This blog examines how vcluster behaves on a security-hardened Kubernetes platform and shows that, while helpful for testing platform components, it still inherits the physical cluster’s restrictions.
Busting vCluster Myths: What Is a Virtual Cluster? Read More »
This blog walks through practical best practices for taking Kubernetes applications to production so you can load test realistically, verify resilience and recovery, and redeploy from scratch with confidence instead of firefighting.
Best Practices for Deploying Applications to Production in Kubernetes Read More »
This blog explains why regularly rebooting Kubernetes Nodes is essential for keeping security patches active, and shows how administrators and developers can coordinate smooth, low-impact reboots that keep both the cluster and the applications running safely.
Why and How Should You Reboot Kubernetes Nodes? Read More »
How Elastisys helped FRISQ create cost-effective preview environments in Kubernetes – with single click on-demand deployment.
Cost-Effective Preview Environments in Kubernetes Read More »
This blog clarifies the real difference between readiness and liveness probes in Kubernetes and explains how to use them correctly so your applications stay stable, avoid needless restarts, and handle temporary failures gracefully.
The Difference Between Liveness and Readiness Probes in Kubernetes Read More »
Long-term Metrics Storage: Thanos vs. Cortex vs. InfluxDB vs. M3DB vs. VictoriaMetrics vs. TimescaleDB Why we selected Thanos among 28 Prometheus integrations.
Why We Selected Thanos for Long Term Metrics Storage Read More »
This blog explains why running containers as root is a major security risk and shows practical steps for switching to non-privileged users in your images and Kubernetes manifests, helping you harden your workloads without breaking functionality.
HOW TO Stop Running Containers as Root Read More »
This blog shows how standardising on Kubernetes lets you run databases, message queues and caches securely across any cloud or on-premise environment, and explains how operators and built-in Kubernetes capabilities make it possible to build a truly portable, future-proof platform.
HOWTO use Istio and OAuth2-Proxy to secure all your micro-service endpoints in a centralized and easily managed way on Kubernetes.
Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication Read More »
We discuss the difference in skill sets between developers and platform operators. And what a realistic approach to DevOps truly means.
DevOps: Why It Is Misunderstood & What It Always Should Have Been Read More »
How should you technically implement GDPR? A myriad of court rulings, opinions, recitals and guidelines has brought much needed clarity.
The GDPR Storyline: From “Business as Usual” to “We Need to Run in EU Jurisdiction” Read More »
Four invaluable pieces of advice for those that migrate from US- to EU-owned clouds for GDPR compliance reasons.
4 Actionable Advice When Moving to EU Clouds Read More »
Elastisys announces that Johan Tordsson has been appointed interim CEO by the Board of Directors as Robert Winter steps down as CEO during the beginning of 2022.
Elastisys Announces CEO Transition Read More »
In this article, I’ll walk you through different kinds of CI/CD pipelines and how you can integrate them with your existing RBAC solution.
This blog post gets hands-on about access control, including everything from the difference between authentication and authorization, how this works in a couple of CNCF projects, and how to set it all up.
Access control via OpenID Connect (OIDC) Read More »
Is Kubernetes sufficient by itself? This post highlights the features that a DevOps team typically needs to add on top of a vanilla Kubernetes cluster to obtain a secure, production-ready Kubernetes cluster.
What do I need to add on top of Kubernetes? Read More »
In this post, we will show you how we solve Cross-data-center redundancy using Kubernetes, Rook / Ceph, Calico and WireGuard.
Redundancy across Data Centers with Kubernetes, WireGuard and Rook Read More »
Kubernetes is now the most popular container orchestration platform. This article is an informative read for decision makers
NSA and CISA Kubernetes Security Guidance: Summarized and Explained Read More »
Learn how Multi-Cluster Kubernetes (mck8s) uses custom Controllers to vastly improve the multi-cluster experience and how you can deploy it.
Automatic Multi-cluster Deployments and Services in Kubernetes Read More »
Joel Sandman’s Master thesis evaluating caching methodologies (full-page and fine-grained caching) of microservices in Kubernetes.
Evaluation of Caching Methodologies for Microservice-Based Architectures in Kubernetes Read More »
Today, Elastisys and Debricked announced the joint project ARVOS – using AI and eBPF to turn 53 vulnerabilities into 2 action points.
Introducing ARVOS: Vulnerability Management Done Right Read More »
Monitoring your application and its platform is basic hygiene for running a healthy software-as-a-service business. But how exactly do you monitor your application? In this post, we will illustrate how to achieve that using kube-prometheus.
