Get ready for another action-packed edition of our weekly DevOps newsletter! This week, I’m covering a diverse range of topics that will help you level up your skills and stay up to date with the latest trends in DevOps. From exploring the ins and outs of Postgres architecture to learning how to troubleshoot common Kubernetes errors, I’ve got you covered.

Plus, we’ll be diving into the world of AWS with articles on Just-in-Time Access and Serverless AWS CDK pipeline best practices & patterns. We’ll also be discussing the importance of SREs being evangelists to be successful, and how to deal with devs pushing bad code to production.

And that’s not all — I’m sharing open-source projects of the week, including a DevOps framework based on getting things done, APE, Troubleshoot, and Helicone. So, whether you’re looking to automate your infrastructure with Terraform and Buildkite or learn how Discord stores trillions of messages, this week’s newsletter has got you covered. Don’t miss out — buckle up and let’s dive in!

Posts of the week

🔒 “The unreasonable effectiveness of just-in-time access” — If an attacker obtained one of your developer’s credentials, what access would they have? By adding a temporal dimension to access policies, the attack surface can be significantly reduced for many security-breach scenarios. That’s where just-in-time access comes in — Read more »

⭐️ “Demystifying the For vs Owns vs Watches controllers” — Theoretical side of these Kubernetes controller builders as well as their practices with a real-life examples — Read more »

🤖 “Automate your infrastructure with Terraform and Buildkite” — Learn how to use Buildkite to deploy your Terraform code changes — Read more »

🌎 “SRE evangelist” — SREs must be evangelists to be successful, making reliability more interesting and externalizing the feeling — Read more »

🔨 “How to identify and troubleshoot common Kubernetes errors” — Monitoring Kubernetes series that explains everything you need to quickly set up your Kubernetes clusters and monitor them — Read more »

🌥 “Inside Uber’s move to the cloud” — Uber has operated its own data centers for 9 years. What challenges did the company face, and why is it considering moving to the Cloud? — Read more »

✨ “Serverless AWS CDK pipeline best practices & patterns” — An opinionated discussion around how to set up, structure, and deploy your AWS CDK Serverless apps using CDK Pipelines in line with AWS best practice — Read more »

Projects of the week

1️⃣ Dozzle is a web-based app to monitor Docker logs. It doesn’t store any log files. It is for live monitoring of your container logs only — Learn more »

2️⃣ The Do Framework is a DevOps framework focused on simplicity, intuitiveness, and productivity. It helps you get more done — Learn more »

3️⃣ APE takes all of your AWS IAM policies and presents you with a single policy, summarizing all of their actual permissions — Learn more »

4️⃣ Troubleshoot is a kubectl plugin providing diagnostic tools for Kubernetes applications — Learn more »

5️⃣ Meshery is the cloud-native management plane offering lifecycle, configuration, and performance management of Kubernetes, service meshes, and your workloads. — Learn more »

6️⃣ Helicone is an open-source observability platform for GPT-3 users — Learn more »

Question of the week

Easy! revoke their access 💀

Full thread

Meme of the week

I hope this summary has been helpful. Remember to subscribe to the newsletter to receive the latest DevOps trends in your inbox every week.