing CLI Tools You Won't Be Able To Live Without
These are 7 amazing cli tools that are incredibly helpful when working on the terminal. There's no going back once you try them!
❤ 3🔥 1
7 Amazing CLI Tools You Won't Be Able To Live Without
How I setup my terminal for max productivity
Support Ukraine 🇺🇦
Ha! I was sure I shared this article with y'all before, but when I tried to find it on the channel today, I was unable to. In any case, even it was here, it won't hurt to repeat it.
So, here it is - Kubernetes: EKS, Calico and custom Admission Webhooks.
This article sheds some light on the EKS networking. The gist is that if you use anything except the native VPC CNI, your control plane pods (API, scheduler, etc.) and workload pods will end up in different networks, because you cannot install any custom pods into the control plane.
Unless you use admission webhooks, you probably won't even notice; but if you do, API won't be able to contact your admission controller pods without some workarounds.
This is the nature of managed services: you gain something - you loose something.
#kubernetes #eks #aws
Kubernetes: EKS, Calico and custom Admission Webhooks
Timeout problems
Kubernetes: EKS, Calico and custom Admission Webhooks
Support Ukraine 🇺🇦
For today’s Donations Monday I would like to remind you about the UA Responders foundation that raises funds for medical equipment.
I know these folks personally, so I can vouch for them.
#donations #Ukraine
UA Responders
Other ways to support Ukraine 🇺🇦
A fresh issue of the CatOps Digest is here:
https://newsletter.catops.dev/p/catops-digest-2024-04-21
#digest #newsletter
CatOps Digest 2024-04-21
What was on CatOps in the last few weeks
👍 4❤ 1
CatOps Digest 2024-04-21
Support Ukraine 🇺🇦
Some lightweight read for you on Friday.
From the 80's to 2024 - how CI tests were invented and optimized sneak peeks into the history of automated testing. And evaluates possible future avenues where testing strategies could go.
Fun fact: Jenkins is apparently 20 years old. I didn't know that :D
Another fun fact: we had a voice chat about Jenkins recently. Yet, I still need to find some moral power to edit it.
#cicd
From the 80's to 2024 - how CI tests were invented and optimized
While Google started automating its build tests in 2003, the engineering industry took longer to do the same. But automation was sorely needed: Software systems are growing larger and ever more complex… To make matters worse, new versions are pushed to users frequently, sometimes multiple times each day. This is a far cry from the world of shrink-wrapped software that saw updates only once or twice a year. The ability for humans to manually validate every behavior in a system has been unable to keep pace with the explosion of features and platforms in most software. - Software Engineering at Google
https://abseil.io/resources/swe-book/html/ch11.html#testing_overviewAdd author/source Sun Microsystem’s engineer, Kohsuke Kawaguchi, was key to ushering in the next era of testing. In 2004, he created “Hudson”
https://community.jenkins.io/t/lets-thank-kohsuke-the-creator-of-jenkins/168(later renamed to Jenkins in fun Oracle drama). At his day job, Kohsuke “got tired of incurring the wrath of his team every time…
🔥 3
How CI tests were invented and optimized
Support Ukraine 🇺🇦
If you work with Kubernetes, there won't be any new information for you. However, when you encounter a namespace stuck in the "Termination" state the first time, it might be dumbfounding.
This article describes what to do in such situations. Also, it's good to learn about
finalizers at some point anyway.
#kubernetesResolve Stuck Namespaces in Kubernetes: A Step-by-Step Tutorial
🔥 3
Resolve Stuck Namespaces in Kubernetes: A Step-by-Step Tutorial
Support Ukraine 🇺🇦
I'm no Azure user - this thing came from the chat.
Azure has a collection of verified modules for Terraform and Bicep (their own IaC tool).
So, if you happened to work with Azure, check it out! Maybe, it could make your life a bit easier.
#iac #terraform #azure
👍 3
Azure Verified Modules
Support Ukraine 🇺🇦