New On-Call incident game, and Terraform 1.17 cuts refresh calls to zero
The macOS runners keeping CI on autopilot for Jeppesen ForeFlight
Jeppesen ForeFlight's apps support 60M+ flights a year, so reliability is non-negotiable.
They power their GitHub Actions workflows with Build Hub macOS runners. The move caused no service disruption, and infrastructure-related CI failures have all but disappeared. In their words, CI is now “a foundation we can rely on.”
New game: On-Call, The Daily Incident
A new production incident every day. Read the logs, metrics and kubectl output, then name the root cause in six moves or fewer. Everyone gets the same incident, so you can compare your result.
3 new DevOps Challenges
Write Prometheus alerts that catch real failures, speed up slow PostgreSQL queries with the right indexes, and fix a broken Terraform network module. Open a pull request and CI grades it.
The Wikipedia iOS app's build and 503 unit tests took a median 15.4 minutes on GitHub's M1 runner, and switching to M4 brought that down to 5.6. In partnership with Bitrise.
Terraform 1.17 can now skip the refresh for every resource you did not change, and we measured what that does to API calls and drift reports on a real setup.
Every 3 bytes become 4 characters and nothing is hidden, which is worth knowing the next time you see it in a Kubernetes Secret or a JWT.
We sent anonymous requests to GitLab.com until the new per-IP limit blocked us, and the response headers gave no warning before it kicked in.
The poisoned release came out of the real release pipeline, fed from a fork one hyphen away, so we look at what PyPI provenance proves and where it stops.
We built one permission model as if-statements, as Cerbos policies and as a SpiceDB relationship graph, then measured what changes when the rules leave your app code.
Practice Git commands in a browser terminal while a visual model shows what each one does to your working directory, staging area and history.
Read real conflict markers and the three index stages in a safe browser lab, so the next conflict at work feels routine.
This week's notable updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability and security, rounded up so you can get through them in one sitting.
A side-by-side look at how the two CNIs handle Kubernetes networking and security, starting with eBPF versus iptables, to help you pick one for your clusters.
Install Packer 1.16, write your first HCL2 templates and build AWS AMIs and Docker images, step by step.
See how well you know the ways to structure Git repositories when Argo CD deploys to dev, staging and production.
Go over the patterns and trade-offs of running active-active workloads across AWS regions, from traffic routing to data replication.
Happy learning, The DevOps Daily Team