Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the next frontier of Kubernetes security: automation through AI and ML.

1. GitLab recently announced a new AI-driven security feature that uses a large language model to explain potential vulnerabilities to developers, with plans to expand this to automatically resolve these vulnerabilities using AI in the future.

https://techcrunch.com/2023/04/24/gitlabs-new-security-feature-uses-ai-to-explain-vulnerabilities-to-developers/

2. According to the 2023 Global DevSecOps Report by GitLab, organizations are incorporating security earlier in the development lifecycle, with more vulnerabilities discovered through artificial intelligence for security testing and code checks.

https://learn.gitlab.com/devsecops-survey-2023/2023-devsecops-report-security

3. There are many factors that can expose your Kubernetes cluster to attacks; configuration issues, exposed Kubernetes APIs, insecure containers, and more. Here’s a list of useful automated security scanners for your clusters.

https://towardsdev.com/12-scanners-to-find-security-vulnerabilities-and-misconfigurations-in-kubernetes-332a738d076d

4. Kuasar is an efficient container runtime that provides cloud-native, all-scenario container solutions by supporting multiple sandbox techniques. Written in Rust, it offers a standard sandbox abstraction based on the sandbox API.

https://kuasar.io/

5. Have you seen The Illustrated TLS 1.3 Connection? Every byte sent back and forth is explained and reproduced, in this demonstration where a client connects to a server, negotiates a TLS 1.3 session, sends „ping“, receives „pong“, and then terminates the session.

https://tls13.xargs.org/

Have you automated your security checks in your clusters? Are you using AI to manage your container deployments? Would you like to share tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about security: #8, #17, #22, #27, #32, #44, #54, #62, #76, #84, #93, #106, #117, #128, #142, #145, #164, and #169.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about how the current uncertain economic landscape could mean good news for the environment.

1. At the beginning of this year, the CNCF stated FinOps in one of its predictions for 2023. But what is FinOps? How can you implement it? And what benefits does it bring? This article provides a clear answer to these questions and more.

https://www.cncf.io/blog/2023/02/08/how-to-implement-finops-and-increase-your-kubernetes-cost-avoidance/

2. Amazon EKS released last year support for Kubernetes 1.24, with many interesting new features, including the ability to scale EKS managed node groups to (and from) zero. How does that work? Re Alvarez Parmar from AWS explains it all in detail.

https://blog.realvarez.com/reduce-amazon-eks-cost-by-scaling-node-groups-to-zero/

3. Red Hat has improved the integration of its Hybrid Cloud Console with Microsoft Azure, making it easier than ever to view the cost of running Red Hat OpenShift deployed on Azure.

https://www.redhat.com/en/blog/track-your-openshift-costs-more-easily-azure-new-and-improved-capabilities-red-hat-cost-management

4. Reducing your cloud consumption costs can be a bonus for the planet. This is why the IT team at AXA France published a project on GitHub to switch off all running pods on your Kubernetes namespaces, for example on weekends or holidays. Because every kilowatt counts.

https://github.com/AxaFrance/dailyclean

5. Red Hat is looking into ways to help organizations reduce their carbon footprint thanks to Kepler, their „Kubernetes-based Efficient Power Level Exporter,“ an open-source project based on eBPF, to help enterprises better understand their energy consumption and carbon footprint.

https://www.redhat.com/en/blog/how-kepler-project-working-advance-environmentally-conscious-efforts

Have you implemented FinOps in your organization? Do you GreenOps and remove unused pods from your clusters? Would you like to share some eco-friendly tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about business: #15, #26, #35, #41, #70, #112, #141, #159, and #176.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the most interesting stories of the latest KubeCon+CloudNativeCon 2023 last week in Amsterdam.

1. Last week at KubeCon was the world premiere of „Inside Envoy: The Proxy for the Future“, the Envoy project documentary, now available for everyone to watch online. The film narrates the journey from inception to adoption of the fast-rising and industry changing edge and service proxy.

https://envoyprojectdocumentary.com/

2. The Cloud Native Glossary aims to make the cloud native space–which is notorious for its complexity–simpler by making it easier to understand, not only for technologists but also for those on the business side.

https://glossary.cncf.io/

3. The CNCF introduced the Spring 2023 class of Cloud Native Ambassadors, and at VSHN we’re very proud to have a VSHNneer among the ambassadors as well. Congratulations to all!

