GitLab / #EveryoneCanContribute cafe

Add meeting Rate page Subscribe

GitLab / #EveryoneCanContribute cafe

These are all the meetings we have in "#EveryoneCanContribu…" (part of the organization "GitLab"). Click into individual meeting pages to watch the recording and search or read the transcript.

12 Jul 2022

We started learning WebAssembly from scratch with AssemblyScript, following the tutorial with TypeScript with add() and our own functions to manipulate HTML DOM: fib() for numbers, hello_from() for strings, sort() and format_arr() for array sorting. The whole experience was done in Gitpod in the browser.

Demo project: https://gitlab.com/everyonecancontribute/dev/learn-wasm-assemblyscript
Blog: https://everyonecancontribute.com/post/2022-07-12-cafe-53-webassemply-assemblyscript-first-steps-gitpod/
AssemblyScript: https://www.assemblyscript.org/getting-started.html#setting-up-a-new-project
Wasm Cooking with Golang book: https://k33g.gumroad.com/l/wasmcooking
  • 4 participants
  • 1:10 hours
devtools
backend
programming
implementation
assembly
workflow
execute
webassembly
nodejs
gitlab
youtube image

14 Jun 2022

Blog post: https://everyonecancontribute.com/post/2022-06-16-cafe-52-learned-at-kubecon-eu-coffee-chat/ (including all playlists, blog posts, CLI commands and more context to learn)
Tetragon: https://github.com/cilium/tetragon
  • 2 participants
  • 1:11 hours
kubecon
cilium
currently
experience
stuff
project
cloud
brew
intel
incubating
youtube image

11 May 2022

Chainguard Enforce: https://www.chainguard.dev/chainguard-enforce
Blog with all URLs and insights: https://everyonecancontribute.com/post/2022-05-10-cafe-51-first-look-chainguard-enforce-software-supply-chain-security/
Request a demo at https://www.chainguard.dev/chainguard-enforce

TOC

00:00 Introductions
3:04 Introduction to Software Supply Chain Security
5:00 Introduction to Chainguard Enforce
9:55 Demo: GitLab repo with a webserver which gets deployed as container image in the pipeline
12:00 cosign verify - unsiged image
13:20 chainctl SaaS login to load default image policy
15:10 Chainguard Enforce custom policy for GitLab deployment
17:00 Chainguard agent install, light-weight to observe & enforce
23:00 Update GitLab CI/CD config to build & sign the image
28:20 Deploy and verify the signed image
31:30 Observing - now enforcing the policies, verify the signatures and identities
36:00 Other types of policies for Enforce
36:50 Why Chainguard Enforce
37:30 Questions, answers, discussions
56:33 KubeCon EU outlook - join Carlos with the SIG Release Update on "Releasing Kubernetes Less Often and More Secure"- https://twitter.com/dnsmichi/status/1524080403405017089
  • 6 participants
  • 59 minutes
chainguard
guard
gatekeeper
changguard
talk
collaboration
provider
deploying
hi
carlos
youtube image

9 Mar 2022

Anaïs Urlichs did a deep dive into the OSS tools from Aqua Security: Trivy, tfsec, Starboard, Tracee and more. We have discussed usage scenarios, custom policies, the integration touch points between the tools, and how to contribute.

Join our meetup group: https://www.meetup.com/everyonecancontribute-cafe/ Blog: https://everyonecancontribute.com/post/2022-03-08-cafe-49-aqua-security-open-source/

TOC
0:00 Introduction
2:39 Overview of Aqua Security OSS projects
3:22 Trivy: Container and IaC security scanning https://aquasecurity.github.io/trivy/latest/
16:40 Trivy: Custom policies https://aquasecurity.github.io/trivy/latest/misconfiguration/custom/ & differences to tfsec https://aquasecurity.github.io/trivy/latest/misconfiguration/comparison/tfsec/
19:34 Starboard: Vulnerability scanning in Kubernetes clusters https://aquasecurity.github.io/starboard/latest/
25:34 Starboard: Custom policies for Trivy https://aquasecurity.github.io/starboard/latest/integrations/vulnerability-scanners/trivy/
30:22 Trivy exporter for Prometheus
30:58 Aqua Enterprise insights into runtime protection
35:00 Starboard operator, with Prometheus metrics
38:00 Starboard integrations: Polaris, Conftest
42:58 Tracee: Runtime security and forensics using eBPF https://aquasecurity.github.io/tracee/latest/
51:55 Tracee: Differences to Falco discussion https://github.com/aquasecurity/tracee/issues/48
57:52 How to contribute: Slack https://blog.aquasec.com/open-source-developer-slack-community & projects https://github.com/aquasecurity
1:00:43 Q&A: Starboard reports dashboard, alerting, OOTB support in Aqua Enterprise, open-sourcing the tools to keep the pace of development, and reduce server load.
  • 6 participants
  • 1:05 hours
chat
meetup
hi
alert
security
sabot
users
sharing
setup
github
youtube image

9 Feb 2022

Niclas explained Blockchain from the fundamentals to deploying a program on Solana as an example. We've discussed Ethereum, web3 principles, and more ideas about blockchain development, CI/CD, Ops (storage, backup, observability).

