February 2020 Summaries

Kubernetes is a leading container orchestration platform that enables seamless management of cloud and on-premises workloads, offering a cloud-agnostic solution that reduces dependency on specific cloud providers and extensive operations teams. The article compiles a variety of resources to aid in understanding and mastering Kubernetes, covering topics from container basics and YAML syntax to cluster management and deployment of applications. It also delves into advanced topics such as autoscaling, service meshes, logging, monitoring, storage, and security practices. Additionally, it highlights the significance of practical experience for obtaining Kubernetes certification and points out available learning resources, including a temporarily free book on Kubernetes concepts and deployment. Overall, the article serves as a comprehensive guide for those looking to enhance their skills in using Kubernetes effectively in real-world projects.

The Cloud Development team at dormakaba AS EMEA, responsible for developing their first cloud-access control solution, Exivo, required a logging solution that could handle high throughput, provide scalability, maintain security, and integrate via an API. They chose Logz.io, a fully managed service, which allowed them to focus on solution development rather than operational maintenance. Logz.io's machine learning feature, Cognitive Insights, enabled the team to efficiently identify and resolve 503 errors from their web server logs, a task that would typically be challenging due to the vast amount of data. Additionally, Logz.io's customer support provided timely assistance, ensuring quick resolutions even in critical situations. Dormakaba's cloud software engineer, Robin Fehr, highlighted Logz.io as a commendable solution for scalable and self-hosted needs.

Service meshes, which manage network functionality for applications on platforms like Kubernetes, have become increasingly significant as the technology has matured, addressing challenges in traffic management, security, and observability. This article compares three prominent service mesh options: Istio, Linkerd, and Consul Connect. Istio, developed by Google, IBM, and Lyft, is feature-rich but complex, with extensive traffic management capabilities and strong security features, particularly in policy management. Linkerd, which evolved from the network proxy Conduit, is known for its simplicity and ease of operation, offering good observability with built-in Grafana dashboards. Consul Connect, from Hashicorp, is noted for its flexibility, allowing different proxies and seamless integration with other Hashicorp products. All three utilize a control plane and a data plane, typically employing a sidecar proxy for data handling, with Istio using Envoy, Linkerd adopting Conduit, and Consul Connect supporting a pluggable architecture. While Istio is robust, its complexity can impede performance, whereas Linkerd often outperforms it under load. Support varies, with Consul Connect benefiting from Hashicorp's backing, whereas Istio lacks direct support from its creators but is included in IBM's OpenShift. Ultimately, choosing a service mesh involves prioritizing features that align with organizational needs and preparing to adapt to ongoing technological advancements.

Charlie Klein's blog post on the Amazon Web Services partner blog discusses how to enhance AWS monitoring using Logz.io, with a focus on Kubernetes monitoring through FluentD and Metricbeat for logs and metrics. The post outlines two strategies for identifying and troubleshooting production issues within an AWS environment using Logz.io Infrastructure Monitoring and Log Management, which are based on the ELK Stack. The first strategy involves identifying a Java Stack Trace exception and correlating it with associated logs using Kibana, while the second strategy employs Cognitive Insights to detect SSL errors by highlighting specific logged events that could predict production issues. Additionally, the post shares a practical example of how Form3 utilized these strategies for effective production issue identification.

Snyk, a company focused on identifying and patching vulnerabilities in open-source security software, employs around 50 engineers and aims to maintain operational flexibility by providing its team with comprehensive insights into their work. To achieve this, Snyk has implemented Logz.io to gain end-to-end visibility into their production environment, allowing for deep monitoring and proactive service alerts, thus simplifying the management of a scalable Elasticsearch cluster while maintaining data flexibility. Anton Drukh, Snyk's VP of Engineering, highlights how Logz.io minimizes complexity and enhances monitoring capabilities, contributing to Snyk's efforts to understand the broader open-source security landscape. Additionally, Snyk shares insights into shifting security practices and offers resources on managing open-source vulnerabilities, encouraging a cultural shift towards more proactive security measures.

The Iowa caucuses app, intended to streamline the voting process during the 2020 Democratic caucuses, faced significant usability issues, leading to widespread concern and doubt about its effectiveness. Despite the app's potential to manage high data volumes and enhance voting transparency, challenges such as login difficulties, app resets, and confusion over security codes highlighted the problems of deploying technology without adequate testing and support. The situation underscored the importance of best practices in app development, including scalability, observability, extensive testing, and real-time monitoring, especially for high-stakes events. With nearly 1,700 precinct chairs using the app simultaneously, the lack of proper tech support and preparation exacerbated the situation, leading to calls for better planning and smaller-scale testing before such technology is used in major elections.

This article discusses essential topics and questions that prospective employees should prepare for during DevOps interviews, specifically focusing on logging and network performance monitoring. It highlights the importance of understanding efficient log management, including defining goals and minimizing storage costs, and emphasizes the need for familiarity with SIEM tools, Kubernetes, Docker, and cloud monitoring at scale. The text also underscores the significance of demonstrating knowledge in troubleshooting methods, particularly in databases and site outages, and the ability to adapt to various tools and environments, such as AWS and multi-cloud infrastructures. Overall, the article aims to guide candidates in showcasing their technical expertise and adaptability in the dynamic field of DevOps.