https://www.cncf.io/blog/2023/04/19/introducing-our-spring-2023-cloud-native-ambassadors/

4. The CNCF announced that Mercedes-Benz Tech Innovation GmbH has won the CNCF End User Award in recognition of its achievements in cloud native development and notable contributions to the cloud native ecosystem. Congratulations!

https://www.cncf.io/announcements/2023/04/21/cncf-presents-top-end-user-award-to-mercedes-benz-tech-innovation/

5. We were proud and happy to talk to people about K8up, our beloved Kubernetes backup operator, at the project kiosk! Not only that, but we published a short video introducing K8up, have you seen it?

https://www.youtube.com/watch?v=L1xqKtDVGDs

Did you attend KubeCon+CloudNativeCon Europe last week? What was your favorite shiny new thing you discovered at KubeCon? Would you like to share it with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about conferences: #19, #20, #56, #57, #90, #91, #170, and #179.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the event of the week: KubeCon + CloudNativeCon Europe 2023.

1. This year a record of 8 VSHNeers (including yours truly) will attend Kubecon + CloudNativeCon Europe 2023, not only to learn spectacular new things, but also to meet new people, and to get to know new products at the sponsors‘ booths. And guess what? We’ll also host a K8up kiosk, where you can meet VSHNeers every day to learn more about K8up, our great Kubernetes backup operator. Let’s meet at kiosk K25 of the Project Pavilion!

https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/program/project-engagement/#project-pavilion

2. I’m interested in Adam Wolfe Gordon’s talk „What Happened to the Service Catalog?“ because we’be been building our own service catalog with Crossplane, and I’m curious about what others are doing with it.

https://kccnceu2023.sched.com/event/1HyVZ/what-happened-to-the-service-catalog-adam-wolfe-gordon-digitalocean?iframe=no

3. How do projects graduate from the CNCF? Will K8up graduate one day, too? The talk „Going for Graduation: Crossing the Chasm“ by Katie Gamanji and Bill Mulligan has probably the answer.

https://kccnceu2023.sched.com/event/1HyWR/going-for-graduation-crossing-the-chasm-bill-mulligan-isovalent-katie-gamanji-apple?iframe=no

4. Here’s a talk dear to my heart: Alanna Burke, one of our dear friends at amazee.io, will elaborate on „Creating a Culture of Documentation“ and I can’t wait to listen to what she’s got to say.

https://kccnceu2023.sched.com/event/1HyZy/creating-a-culture-of-documentation-alanna-burke-amazeeio?iframe=no

5. The talk „Kubernetes Database Operators Landscape“ is particularly interesting for us because StackGres is a core component of our VSHN Application Catalog.

https://kccnceu2023.sched.com/event/1HyZU/kubernetes-database-operators-landscape-xing-yang-vmware-melissa-logan-constantiaio-sergey-pronin-percona-alvaro-hernandez-ongres?iframe=no

Are you attending Kubecon + CloudNativeCon Europe 2023 too? What talks are you the most curious about? Would you like to recommend some other conferences to our readers? Get in touch with us, let’s meet at KubeCon (here’s my schedule by the way!), and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about conferences: #19, #20, #56, #57, #90, #91, and #170.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to celebrate various anniversaries and birthdays of iconic companies and technologies shaping our world.

1. Last month, our friends at Exoscale celebrated their 10th anniversary! They are one of the pillars of the privacy-friendly Swiss cloud, and we couldn’t be prouder to partner with them in various ways.

https://www.youtube.com/watch?v=xVH06Lg4hoA

2. Red Hat recently celebrated 30 years since its incorporation by Bob Young and Marc Ewing. Back then, Linux was not the juggernaut it is today, but their bet worked, and today we’re thrilled to be a Red Hat Premier CCSP Business Partner!

https://www.redhat.com/en/blog/red-hat-30th-anniversary-celebrating-red-hat-day-north-carolina

3. 50 years ago, a computer system created by Xerox featured a graphical display, a mouse, a „WYSIWYG“ word processor, and an object-oriented programming environment. Sounds familiar?

https://spectrum.ieee.org/xerox-alto

4. 25 years ago, the W3C released the first version of the XML standard. A major milestone, even though these days we’re more used to dealing with YAML or JSON files, to be honest. Well, unless you’re writing apps for Java or .NET, that is.

https://www.w3.org/TR/1998/REC-xml-19980210

5. Did you know we’re less than 15 years away from the Epochalypse? (aka the „Y2038 Problem“) That’s the moment when 32 bits won’t be enough to store date and time values anymore: January 19th, 2038.

https://www.epochalypse.today/

What other technologies or companies have celebrated their birthday recently? Are you ready for the Epochalypse? Would you like to share some anniversary dates with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about random stuff: #24, #36, #69, #73, #86, #94, #100, #123, #147, and #168.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about some interesting developments in the hardware space, including broken coffee machines.