* Proof of work vs Proof of Stake: https://tradewithus.ch/know-how/proof-of-work-vs-proof-of-stake/
* Solana quickstart: https://github.com/solana-labs/example-helloworld#quick-start
* Awesome Solana List: https://github.com/avareum/awesome-solana
* Solana development guide by Nader Dabit: https://dev.to/dabit3/the-complete-guide-to-full-stack-solana-development-with-react-anchor-rust-and-phantom-3291
* Book resource: Mastering Ethereum: https://ethereumbook.info/
* Meetup: https://www.meetup.com/everyonecancontribute-cafe/events/283360587/

More at https://everyonecancontribute.com/post/2022-02-08-cafe-48-blockchain-web3/

***Save the date for the next meetup on 2022-03-08: AquaSecurity and Open Source with Anaïs Urlichs*** - https://www.meetup.com/everyonecancontribute-cafe/events/283725605/
  • 2 participants
  • 1:11 hours
blockchain
hosted
introductions
ready
today
talk
topics
offering
mainnet
curious
youtube image

19 Jan 2022

Slides: https://docs.google.com/presentation/d/15CzbqO3leXOnH3Pwz94zYRzeOT8g92YQK7wC-Ii8HzU/edit
Meetup: https://www.meetup.com/everyonecancontribute-cafe/events/282736146/

0:00 Introduction
1:40 Presentation start
3:16 3 Pillars of Observability: Metrics, logs, traces
10:47 Profiling
11:37 Overlap of Observability
15:47 Known and Unknown
17:14 Observability example: Docker Hub Rate Limits
18:55 OpenTelemetry & Tracing History
23:08 Use case: CI/CD Observability https://gitlab.com/gitlab-org/gitlab/-/issues/338943
25:31 Use case: Quality Gates
28:41 From DIY Monitoring to Observability
30:40 o11y.love as learning collection
31:30 Group discussion
  • 4 participants
  • 1:06 hours
monitoring
observability
ongoing
important
advanced
users
discussion
proxying
infrastructure
slos
youtube image

14 Dec 2021

00:00 Intros & learned this year
14:57 Michael Aigner shares how to develop a Raycast extension in a workshop
57:49 Opstrace announcement surprise with Seb and Mat

https://opstrace.com/blog/gitlab
https://venturebeat.com/2021/12/14/gitlab-acquires-open-source-observability-distribution-opstrace/
  • 10 participants
  • 1:09 hours
experiences
personally
having
year
conversation
learning
going
invited
microphone
nicholas
youtube image

23 Nov 2021

k6: https://k6.io/
Blog: https://everyonecancontribute.com/post/2021-11-23-cafe-45-k6-load-performance-testing/
Twitter thread: https://twitter.com/dnsmichi/status/1463194953170014221
k6 Office Hours: How GitLab uses k6 with Grant Young: https://www.youtube.com/watch?v=YTGkq0m1bYk

Join our meetup group: https://www.meetup.com/everyonecancontribute-cafe/
Website: https://everyonecancontribute.com/

Chapters:

00:00 Introductions
8:42 k6 Introduction
14:00 OSS and cloud differences explained
17:16 Single binary and extensions
23:50 Thresholds and SLOs
31:28 k6 cloud as datasource for Grafana cloud
33:30 Prometheus remote writes
37:00 Browser testing (announced at Grafana ObservabilityCon)
47:25 k6 Operator - Load testing as code
49:10 Q&A
  • 9 participants
  • 1:10 hours
introductions
hi
k6
kasich
users
chat
cloud
danielle
staging
kubernetes
youtube image

8 Sep 2021

  • 14 participants
  • 1:05 hours
slos
platforms
users
chromesis
introductions
discussion
matthias
thanos
currently
repo
youtube image

11 Aug 2021

  • 4 participants
  • 1:08 hours
falco
gitla
felco
packager
repositories
host
troubleshooting
introduction
pop
currently
youtube image

4 Aug 2021

  • 5 participants
  • 1:41 hours
starboard
operated
enterprise
scanning
trust
ist
wowereit
000
merching
forums
youtube image

28 Jul 2021

  • 8 participants
  • 1:46 hours
features
advanced
wie
clusters
present
support
status
finished
cloud
maven
youtube image

