#44: You're Doing SSH Wrong

🎧 PODCAST/WEBINAR OF THE WEEK

This episode from DevOps Pradox discusses the challenges with StatesfulSet applications and the items you’ve got to get right first before you can even think about scaling your applications to multi-region or even multi-cloud 🌎

📖 POSTS OF THE WEEK

How to Run WebAssembly Workloads on Kubernetes with Rust
WebAssembly is one of the most exciting and underestimated software technologies invented in recent times. It's a binary instruction format for a stack-based virtual machine that aims to execute at native speeds with a memory-safe and secure sandbox. This post covers how to use Krustlet to run a Wasm workload written in Rust on Kubernetes.
Read more »

"Kubernetes and containerization trends" - Docker gets less popular as the container runtime while Kubernetes popularity in production increases. Also, adoption rates of the OpenShift platform has increased by 28% over the past year, and, for the most part, those are big businesses - Read more »

"Secure your Kubernetes deployments" - A recent survey by Red Hat found that about 90% of respondants had at least one security incident in their K8s cluster. This post present three tools to valdiate and secure your K8s deployments - Read more »

"Anatomy of a JWT" - You may have heard about JSON Web Tokens (JWTs), but do you understand what they are under the hood? - Read more »

"A closer look at the LAPSUS$ data extortion group" - Microsoft and Okta both this week disclosed breaches involving LAPSUS$, a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish it unless a ransom demand is paid. Here’s a closer look at LAPSUS$ - Read more »

"If you’re not using SSH certificates you’re doing SSH wrong" - SSH has some pretty gnarly issues when it comes to usability, operability, and security. None of these issues are actually inherent to SSH. They’re actually problems with SSH public key authentication. The solution is to switch to certificate authentication - Read more »

"Why Single Sign On sucks" - I've never been a fan of single sign on (SSO). Its only purpose is to make life easier for the users at the expense of security - Read more »

📕 BOOK OF THE WEEK

I find all the major Silicon Valley tech giants’ origin stories fascinating. Instagram is one of the few that feel different to me. This book does a great job of explaining the founders and what set them apart, while chronicling the Facebook acquisition’s dual catapulting/spoiling effect on Instagram. The book also does a great job of showing the founders influence on the culture inside the IG network, and how each evolution of the app changed that culture.

🛠 PROJECTS OF THE WEEK

The company 0x4447 builds products to increase standardization and security in AWS Organizations. They do this with automated pipelines that use well structured projects to create secure, easy to maintain and fail tolerant solutions. One of which is their VPN product – built on top of the popular OpenVPN® project, which has no license restrictions. You are only limited by the network card in the instance - Read more »

Run linux applications faster and safer than linux with open-source unikernels. Boot your first unikernel in seconds. Run on any cloud with no porting necessary. Easier than Kubernetes. Unikernels aren't just the future - they run in prod today - Read more »

Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Qubes OS leverages Xen-based virtualization to allow for the creation and management of isolated compartments called qubes - Read more »

Kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient - Read more »

Kubetools is built with a purpose to build a curated list of popular Kubernetes tools (cluster management, monitoring, logging, service mesh and others). It is actively maintained by the open source community - Read more »

💼 OPEN JOBS OF THE WEEK

Lead Site Reliability Engineer @Wavelo
AWS, Terraform, SaltStack, Linux
🌎 Remote, anywhere
💰 $120K - $160K
Read more »

Senior DevOps Engineer @Daily Kos
AWS, Terraform, Ruby
🌎 Remote, USA
💰 $130K - $165K
Read more »

DevOps AWS Engineer @X-Team
AWS, Terraform, Kubernetes
🌎 Remote, anywhere
Read more »

🐦 TWEET OF THE WEEK

An illustrated step by step thread to canary releases with K8s and Service Mesh!

😂 MEMES OF THE WEEK

That's a well written script 😅

Share

Forward

Remember to share if you enjoyed this issue!

@devopsbulletin

devopsbulletin.com

DevOps Bulletin - Digest #44: You're Doing SSH Wrong 😬

#44: You're Doing SSH Wrong

You Might Also Like

Daily Coding Problem: Problem #1664 [Easy]

Spyglass Dispatch: The Case for a For-Profit OpenAI

⌨️ 10 Mods to Improve Your Mechanical Keyboard — How to Set Up Quick Share on Windows

Your best friends in design

Charted | How Canada Would Rank as the 51st State 📊

Pinpointing The Actual Problem 🎯

😱Major Azure Outage in EastUS2, 🚀New AI and Azure Developer CLI Courses, azureedge.net DNS retiring

iOS Cocoa Treats

Issue #575: Excalibird, bird’s eye metropolis, and Stimulation Clicker

22 CES products you can't miss