1. Our friends at Init7 made us laugh recently when they reported on their status page that their coffee machine wasn’t working. Maybe it was a teapot screaming HTTP code 418 out loud instead?

https://as13030.net/status/?ticket=YOLO-420

2. It’s sad, but the Raspberry Pi has lost quite a bit of its appeal recently. This is why we were happy to learn about the Orange Pi single-board computer and its impressive feature set.

http://www.orangepi.org/html/hardWare/computerAndMicrocontrollers/details/Orange-Pi-5.html

3. We also like a lot Minifree, who sells secure, high-quality systems with FOSS pre-installed, with Libreboot and encrypted Debian pre-installed with KDE Plasma, including full driver support.

https://minifree.org/

4. In the market for SSDs? Check out the 2022 Drive Stats Review SSD Edition by Backblaze, based on their experience running storage solutions with large numbers of solid-state drives.

https://www.backblaze.com/blog/ssd-edition-2022-drive-stats-review/

5. Researchers at Princeton University and the University of Washington have developed an ultra-compact camera the size of… a coarse grain of salt. Hard to believe, but true.

https://engineering.princeton.edu/news/2021/11/29/researchers-shrink-camera-size-salt-grain

Does your teapot respond to queries with a 418? What is your preferred single-board computer? Would you like to share other cool gadgets with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about hardware: #80, #113, #135, and #149.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about how the latest developments in AI will reshape the world of Cloud Native platforms and apps.

1. Last week, GitHub announced GitHub Copilot X, following a streak of announcements including Microsoft 365 Copilot and Bill Gates himself explaining to us how the age of AI has begun. But rest assured, Bing won’t harm you unless you harm it first.

https://github.blog/2023-03-22-github-copilot-x-the-ai-powered-developer-experience/

2. The Open-Source community jumped to the challenge and here’s fauxpilot, an attempt to build a locally hosted version of GitHub Copilot. The race for ethical and open AI is on.

https://github.com/fauxpilot/fauxpilot

3. AWS is also jumping onto the AI bandwagon, this time integrating the AWS Chatbot directly into Microsoft Teams, to interact with your cloud infrastructure directly from the comfort of your chat window: „Alexa, provision more S3 buckets, please.“

https://www.infoworld.com/article/3691291/aws-chatbot-now-integrated-into-microsoft-teams.html

4. What kind of Kubernetes cluster is using OpenAI? Matt Rickard says it’s a cluster with more than 7500 nodes, well beyond the maximum advertised capacity of 5000 nodes for a Kubernetes cluster.

https://matt-rickard.com/on-openais-kubernetes-cluster

5. What happens when an AI talks to another? At this time in history, a misinformation shitshow. Take for example what happened when Microsoft Bing talked to Google Bard… not pretty.

https://www.theverge.com/2023/3/22/23651564/google-microsoft-bard-bing-chatbots-misinformation

Are you using GitHub Copilot (or fauxpilot) in your day-to-day work? How big is your biggest Kubernetes cluster? Would you like to share some artificial intelligence tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about business: #15, #26, #35, #41, #70, #112, #141, and #159.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about how to cope with the Dark Side of the Moon IT industry: outages, misunderstandings, and printers.

1. A few days ago, we received an email from Docker where they announced the sunsetting of open-source organizations, which raised a few concerns. It felt like the lunatic was on the grass. Well, it turns out the wording was poor, and Docker publicly apologized for that.

https://www.docker.com/blog/we-apologize-we-did-a-terrible-job-announcing-the-end-of-docker-free-teams/

2. Reliability is a very complex and concerning topic. If you don’t believe us, ask the team at fly.io instead, who recently posted an apology for their issues in the user forum. They got to keep the loonies on the path.

https://community.fly.io/t/reliability-its-not-great/11253

3. Like so many things in life, working in the IT industry has its bad as well as good sides. You don’t have to be crazy to work here… but it helps a lot, particularly if they lock the door and throw away the key.

