DEV Community TLV LIVE EVENT

DEVOPS |   Want to be part of a great platform engineering org?! You gotta be data driven!

Every modern platform engineering organization wants to embrace the notions of Fail Fast, Engineering Empowerment and Scale, but you cannot do any of those if you do not have the fundamentals of being able to make data driven decisions. This talk outlines the 5 essential steps to become a data-driven organization.

CLOUD NATIVE & OSS |  5 Open Source Security Tools All Developers Should Know About

The minimum viable security (MVS) approach, enables us to easily bake security into our config files, apps, and CI/CD processes with a few simple controls built - and the great part? It’s easily achievable through open source tooling.
In this talk we will focus on five critical security controls that will be integrated as part of the CI/CD pipeline by leveraging some excellent open source tools, including: Bandit or SEMGrep for static application security (SAST), Gitleaks to detect hard-coded or insufficiently secured secrets & dependency checks (SCA), KICS for infrastructure as code (IaC) and OWASP’s ZAP for API and dynamic application security (DAST), in addition to custom controls to ensure proper enforcement of MFA via Github Security. These controls will provide a foundational framework for securing your applications from the first line of code.

STATSCRAFT | Debugging at Scale  

As every developer has experienced, code rarely behaves the way you expect. Especially once it gets deployed outside of our laptops to staging, to production, or to the cloud. Yet understanding how code behaves (and why it behaves that way) is at the heart and soul of software development.
An important tool of the trade to solve these problems has been the debugger. Debuggers are our eyes and ears into the blackbox of software applications, enabling us to see what’s really going on. With software becoming a critical part of every business, and developers having a greater role in delivering high-quality service, it’s more important than ever to use a modern debugger that works across hybrid, distributed environments.

DEVOPS | DevOps in Search of a Better Definition   |   WATCH RECORDING

I want to argue that most companies are confusing methodologies and practices, pushing the transformation in the wrong direction. I want to use my experience as a DevOps consultant and as someone who studied history of ideas to define DevOps better.

CLOUD NATIVE & OSS | Building a Cloud Native Product in 2020   |   WATCH RECORDING

My story about kickstarting a cloud native company in 2020, built from scratch using the latest (and greatest) tools and processes. Some of these include k8s (what else?!), ci/cd, motoring tools, centralized logging, error tracking, etc. While building Komodor, we learned and changed quite a lot. In this talk, I will share some of the good decisions we have taken (go Hasura!), but also about the challenges we faced, what technologies and the processes we decided to ditch, and what lessons we learned during the past year.

STATSCRAFT | One Metric to Rule them All: Cycle Time   |   WATCH RECORDING

If you only measure one metric this is it: Cycle Time. It is probably the most underrated and least understood metric in engineering. Yet this is the metric that comprises the most important aspects to measure in your engineering process.
This talk will focus on how to fine-tune and get Cycle Time right. It’s a mix of improving your planning, interfaces between product and engineering, communication, review and quality gates and release mechanisms, essentially everything your engineering process encompasses. If you can game this metric, then you will realize huge gains for your entire dev process and engineering organization.