DevOps Topeaks

Send us Fan Mail

In our 7th episode we discussed all-things cloud-security: NACLs, security groups, VPCs, usage of public and private subnets, secure tunneling, whats important to keep an eye on, and which layer is used and when!

Things mentioned: AWS, K8s, Network security, VPC, Subnets, routing, secure access, running in private networks

Links as promised: 
K8s limits: https://home.robusta.dev/blog/stop-using-cpu-limits
AWS security group rules real time application: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules.html

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode of DevOps Topeaks, we discussed what DevOps actually is (spoiler alert: not a job title) and which qualities we're looking for in DevOps candidates. We also talked about our approach to picking up new technologies and consume information in a world of constant stream of data.
We hope you enjoy!

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this episode to DevOps Topeaks we discussed how we think CI runners should be handled; where they should run, how, and ways to secure, scale and manage them efficiently.

As usual we drifted into further topics like cleaning container images, saving disk space, efficient use of cache, secure connection to instances with SSM rather than a VPN and lots more!

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this session of #topeaks, we talked about how to choose a container orchestrator. We compared the local development process across different container orchestrators, when to choose a proprietary solution vs a standalone K8s, and dabbled with getting into Hashicorp's Nomad and the why's

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this session of #topeaks, we'll talk about container orchestrators, when to use which service or tool, scaling in-out-up-down, node management when scaling, and which metrics we should use for scaling.

In the next session, we'll cover more about this awesome topeak!

Important additional information on autoscaling ECS and EKS nodes, starting from ECS:
AWS offers now an automated way to scale and ECS cluster nodes in and out.
The way it works, is by creating a Capacity Provider based on a new or existing Auto Scaling Group, and then enabling "managed scaling" for the same provider.
This is all you need to know if you're looking for a quick "FARGATE" experience, without the overhead costs.
However, if you're a geek like us, and interested what's going on under the hood, and the way the autoscaler actually creates metrics and calculates every minutes the need to scale in or out, here's the documentation: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-auto-scaling.html, specifically look for "How cluster Auto Scaling works".

As for EKS, things are rather simpler using the OSS Cluster Autoscaler (https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler).
The documentation for how to deploy it on EKS, with all the required IAM permissions and different configurations, can be found here: https://docs.aws.amazon.com/eks/latest/userguide/autoscaling.html

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

In this session of #topeaks, we'll talk about how to provision internal services and protect them from external users (non-employees).

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops

Send us Fan Mail

Our first #topeaks session discusses approaches to aligning CI code across a multi-repo structure. We touch on CI templates, scripting, central parameter store, GitLab CI, GitHub, Jenkins, Dagger, and more.

Meir's blog: https://meirg.co.il
Omer's blog: https://omerxx.com
Telegram channel: https://t.me/espressops