https://speakerdeck.com/ddeimeke/warum-man-nicht-in-der-it-arbeiten-sollte-und-warum-wir-es-trotzdem-tun

4. Have you checked your burnout index yet? Here’s a short quiz that will give you a concrete score of your current stress levels, useful if your head explodes with dark forebodings too.

https://burnoutindex.yerbo.co/

5. You know what drives IT people crazy? Printers. Well, here’s one that will actually work, even if the band you’re in starts playing different tunes.

https://www.theverge.com/23642073/best-printer-2023-brother-laser-wi-fi-its-fine

Does the Cloud bursts thunder in your ear? Do you shout and no one seems to hear? Would you like to share some tips and tricks with our readers? Get in touch with us, and see you on the dark side of the moon next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about PeopleOps: #7, #13, #15, #26, #35, #41, #52, #63, #85, #92, #116, #131, and #154.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about developers self-hosting their applications, far away from the comfort of third-party providers.

1. We’re all happy consumers of SaaS applications… until their subscription price increase drastically, their privacy policy changes for the worst, or else. That’s when self-hosting sounds appealing. But what’s the real cost? Tedium explores the case for alternative analytics, email, and calendar tools.

https://tedium.co/2023/03/04/self-hosted-saas-app-alternatives/

2. One of the perks of having a successful product is the fame and the riches. Another is… well, the challenge of making a reliable and efficient service for millions of users. Take Discord for example: this is how they store trillions of messages in ScyllaDB.

https://discord.com/blog/how-discord-stores-trillions-of-messages

3. Whatever new single-page application you build and self-host these days, you might want to run it on an energy-efficient ARM system, and thankfully Bitnami has just added ARM support to their trusty containers.

https://blog.bitnami.com/2023/02/bitnami-arm-containers-available-at.html

4. The whole issue about self-hosting or not has to do with trust, just like with TLS and certificates. As the Joker rightfully asked, who do you trust? On the Jetstack blog, Ashley Davis explains how trust-manager orchestrates X.509 certificates on your clusters.

https://www.jetstack.io/blog/trust-manager/

5. Here’s an excellent idea: how about making self-documenting Makefiles? A simple trick that we use at VSHN every day to help us self-host our own systems.

https://marmelab.com/blog/2016/02/29/auto-documented-makefile.html

Do you self-host your own cloud applications? Have you documented your Makefiles yet? Who do you trust? Would you like to share any other tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about programming: #18, #30, #33, #47, #50, #60, #77, #88, #101, #103, #122, #137, and #160.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the latest news around Git, GitHub, GitLab, and GitOps.

1. GitLab decided to integrate Flux CD, a mature GitOps solution, with the GitLab agent for Kubernetes. Why did they choose Flux instead of, say, ArgoCD or other options? Learn about their reasons on this blog post.

https://about.gitlab.com/blog/2023/02/08/why-did-we-choose-to-integrate-fluxcd-with-gitlab/

2. Some recent public betas from the GitHub Engineering team: pull request merge queues (increasing velocity by automating merges into your busiest branches) and code search and code view (helping developers search, navigate, and understand code.)

https://github.blog/changelog/2023-02-23-no-more-waitlist-code-search-and-code-view-are-available-to-all-in-public-beta/

3. The next cdCon + GitOpsCon will take place from May 8th and 9th in Vancouver, Canada! Yes, precisely where we opened shop last year. If you happen to be around, come and say hi! In the meantime, check the CD Foundation Best Practices website.

https://events.linuxfoundation.org/cdcon-gitopscon/

4. Tired of commit+pushing your .gitlab-ci.yml to test your pipelines? Run GitLab pipelines locally instead! It’s the GitLab equivalent of nektos/act for GitHub Actions we talked about in VSHN.timer #119.

https://github.com/firecow/gitlab-ci-local

5. The VSHN.timer tools of the week are Nutlope/aicommits, the CLI that writes your git commit messages with AI, and jmforsythe/Git-Heat-Map, to visualise your repositories by diff activity.

https://github.com/Nutlope/aicommits

Are you using ChatGPT to generate your Git commits? Are you attending cdCon + GitOpsCon in Vancouver? Would you like to share some other news in the Git space? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about Git, GitOps, GitHub and GitLab: #10, #48, #68, #83, #98, #119, #139, and #150.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we will talk about increasing our knowledge of Kubernetes and Cloud Native technologies to the maximum.

