Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Running Lambdas on your Laptop

Serverless has the potential to bring massive ops advantages to projects of all sizes, but while it presents great business benefits, we need to spare a thought for how teams develop on serverless. I recently published ‘Serverless Development is Broken’ a list of concerns about how developers can work with long deploy times inherent in a cloud-only code environment.

Kubernetes Master Class: How to Secure Production Kubernetes and Service Mesh Workloads on Rancher

As more container deployments move into production there will be an increasing level of attacks on application containers and the orchestration tools to manage them. The success of Kubernetes has been a major enabler for the “service mesh” concept to become a reality, as a “sidecar” container is the ideal form-factor for service mesh functions to be placed together with the service itself. The important thing to remember is that, although a service mesh has security features, it is NOT a security solution. It is not designed to provide the type of network, endpoint and host security required for defense in depth.

How to Empower DevOps to Make Better Cloud Cost Decisions

When it comes to cloud strategy, companies rank “cutting costs” as their top priority for 2019, according to a recent Datamation survey. That’s not to say that they plan to cut back on cloud spending in general; in fact, those budgets are very much expected to grow. Rather, companies are looking for ways to reduce unnecessary costs and optimize cloud spend.

Kubernetes as a Service: GKE vs. AKS vs. EKS

Kubernetes (K8s) is a prevalent open-source system for automating the deployment, scaling, and management of containerized applications. However, maintaining the service can be difficult and expensive. For that reason, it is easy to find platforms offering Kubernetes as a managed service. In this article, we will analyze three of the most popular services currently available: Google Kubernetes Engine, Azure Kubernetes Service, and Amazon Elastic Container Service for Kubernetes.

Write to S3 and call other Lambdas with Python

Many people writing about AWS Lambda view Node as the code-default. I’ve been guilty of this in my own articles, but it’s important to remember that Python is a ‘first-class citizen’ within AWS and is a great option for writing readable Lambda code. Take a look at these two starter examples of writing functionality in Python.

When to Scale Up in RDS: Freeable Memory

Monitoring freeable memory will help you know when it is time to scale your Amazon RDS cluster. Freeable memory is not reported by the database, but rather by the OS. Freeable memory is the combination of unused and temporarily used memory. It is the memory that the system can grant without adverse effects. When an Amazon RDS instance runs out of freeable memory the OS may do up to three things.

Use Caution When Enabling Default Encryption of New EBS Volumes

Amazon has enabled a great new feature for cloud security: Default Encryption for New EBS Volumes. When enabled in a region, any new EBS volume that is created will automatically by encrypted with the configured KMS key. At first glance, this sounds great. However, here there be monsters, as the saying goes, if you are copying EBS snapshots or AMI images across AWS accounts.