DevOps Topeaks

Send us Fan Mail

We talked about container from the ground up!
Is it only Docker in the space (no!).
What are they for, why they're also incredible for local work, how we like to work with them.
Why they're amazing for production purposes and can be found everywhere.

Meir talked about his experience with Nest.js (Omer: I'm definitely adding a +1 here, Nest is amazing!): https://nestjs.com

Omer mentioned Neovim's collaboration plugin: https://github.com/jbyuki/instant.nvim

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

This week we talked about backups, what do they mean to us, how do we apply it as a principle, what it boils down to and more.
Enjoy listening!

In the tools section Omer mentioned
Testcontainers: https://github.com/testcontainers/testcontainers-go
Neovim remote container: https://github.com/jamestthompson3/nvim-remote-containers

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode we discussed "scale". What does it mean in the context of operations / devlopment, but also in regards to management and internal systems.
We talked about empowering engineers to make decisions, prepare systems for you joiners but even more importantly preparing systems to scale to handle additional load and company growth!

Tools mentioned:

• Omer mentioned https://score.dev
• Meir mentioned https://github.com/GAM-team/GAM

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

This week we talked about Git! The version control all (most) of us are using daily.
How did it start? What's with the name? 
What should developers know?
Have you ever wondered how to delete stuff form the root of the tree? Maybe how to pin point a commit that introduced a bug?
We had a fun chat around functionality, productivity, do's and don'ts.

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

We discussed AI and ChatGPT, how (and if) we're using in our daily work. What we think it's good for and what not so much, and we see this world progressing and evolving!

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode we covered Observability! From log collection through metric time-series, through the systems they're stored and to analyzing the data, coming up with insights, and understanding system and application behavior!

Experience / Tool of the week:

• Meir mentioned working with Make - the evergreen scripting tool that supports application builds (https://www.gnu.org/software/make/)
• Omer suggested Just (https://github.com/casey/just) as the modern Rust alternative 
• Omer's findings:
  • Since Jan 2023 AWS offer CloudTail Lake for querying logs rather than having to export them with a data model to Athena: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html
  • Bashly - a Bash CLI framework! - https://github.com/DannyBen/bashly

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode we talked about FinOps. What is it, but beyond the buzz, what does it mean to be financially aware. What are good systems to put in place, metrics to track, tools to use and concepts to adopt.

Trivy: https://www.aquasec.com/products/trivy/

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

Serverless is one of those topics we can have an entire season just surrounding this one architecture option. We tried packing as much as possible to one short talk but we can (should?) probably do another follow up talk about advanced Serverless options we didn't touch this time.

We started off talking about how it is perceived by many, then went into what it really is, and even some of its inner workings intricacies or what's "under the hood".

Some of what's mentioned:
AWS Lambda, Firecracker, Fargate vs Lambda, containers, KVMs, frameworks, local helpers, VPC connectivity, concurrency, throttling, application design and considerations (and MORE)...

Useful links:

• Firecracker
• AWS Lambda
• Serverless Framework
• Serverless Land
• AWS SAM
• Omer's blog post about many of these including the new networking scheme
• LocalStack
• Moto (Mock AWS Services)

Cool projects: 

1. SKHD 
2. Yabai

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

This week we brought up the recently promoted and latest-buzz: Platform Engineering. What is it? How does this differ from DevOps / SRE? What does it actually mean?

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode we discussed all-things application security; from scanning, to designing with security in mind, through OWASP and sources of information we feel engineers in the world of dev / ops should be aware of and familiar with!

We talked about:

• OWASP Top 10 - https://owasp.org/www-project-top-ten
• Git leaks - https://github.com/zricethezav/gitleaks
• 12 Factor - https://12factor.net
• Scanners: [Python Bandit: https://bandit.readthedocs.io/en/latest, Go: https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck]
• Clair static analysis for containers: https://github.com/quay/clair
• Bug Bounty platforms: HackerOne, Bugcrowd, Intigrity
• BGP repo cleaner - remove secrets from git history: https://rtyley.github.io/bfg-repo-cleaner
• Harden EKS - https://github.com/aws-samples/hardeneks

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops