Digest #153: Zero Data Loss, Securing CI/CD, Optimizing Terraform, and Kubernetes Tips

Explore how to protect against malware, ensure seamless migrations, optimize Kubernetes workflows, secure CI/CD pipelines, and plan your FinOps strategies for the new year.

Welcome to this week’s edition of the DevOps Bulletin!

Catch key stories like the Lazarus Group targeting nuclear engineers, Xbox 360’s hardware security exploit, and a look at container trends that are shaping 2025. Learn how Grab achieved zero data loss during a high-volume stream migration, why hackers are exploiting critical Fortinet vulnerabilities, and how centralized error handling is transforming Go development.

This week’s tutorials include securing CI/CD with OpenID Connect, Kubernetes E2E testing with Python, handling sudden traffic bursts (the 'Thundering Herd Problem'), and migrating from x86 to AWS Graviton on EKS using Karpenter. You’ll also find guides for tagging Azure resources with PowerShell, using Terraform for S3 backends, and decoding Kubernetes pod termination lifecycles.

In open-source projects, explore Musoq for querying diverse data sources, Protocol for personal data applications, and Bruin for streamlined data pipelines. ByteDance’s Monolith deep learning framework and Reservoirs Lab’s Postgres visualization tool also stand out.

All this and more in this week’s DevOps Bulletin—don’t miss out!

Newsworthy Stories

• Lazarus group spotted targeting nuclear engineers with CookiePlus Malware

• Xbox 360 hardware security exploit

• Year in review: containers get smaller, faster, more secure

• How we centralized and structured Go error handling

• Quick takes on the recent OpenAI public incident write-up

• Hackers exploiting critical Fortinet

• Resources for your FinOps New Year Resolution

• Indexing code at scale with Glean

• How using Availability Zones can eat up your budget

• Zero data loss in high-volume stream migration

DevOps Roadmap for 2025

Tutorials of the week

• Securing CI/CD: Don’t use long-lived API Tokens; use OpenID Connect instead

• Kubernetes E2E testing using Testcontainers and Python

• Terraform S3 backend setup: Skip the table

• How concurrency works

• Detect and respond to security threats with Grafana

• Terraform with GitHub Actions CI/CD pipeline

• How to handle sudden bursts of traffic or "Thundering Herd Problem"?

• Migrating from x86 to AWS Graviton on Amazon EKS using Karpenter

• Decoding the pod termination lifecycle in Kubernetes

• Azure Resource tagging with PowerShell scripts

• AWS Security Guardrails & Terraform

Projects of the week

Highlighting cool DevOps projects to keep an eye on:

• Musoq lets you use SQL-like queries on files, directories, images, and other data sources without a database.

• Protocol is an open-source framework for exporting and building applications off of your personal data.

• Bruin is a data pipeline tool that brings together data ingestion, data transformation with SQL & Python, and data quality into a single framework.

• Monolith is a deep learning framework built by ByteDance for large-scale recommendation modeling.

• Reservoirs lab is a lightweight Electron app designed to connect directly to a Postgres database and visualize high-dimensional vector embeddings stored alongside structured data.

Meme of the week

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn, or simply reply to this email.