#52: Get Good at Git

🎧 PODCAST/WEBINAR OF THE WEEK

This talk, will look at some known potential exploits to platforms such as GitHub Actions, Jenkins, GitLab CI and Circle CI and shows how simple workflow misconfigurations or straight up bad practices can leave your supply chain wide open to attackers 💀

📖 POSTS OF THE WEEK

Get good at Git
One of the best pieces of advice, one would ever get is "Get good at Git". Could you be using Git more efficiently? The answer is, probably, a YES. This blog post, will walk you through at a bunch of different tips and tricks to make you more productive with Git.
Read more »

"Plain Kubernetes Secrets are fine" - A deeper understanding of security will quickly uncover that perfect security is impossible; you have to make trade-offs and prioritize the most likely scenarios - Read more »

"Cluster Governance, clean up resources periodically" - In this article, you will learn how to "tidy up" your abandoned namespaces and delete unused resources by writing a Golang application with GCP and GitHub APIs - Read more »

"Monitoring Amazon EKS anywhere using Prometheus and Grafana" - This blog provides a step-by-step guide on how to monitor your containerized workload running on Amazon EKS anywhere by publishing metrics to Amazon Managed Service for Prometheus and using Amazon Managed Grafana to visualize - Read more »

"Let's build a distributed Postgres proof of concept" - How to write a PostgreSQL distributed implementation in 600 lines of code with PostgreSQL wire protocol, Raft protocol and bunch of Go libraries - Read more »

"Presto on Apache Kafka at Uber scale" - This article covers how the engineering team have connected Apache Presto and Kafka together to enable a lightweight, interactive SQL query directly at Uber scale - Read more »

"Git ignores .gitignore with .gitignore in .gitignore" - Similar to Google Docs crashes on seeing "And. And. And. And. And." - Read more »

"Rust: A Critical Retrospective" - I'm a huge Rust fan, but sort of agree - Read more »

📕 BOOK OF THE WEEK

This book captures the story of David Goggins and how he chose to go from being a child who grew up in a hard dysfunctional family, losing 100 pounds in about 30 days, going through Hell Week three times to become the 36th African American to become a US Navy Seal, transforming his body again to go from a powerlifter to an ultimate athlete and persevering through failures to become a Guinness Book of World Record holder for pull-ups in 24 hours. I read the book in one day (it was that good). Will be part of my permanent library of “go to” books 💯

🛠 PROJECTS OF THE WEEK

If you manage AWS Cloud accounts you might be interested in forwarding all your EC2 logs with ease to 3rd parties through Kinesis Firehose from one centralized place – if this is the case – check out this Rsyslog Server product made by 0x4447. The company 0x4447 builds products to increase standardization and security in AWS Organizations. They do this with automated pipelines that use well structured projects to create secure, easy to maintain and fail tolerant solutions - Read more »

Faros Community Edition (CE) is an open-source engineering operations platform that connects the dots between all your operational data sources for a single-pane view across the software development life cycle. A dream platform for EngOps - Read more »

A wireguard operator created to easily provision a VPN in a Kubernetes cluster. It can be deployed on Google Kubernetes Engine (GKE), IBM Cloud Kubernetes Service, DigitalOcean Kubernetes and Amazon EKS - Read more »

Monokle is your Kubernetes best friend for creating, validating, debugging and managing manifests! A friendly UI to get a high-level view of your manifests, their contained resources and relationships - Read more »

Sometimes Dockerfiles seem complex to you when you use BuildKit features inside of them, but don't worry, now, you have a debugger to debug your build process to see what's actually happening - Read more »

💼 OPEN JOBS OF THE WEEK