[English] Spain Cloud and Devops community July 22 summit
00:05:29 How to measure etcd performance on-prem and not to die trying:
Everybody either knows what Kubernetes is or has heard it. It’s a critical component to scalable, high availability and distributed design of most cloud based productions systems. Why would I bother understanding how it behaves outside the cloud provider I commonly use? Well, that was my case deploying on-prem for business reasons.As expected, things were not behaving the same as in the cloud provider: lots of kube-api errors, missed heartbeats, database operators started rolling restarting deployments because of it; but the main reason was well hidden from the sight: etcd performance was not great on prem. etcd has an extremely and sustained high performance that is based on two factors: latency and throughput. But in this on-prem environment, latency was affected by the hardware’s initial design. How do you measure etcd performance?Learn about this experience, what is benchmark, what is latency, what is throughput and how to effectively measure etcd performance through benchmarks to correctly test your infrastructure when a brand new kubernetes cluster is created, particularly on-prem, and take advantage of the full potential of the Kubernetes environment.
-------------------------------------
00:30:45 DRY (Don't Repeat Yourself) CD with GitHub Actions and Terraform:
In this session, we will demo a DRY solution to segregate deployments of the same the resource no matter the user and environment by using GitHub Actions to handle terraform tfstate file for each Terraform modules execution.
-------------------------------------
00:51:02 Protecting container-based solutions in Azure: Community tools vs Microsoft Defender for Cloud:
Securing container workloads can be a tricky task.Variety of available tools for every step of a docker container lifecycle makes it hard to choose or even evaluate the right tool.I will share my experience identifying an appropriate benchmark for docker containers security and results of evaluation of a bunch of free tools and Microsoft Defender for Cloud for this task.