1. Gedalyah Reback asked, „How to get a bachelor degree in Kubernetology?“ He provided answers about networking, storage, and security, but surprisingly none about YAML.

https://logz.io/blog/what-are-the-hardest-parts-of-kubernetes-to-learn/

2. Are you looking for a learning path toward an MSc in Kubernetology? Check out this one covering prerequisites, architecture, setup, administration, etc.

https://github.com/techiescamp/kubernetes-learning-path

3. Are you looking for something like a Ph.D. in Kubernetology? Andrew C. Oliver of InfoWorld tells you all you need to know to get a university degree online.

https://www.infoworld.com/article/3687169/how-to-get-your-computer-science-degree-online.html

4. Even with a postgraduate degree in Kubernetology, getting a tech job is a bit harder now because it’s layoffs season. Instead, you should join VSHN. Seriously.

https://www.wired.com/story/layoffs-broke-big-techs-elite-college-hiring-pipeline/

5. Want to advance your DevOps career from Kubernetology toward IT architecture? Here are the three things you should do. Spoiler alert: coding is not one of them.

https://www.redhat.com/architect/it-career-developer-architect-lessons

What’s your level of mastery of the arcane arts of Kubernetology? Can you read YAML upside down? Would you like to share some Kubernetology tips and tricks with our readers? Contact us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about education: #21, #38, #67, #99, #120, and #140.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the new features of OpenShift 4.12, the latest and greatest release of our favorite container platform.

1. Two weeks ago, Red Hat released OpenShift version 4.12, based on Kubernetes 1.25 and CRI-O 1.25. This new release brings a lot: 49 customer requests for enhancements, extended support up to 24 months, a new default network plugin, ARM architecture support, and much more.

https://cloud.redhat.com/blog/whats-new-in-red-hat-openshift-4.12-blog

2. This video provides a complete overview of the new features in OpenShift 4.12, from operational, security, and architectural points of view, presented by the Red Hat engineers behind the product.

https://www.youtube.com/watch?v=IUpjgasPW5Y

3. Red Hat OpenShift announced support for the AWS Graviton ARM architecture in 2022. Now, OpenShift 4.12 expands that offering to Microsoft Azure ARM instances.

https://venturebeat.com/data-infrastructure/red-hat-gives-an-arm-up-to-openshift-kubernetes-operations/

4. OpenShift 4.12 brings three new key features for software developers: user preferences provides default settings for Git and image deploy flows; better display of limits and quotas issues; and automatic support to receive and store CloudEvents on a Kafka topic.

https://developers.redhat.com/articles/2023/02/01/3-improvements-openshift-412

5. Curious about the new features of OpenShift 4.12? Check out the official release notes with a short explanation of each new feature.

https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html

Are you planning to move to OpenShift 4.12? Which of the new features do you find the most interesting? Would you like to share some OpenShift tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about Red Hat OpenShift: #9, #28, #53, #95, #129, and #157.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about last weekend’s FOSDEM 2023 conference in Brussels, where our CTO and Product Manager, Tobias Brunner, was dazzled and bewildered by what he saw. Here are his top picks, including links to the video and/or slides (if available at the time of publication of this article.)

1. Phil Estes, Principal Engineer at Amazon Web Services (AWS) presented a tour of the landscape of container developer tooling in use today: podman, nerdctl, and non-Linux platform support for Rancher Desktop, Lima/colima, Finch, and Podman Desktop (video and slides)

https://fosdem.org/2023/schedule/event/container_developer_tooling/

2. Portia Burton, author of technical content for Dapper Labs, Honeycomb, and Linode, explored in her talk how to use a CI/CD workflow to encourage teams to write and maintain documentation. One of the best talks! (Video)

https://fosdem.org/2023/schedule/event/how_to_automate_documentation_workflow_for_developers/

3. Dmitriy Kostiuk, free and libre software activist from Belarus, explained how to properly diagram Kubernetes clusters, looking at how various authors usually draw Kubernetes clusters and showing how auxiliary tools such as color coding, grouping, and eye anchoring can make the cluster diagram more understandable (slides)

https://fosdem.org/2023/schedule/event/container_kubernetes_cluster_right_way/

4. Raymond de Jong, CTO at Isovalent, showed how Cilium monitors Service to Service communication, Golden Signals, detects transient network layer issues, and identifies problematic API requests with transparent tracing (slides)

https://fosdem.org/2023/schedule/event/network_cilium_and_grafana/

5. As this article hits the web, the FOSDEM 2023 team is working as fast as possible to process and publish the remaining videos of the conference. All videos will be available on this website, and we can’t recommend them enough.

