#sre - January 2021

Anyone have any experience with https://snyk.io/ ? I'm at products security/monitoring products that we can use through the dev lifecycle.

I'd like to be able to scan a registry on new images, approve them, and also configure admission controllers to only allow scanned images

Do you use AWS? Upload your images to an ECR registry and use its built-in security scan. (The registry can be unused otherwise.)

Anyone tried AWS Grafana/Prometheus services? Thoughts?

Anyone have suggestions for a good postgres monitoring system (inefficient sql, debugging iops spikes) that can run completely on prem?