21 Jul 2021

  • 8 participants
  • 1:18 hours
kubernetes
k3
thanks
gitlab
startup
sharing
download
cloud
discussion
kiwanis
youtube image

14 Jul 2021

  • 3 participants
  • 1:36 hours
talos
talo
kubernetes
talus
technology
introduction
os
hybrid
telos
thanks
youtube image

7 Jul 2021

  • 4 participants
  • 1:05 hours
monitoring
reporting
status
policies
documentation
topic
host
police
breschnews
kontaktcafé
youtube image

23 Jun 2021

  • 5 participants
  • 2:05 hours
chaos
cloud
discussion
innovation
users
collaborations
launch
platforms
amthos
trending
youtube image

9 Jun 2021

  • 5 participants
  • 1:05 hours
security
cloud
sneak
users
backend
technology
discussion
upgrade
policy
worries
youtube image

2 Jun 2021

  • 8 participants
  • 1:00 hours
profiling
monitoring
observing
continuous
closely
observability
discovery
prometheus
advanced
project
youtube image

26 May 2021

  • 7 participants
  • 1:28 hours
geeks
chris
hosted
newbie
colleague
users
chat
currently
ai
come
youtube image

12 May 2021

  • 3 participants
  • 1:11 hours
validation
verification
verify
validate
operational
ensures
oversight
audited
compliant
maintainer
youtube image

5 May 2021

Blog: https://everyonecancontribute.com/post/2021-05-05-cafe-28-kubecon-gitlab-kubernetes-agent/
* KubeCon EU recap & insights 0:00 * GitLab Kubernetes Agent at 14:20 * Future cafe events at 1:14:20
  • 5 participants
  • 1:23 hours
concluded
th
fine
comes
things
today
convention
mediated
watching
talks
youtube image

21 Apr 2021

  • 4 participants
  • 1:03 hours
kubernetes
terraform
provisioning
capacity
pipeline
monitoring
cloud
dockercon
k3s
slacking
youtube image

14 Apr 2021

Opstrace starts at 5:56 after introductions.

Blog: https://everyonecancontribute.com/post/2021-04-14-cafe-25-opstrace-observability/
Twitter thread: https://twitter.com/dnsmichi/status/1382365947122581506
Website: https://opstrace.com/

Open Source observability is moving fast, it is hard to catch up. We want to make things easy to deploy and use.

Insights

- Quickstart installation in AWS.
- Opstrace deploys Loki, Cortex, Prometheus, Ingress Controller, APIs, UI, Grafana in the Kubernetes cluster in AWS.
- Authentication with Auth0, future brings Dex to provide SAML, etc. for SSO.
- Grafana comes with default dashboards.
- You can send data to Opstrace from a local demo environment with docker-compose.
- Metrics generated by Avalanche, scraped with Prometheus. Log messages scraped with Fluentd. - Grafana combines Loki (logs) and Prometheus (metrics) as data sources.
- Easy to use Prometheus Alert Manager, configuration using an API for automated rules creation, or a UI. The Cortex functionality is proxied by Opstrace with an authentication token and API interface.
- Roadmap ideas: SLOs and error budgets - generate rules and provide templates out of the box.
- Monitoring Cloud Vendor Metrics, no Prometheus provisioning. Instead, send configuration over the API and a new cloudwatch_exporter container is deployed to the Opstrace tenant.
- Open discussion with ideas and questions:
- High Availability - out of the box, Cortex comes with 3 nodes by default, and cloud/Kubernetes takes care of failover.
- Which problems are not yet solved with monitoring/observability?
- Now focus on onboarding, easy to get started with Open Source, similar experience like Datadog.
- Improve usability of Grafana, should be much more collaborative as a UI. Make it a debug session, and instead of using Google docs / Notion, add text, graphs, etc. and have these documents live in there, even after a year.
- How to answer any question - links between logs, metrics, traces. Exemplars for linking metrics and traces, released in Prometheus 2.26. More on this Grafana blog post about Tempo and our 6. Cafe with Tempo when it was announced in October 2020.
- Integrating Opstrace, e.g. a graph into Merge Requests from a staging deployment.
- Join the issue tracker and Slack to discuss development ideas.
- Thought of integrating Vector for logs?
- What was the intention to create Opstrace?
- Ask infrastructure questions, and needed to collect data. We love Prometheus, but there is still so much to build.
- Datadog and it runs in your SaaS, first idea was more closed.
- Continued to iterate, we are standing on the should of giants - make it an open source project. It is harder.
- Don’t re-implement everything, work together.
- Reporting dashboards & customization - make it easy to use.
- Incident management integrated with GitLab and alike.
- As a developer, I don’t care about the configuration or the service being run in Kubernetes. I want to see metrics from a staging deployment, and focus on the fun stuff.
- Security comes out of the box - communication between monitoring nodes. GDPR for logs, and compliance levels. What data is stored in the backend
- We’ll revisit Opstrace in the future and see how things are going. And of course try it ourselves, maybe in a future #everyonecancontribute cafe.
  • 8 participants
  • 1:36 hours
ops
monitoring
sebastian
obstrace
curious
hi
currently
hosted
introduction
github
youtube image