https://video.fosdem.org/2023/

BONUS: Matthew Hodgson, the technical co-founder of Matrix and co-founder of Element, explained in his talk the fundamental changes which are landing in Matrix 2.0, which speeds up Matrix to be at least as snappy as the fastest proprietary messaging apps – all while handling thousands of rooms spanning millions of users.

https://fosdem.org/2023/schedule/event/matrix20/

Did you attend FOSDEM this year? Did you enjoy the talks? Would you like to recommend some to our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about open source: #152 and conferences: #19, #20, #56, #57, #90, and #91.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the first security analysis and incident reports published so far in 2023.

1. On January 4th CircleCI published an alert for their customers about a security issue. In a subsequent incident report, they shared what happened, what they’ve learned, and what their plans are to continuously improve CircleCI’s security posture for the future.

https://circleci.com/blog/jan-4-2023-incident-report/

2. On January 17th GitHub explained how Git was addressing a pair of security vulnerabilities, CVE-2022-41903, and CVE-2022-23521. Git for Windows was also patched to address an additional, Windows-specific issue known as CVE-2022-41953.

https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/

3. Also on January 17th, Tailscale published a security bulletin describing an issue in the Tailscale coordination server, which allowed a malicious individual to share nodes from other tailnets to themselves if they knew the node ID of the target.

https://tailscale.com/security-bulletins/#ts-2023-001

4. On January 18th, InfoWorld reported about researchers at Aqua Nautilus finding attackers impersonating popular Visual Studio Code extensions and tricking unknowing developers into downloading them.

https://www.infoworld.com/article/3685542/researchers-warn-of-malicious-visual-studio-code-extensions.html

5. On January 19th, Bruce Schneier reported an impressive and scathing security analysis of the Threema secure chat application published by a group of Swiss researchers.

https://www.schneier.com/blog/archives/2023/01/security-analysis-of-threema.html

Can we trust software, like, at all? What measures have you set in place to protect your infrastructure? Would you like to share your concerns with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about Security: #8, #17, #22, #27, #32, #44, #54, #62, #76, #84, #93, #106, #117, #128, #142, #145, and #164.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to take a closer look at 2022 and see how technology and society are shaping our industry.

1. According to Red Hat’s 2022 State of Kubernetes Security Report, most respondents experienced a slowdown in application delivery due to unaddressed security concerns. Couple this with VMware’s State of Kubernetes 2022 Report, Cockroach Labs‘ 2022 Cloud Report, and Flexera’s 2022 State of the Cloud Report for an even more complete perspective.

https://developers.redhat.com/e-books/2022-state-kubernetes-security-report

2. JetBrains‘ State of Developer Ecosystem 2022 Report shows exciting trends, such as TypeScript becoming the fastest-growing programming language, AI/ML being the most promising technology, and Rust being the most promising programming language.

https://www.jetbrains.com/lp/devecosystem-2022/

3. The State of JavaScript 2022 Report is a community-led effort, aggregating a massive 40’000 responses and showing the current trends of one of the most popular programming languages ever… as well as growing concerns and doubts about its future.

https://2022.stateofjs.com/en-US/

4. To better understand how tech leaders adapt to a post-pandemic, mass-layoff, mass-quitting business world, A.Team and MassChallenge published the Tech Work Report, surveying 581 tech founders and executives based in the United States. Couple this with the Kubernetes job market trends for 2022 and the 10th Annual Open Source Jobs Report by the Linux Foundation to better understand the current Cloud Native job market.

https://www.a.team/mission/2022-tech-work-report

5. Cloudflare published The state of HTTP in 2022, where the biggest thing to happen was the publication of HTTP/3, an enormous step towards keeping up with the requirements of modern applications and sites by using the network more efficiently to unblock web performance.

https://blog.cloudflare.com/the-state-of-http-in-2022/

How did the new year start for you? What were the biggest changes felt by your business in 2022? Would you like to share another „2022 State of Things“ report with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about random stuff: #24, #36, #69, #73, #86, #94, #100, #123, and #147.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the consequences of products and services going down… particularly when you’re not livin‘ on fat pockets, whatcha gon‘ do? When the product goes down, ya better be ready.