Kube-Prometheus – A Complete Monitoring Stack Using Jsonnet Read More »
One of the most important aspects of compliance is business continuity. In this post, we will explain how using off-the-shelf open source components makes business continuity planning a breeze for risk officers.
How open source benefits business continuity Read More »
This post explains how to use OPA and Gatekeeper to enforce policy as code in Kubernetes. It walks through installing Gatekeeper, creating simple policies, and blocking non-compliant resources—helping teams automatically prevent configuration and security mistakes.
Enforcing Policy as Code using OPA and Gatekeeper in Kubernetes Read More »
Everything needed to use Google as your identity provider in a Kubernetes cluster.
Elastisys is committed to open source, and to supporting Kubernetes on a wide range of cloud infrastructure. Our recently contributed updates enable Kubespray to fully support the features of our partner cloud infrastructure provider UpCloud.
Elastisys contributes Kubespray support for UpCloud Read More »
We are proud to announce the release of Welkin 21-03.2, our second release in March. Among the most exciting features are dashboards for auditing Kubernetes network policies.
Welkin 21-03.2 Network Policy Dashboards: Defend against data breaches Read More »
In this blog post, we’ll give you an insight in the daily life of the team, starting top down with the operations part.
A Fortnight in the Life of the Welkin DevOps Team Read More »
Elastisys senaste produktversion – Welkin 21-03 – är specifikt utformad för att säkerställa högre säkerhet och enklare efterlevnad i den nya, moderna infrastrukturen.
Ny CISO-panel som underlättar regelefterlevnad Read More »
Elastisys today announced Europe’s biggest cloud provider OVHcloud as a Partner. This partnership will enable customers of both companies to access enterprise grade security-focused container services that are fully EU compliant.
Elastisys and OVHcloud partner up to provide GDPR-compliant managed container services Read More »
Det norrländska snabbväxande bolaget Elastisys offentliggjorde idag sitt partnerskap med OVHcloud, Europas största molnleverantör. Partnerskapet stärker det europeiska utbudet av moderna molntjänster och erbjuder GDPR-säker behandling av personuppgifter.
Svensk utmanare ingår partnerskap med Europas största molnleverantör Read More »
In this Elastisys Engineering blog post, we show how to set up a production-ready Kubernetes cluster on Exoscale using kubespray and Terraform. It gets a control plane and a set of worker nodes, and leverages Rook and Ceph to get Persistent Volume support.
Elastisys Engineering: How to set up Kubernetes on Exoscale Read More »
Learn how to set up Rook with Ceph on Kubernetes to get dynamic Persistent Volume support even in cloud environments without a block storage service or in bare metal, on-premise setups.
Elastisys Engineering: How to set up Rook with Ceph on Kubernetes Read More »
SEB och Norrlandsfonden stöttar Elastisys forskningsbaserade lösningar inom en marknad som är i stor expansion: regelefterlevnad i molnet.
SEB och Norrlandsfonden stöttar Elastisys expansionsplaner Read More »
Explains how Virtual Machine (VM) images are booted onto virtual disks including details about disk layouts and the cloud-init boot process.
Cloud Under The Hood: How do Virtual Images Grow? Read More »
TL;DR: EKS Distro = kops + Kubernetes fixes + aws-iam-authenticator AWS has recently launched EKS Distro, the Kubernetes distribution that powers its managed Kubernetes offer, called Elastic Kubernetes Service (EKS). This means that customers no longer have to choose between EKS (as a managed service) and some other Kubernetes setup. Instead, they can choose between EKS as a service managed by AWS or managed by themselves. The application hosted on top won’t observe any difference.
Taking EKS Distro for a Spin Read More »
Elastisys, världsledandarna inom Kubernetes och regelefterlevnad, meddelar idag att deras produkt Compliant Kubernetes (CK8s) nu är publikt tillgänglig som öppen källkod.
Elastisys Kubernetes Plattform Tillgängligt Som Öppen Källkod Read More »
How I Stopped Worrying And Started Loving Compliance Ask any developer who just heard “we got a new licence, we need to become compliant” and I bet most of them won’t receive these words with joy: The Chief Risk Officer yells legalease from one side of the corridor (“you need to do access controls”), while
How I Stopped Worrying And Started Loving Compliance Read More »
Our 10 best software scalability design principles covering the four scalability dimensions: performance, availability, maintenance, and expenditures.
Free Guide: Scalability Design Principles Read More »