7 Apr 2021

  • 4 participants
  • 1:21 hours
firewalls
connection
monitoring
tcp
gitlab
thread
provisioned
blocked
kubernetes
roadmaps
youtube image

31 Mar 2021

  • 5 participants
  • 1:16 hours
kubernetes
servers
updated
max
provision
chat
hey
meta
finish
terraform
youtube image

24 Mar 2021

  • 5 participants
  • 1:08 hours
cluster
networking
kubernetes
tenancy
servers
multiple
currently
managed
deployments
kiosk
youtube image

10 Mar 2021

  • 3 participants
  • 1:10 hours
kubernetes
host
securing
cluster
configured
administrator
proxy
masternode
policies
updates
youtube image

3 Mar 2021

  • 4 participants
  • 1:05 hours
germany
configuration
critical
note
mission
foreign
developed
section
arrived
isch
youtube image

24 Feb 2021

  • 4 participants
  • 1:08 hours
authorizations
authorization
authentication
authenticated
kubernetes
access
issuer
servers
root
terminal
youtube image

17 Feb 2021

  • 4 participants
  • 1:28 hours
deployments
hosts
docker
configured
workloads
server
kubernetes
backend
reloads
cloud
youtube image

3 Feb 2021

  • 2 participants
  • 1:15 hours
deploying
terraform
servers
kubernetes
hosts
configured
network
ansible
cloud
tinkering
youtube image

27 Jan 2021

Hetzner Cloud: https://www.hetzner.com/cloud

Demo repository: https://gitlab.com/ekeih/k3s-demo

Direction: https://about.gitlab.com/direction/configure/infrastructure_as_code/

Features:
- Protected Terraform states (developer access): https://gitlab.com/gitlab-org/gitlab/-/issues/227108
- Terraform MR widget integration, next steps: https://gitlab.com/groups/gitlab-org/-/epics/3441
- 5 minute production app with Terraform in the background: https://about.gitlab.com/blog/2020/12/15/first-code-to-ci-cd-deployments-in-5-minutes/
- Terraform Registry: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/18834
- Move Kubernetes cluster creation into Terraform: https://gitlab.com/gitlab-org/gitlab/-/issues/220201
  • 4 participants
  • 1:08 hours
kubernetes
hetzner
hosts
cloud
networking
demos
discussion
currently
headsnow
git
youtube image

20 Jan 2021

  • 6 participants
  • 1:09 hours
hi
currently
gary
austria
technical
chat
monitoring
guide
puppet
git
youtube image

13 Jan 2021

  • 3 participants
  • 1:27 hours
repository
gitlab
interfaces
api
backend
compiler
bots
execute
debugging
lib1
youtube image

9 Dec 2020

  • 5 participants
  • 1:15 hours
developers
austrian
introduction
technical
users
colleagues
hey
personally
boiler
chat
youtube image

2 Dec 2020

- Use Amazon EC2 Mac Instances to Build & Test macOS, iOS, ipadOS, tvOS, and watchOS Apps https://aws.amazon.com/blogs/aws/new-use-mac-instances-to-build-test-macos-ios-ipados-tvos-and-watchos-apps/
- AWS Proton: A microservices/container deployment service https://aws.amazon.com/blogs/aws/preview-aws-proton-automated-management-for-container-and-serverless-deployments/
  • 4 participants
  • 1:22 hours
ec2
provisioning
installed
workflow
linux
session
amazon
launch
aws
instances
youtube image

28 Oct 2020

  • 4 participants
  • 1:04 hours
temple
grafana
currently
process
monitoring
starting
tooling
comedia
server
architectures
youtube image

14 Oct 2020

  • 7 participants
  • 57 minutes
gina
ai
hi
ginabox
alex
chats
introduce
china
developer
comments
youtube image

30 Sep 2020

  • 4 participants
  • 1:15 hours
secrets
manager
security
provider
capabilities
servicing
license
comes
republic
sigrid
youtube image

23 Sep 2020

QuestDB Introduction, live demo and AMA with Vlad Ilyushchenko, Nicolas Hourcard, David G. Simmons, Niclas Mietz, Michael Friedrich, Michael Aigner, Nico Meisenzahl

Blog: https://everyonecancontribute.com/post/2020-09-23-cafe-1/
QuestDB: https://questdb.io/
  • 7 participants
  • 1:18 hours
quest
monitoring
hi
chats
personally
currently
users
threads
server
vlad
youtube image