1. What do you do when Azure literally runs out of compute resources? Can you migrate your work somewhere else, or are all your eggs in the same basket? When the cloud goes down, ya better be ready.

https://news.ycombinator.com/item?id=33743567

2. What do you do when Docker quietly raises prices and limits team accounts? Are all your containers built FROM images on Docker Hub? When the container registry goes down, ya better be ready.

https://devclass.com/2022/10/20/docker-quietly-raises-prices-limits-team-accounts/

3. What do you do when SourceHut blacklists the Go module mirror? Are you bypassing proxy.golang.org already? When Google gets greedy, ya better be ready.

https://sourcehut.org/blog/2023-01-09-gomodulemirror/

4. What do you do when open-source projects such as Kite or Pinafore shut down? Do you fork, or do you migrate? When maintainers get more issue reports and headaches than pull requests or cash, ya better be ready.

https://nolanlawson.com/2023/01/09/retiring-pinafore/

5. What do you sell your customers? Remember that your tech stack is not your product. When they come to you to solve a problem with something that consists of software, ya better be ready.

https://hoho.com/posts/your-stack-is-not-the-product/

Do you have contingency plans in place to cope with platform issues? Are you (financially or otherwise) contributing to your favorite (and critical) open-source project? Would you like to share some tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about products: #114 and #134.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the state of the container world at the beginning of this new year.

1. Microsoft recently published the Develoment Containers open specification. It explains how to use a container as a full-featured development environment, run an application, and aid in continuous integration and testing. Will it become a standard?

https://containers.dev/

2. WebAssembly is a relatively new technology that allows you to compile application code written in many languages, such as Rust, C, C++, JavaScript, and Golang, and run it inside sandboxed environments, like web browsers and now alongside containers in Docker, too! Check out the official documentation for more details.

https://www.docker.com/blog/docker-wasm-technical-preview/

3. Toru Komatsu, a senior engineer at GitPod, has been exploring the possibility of developing a container runtime using Rust. As a result, we now have youki, the OCI container runtime in Rust, to compete with runc and crun. Check out this presentation from KubeDay Japan!

https://speakerdeck.com/utam0k/possibility-of-oci-container-runtime-with-rust

4. Docker and Podman are great container engines and serve the same purpose in building, running, and managing containers. But which one should you choose? This article will give you a much better understanding of both.

https://medium.com/@Dawsonn/podman-vs-docker-all-you-need-to-know-ababf36ae4d

5. This is a Docker base image that can quickly create containers to run any X application on a headless server. The application’s GUI is accessed through a modern web browser (no installation or configuration needed on the client side) or via any VNC client.

https://github.com/jlesage/docker-baseimage-gui

Are a Podman or a Docker user? Are you already running WebAssembly applications in your clusters? Would you like to share some container tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about containers: #12, #17, #40, #51, #54, #71, #81, #108, #124, #144, and #151.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week, in the last VSHN.timer of 2022, we’re going to talk about the serious questions that teams and organizations ask themselves about DevOps nowadays.

1. Is Platform Engineering putting an end to DevOps and SRE? According to the CNCF, Platform Engineering is now gaining momentum, and it is set to radically transform the IT landscape. Do you have a clear roadmap?

https://www.cncf.io/blog/2022/11/02/is-platform-engineering-putting-an-end-to-devops-and-sre/

2. What does DevOps look like at the end of 2022? At almost 15 years old, DevOps has been around long enough to settle in worldwide. GitLab’s Valerie Silverthorne takes a closer look at what „modern“ DevOps practices look like today. What do you think?

https://about.gitlab.com/blog/2022/10/31/a-snapshot-of-modern-devops-practices-today/

3. Is DevOps bullshit? The answer is yes, according to Cory O’Daniel. Outside of FAANG and the most well-funded companies, it simply does not work as intended, and most engineers don’t want to do operations work. Does it work for you?

https://blog.massdriver.cloud/devops-is-bullshit

4. Are we in the middle of the Great DevOps Burnout? This report from Haystack says yes. 83% of the 258 software engineers surveyed reported burnout from high workloads, inefficient processes, and unclear targets. Luca Galante from The New Stack analyzes the data. Do you agree?

https://thenewstack.io/devops-burnout-try-platform-engineering/

5. Is DevOpsDays still relevant? Daniel Paulus asked this question to his fellow organizers at their retrospective after DevOpsDays Amsterdam 2022. Some said DevOpsDays has gone stale; some said it is as important as ever. What’s your take?

https://devopsdays.org/blog/2022/10/10/is-devopsdays-still-relevant/

Are you more DevOps, SRE, or Platform Engineering? Have you adopted platform engineering and SRE practices? Would you like to provide some answers to our questions? Get in touch with us, and see you next year (!) for another edition of VSHN.timer. Thanks for your fidelity! Here’s to a wonderful Holiday season and a Happy New Year.

PS: check out our previous VSHN.timer editions about DevOps: #5, #13, #29, #31, #42, #110, #133, and #153.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about all the reasons we have to be cautious when using computers of any kind.

1. David Schütz found a vulnerability affecting seemingly all Google Pixel phones where if you gave him any locked Pixel device, he could give it back to you unlocked. The bug just got fixed in the November 5, 2022 security update.

https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/

2. Most people are familiar with products like Gmail and Google Meet, but Google Sites is a much lesser-known service. And the Google Sites service, which allows users to create web pages, provides a huge assist to scammers looking to hide under a veil of trustworthiness: a website under the Google.com domain name.

https://mashable.com/article/google-sites-phishing-scams

3. Simone Margaritelli became curious about how Logic Pro and Logic Remote were communicating with each other, so he started Wireshark and found that some of the data, such as the client and server names, were transmitted in clear on what seemed to be a custom (and as typical of Apple, undocumented) TCP protocol.

https://www.evilsocket.net/2022/10/20/Reverse-Engineering-the-Apple-MultiPeer-Connectivity-Framework/

4. Jan-Piet Mens got a mail from the .CH registry regarding an incorrect DNSSEC configuration… which triggered a fascinating treasure hunt.

https://jpmens.net/2022/11/10/red-means-kaputt-when-dnssec-turns-into-a-treasure-hunt/

5. This playbook, presented at the OWASP Global AppSec Conference, will help you introduce effective DevSecOps practices in your company. It provides explicit guidance and actionable steps to introduce security controls, measure their effectiveness, and demonstrate value for money to your business leaders.

https://github.com/6mile/DevSecOps-Playbook

Have you tried the Google Pixel lock bypass? Have you implemented a DevSecOps program in your organization? Would you like to share some security tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about Security: #8, #17, #22, #27, #32, #44, #54, #62, #76, #84, #93, #106, #117, #128, #142, and #145.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

This week we’re going to talk about the latest news around Kubernetes and Cloud Native applications.

1. Server-Side Apply helps users and controllers manage their resources through declarative configurations, working both as a replacement for the original kubectl apply command and as a simpler mechanism for controllers to enact their changes. But why should you be using it? Daniel Smith from Google explains it best.

https://kubernetes.io/blog/2022/10/20/advanced-server-side-apply/

2. Adam Chalmers wrote an article aimed at engineers new to container orchestration who need to deploy their code using Kubernetes but have no idea what Kubernetes is or how it works: a step-by-step guide!

https://blog.adamchalmers.com/kubernetes-problems/

3. Not strictly related to Kubernetes, but Werner Vogels, CTO of Amazon, published last week the Distributed Computing Manifesto, an internal and previously unreleased document from 1998 that transformed the architecture of Amazon’s e-commerce platform.

https://www.allthingsdistributed.com/2022/11/amazon-1998-distributed-computing-manifesto.html

4. How much do Kubernetes Engineers earn in 2022? Have the salaries increased or decreased since last year? What skill sets, besides Kubernetes, are most in demand for a Kubernetes job? Vikrant Mane tells us all about it.

https://kube.careers/kubernetes-trend-report-2022-q3

5. Clusternet (Cluster Internet) is an open-source add-on that helps you manage thousands of millions of Kubernetes clusters as easily as visiting the Internet; a worthy competitor to our own Project Syn!

https://github.com/clusternet/clusternet

How many clusters are you managing in your organization? Are you using Kubernetes Server-Side Apply already? Would you like to share some Kubernetes tips and tricks with our readers? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions about Kubernetes: #4, #8, #11, #14, #16, #19, #23, #37, #46, #49, #59, #64, #74, #82, #97, #99, #102, #109, #118, #126, #142, and #146.

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.