Explore insights, best practices, and lessons learned from the Elastisys team. Learn about cloud native operations, platform engineering, and security from people who build and run them every day.
Cybersäkerhetslagen (CSL) makes cybersecurity a management responsibility. Learn what NIS2 compliance requires and why boards must treat security as a governance issue, not just IT.
Cybersäkerhetslagen: This is about management decisions, not firewalls Read More »
Cloud-native experts from Avassa and Elastisys explore why modern enterprises are rebalancing from cloud-first to hybrid and edge – driven by EU compliance, resilience, and the need for control.
With rising regulatory pressure in Europe, many organizations are being urged to leave US-based cloud providers. For engineering teams, this can be daunting if it’s a first migration. This post offers a clear, practical plan to guide the move, reduce risk, and prevent costly surprises.
How to Plan and Perform a Successful Migration? Read More »
How do we build relevant architectures? How do our organizations mirror our systems? And how can mistakes become a strength? In this blog we summarize the discussions from our event Tech Leaders Öresund with IT decision-makers in Skåne.
Learn how NIS2 impacts platform engineering and get practical implementation insights with Kyverno. This guide helps you overcome “analysis paralysis” and take the first steps toward NIS2 compliance.
Automating NIS2 Compliance in Kubernetes with Kyverno: A Practical Guide Read More »
From +AI to AI+. Learn about AI’s possibilities, its challenges, and how companies and society should navigate a world that is changing faster than ever. Here are 10 key insights from the discussions of Tech Leaders Öresund.
From +AI to AI+: 10 Insights from Tech Leaders Öresund Read More »
At our event Tech Leaders Norr, IT decision-makers met in Umeå to discuss technical and security challenges that appear during organizational growth, especially in companies that develop critical software.
In this blog post, we explain the benefits of running your applications on top of Welkin Managed on Azure compared to the default AKS deployment.
AKS vs Elastisys Managed Kubernetes Platform on Azure Read More »
For those of you who are owners, investors, or perhaps part of the management team of a company working with software critical to our society, you’ve probably heard of Kubernetes. But what exactly is it, and why should you care?
Discover Kubernetes – Security and Scalability for Software Critical to Society Read More »
The upcoming NIS2 directive will impact all industry sectors. They will have to tighten up the security of their applications, or risk heavy fines. Learn how a Kubernetes-based platform can reduce the time and cost to implement certain security measures, as needed to comply with the upcoming EU NIS2 directive.
The Business Value of a Kubernetes-Based Platform Read More »
Discover the benefits of Kubernetes Application Developer training and certification with Elastisys and Elastx. Learn about course content, hands-on labs, expert instructors, and how this training can enhance your Cloud Native skills and prepare you for the CKAD exam. Plus, get insights into the training experience and location in central Stockholm.
For decades, the “build-measure-learn” mantra guided SaaS innovation. Today, compliance with regulations is crucial, especially in sectors critical to society like healthcare. This blog presents Swelife’s 7-step innovation process, blending creativity with compliance. From clarifying ideas and mapping information flow to meeting regulatory requirements, learn how to innovate smartly and securely in today’s landscape.
The 7-step Innovation Process Read More »
For the second time this spring, Elastisys invited leading cybersecurity experts in northern Sweden to share knowledge and discuss cybersecurity. In this blog post, we at Elastisys summarize the key insights from these discussions.
Business Continuity: Cybersecurity in Focus Read More »
Explore the key insights from Vitalis 2024, Scandinavia’s largest eHealth event. Discover the role of AI/ML in healthcare innovation, the implications of the upcoming NIS2 directive, and the success stories of leading health tech innovators.
3 Key Takeaways from Vitalis 2024 Read More »
Being big fans of platform engineering, we at Elastisys went to Paris to listen in on the latest and greatest trends in the area. Delve into the 5 key takeaways from KubeCon EU 2024, handpicked by our DPO and Product Owner, Christian Klein.
5 Key Takeaways from KubeCon EU 2024 Read More »
Cybersecurity Trends 2024 – How Can We Face the Threats Together? Elastisys recently brought together top cybersecurity experts in Norrland (Northern Sweden), including those in charge of critical societal services, suppliers to these services, and other industry professionals, for an insightful discussion. The meeting focused on current events, emerging trends, and evolving cybersecurity needs. What
Cybersecurity Trends 2024 – How Can We Face the Threats Together? Read More »
NIS2 is on everyone’s mind and it is natural to worry about the implementation burden that NIS2 would bring on your organization. In this post, we’ll illustrate what the NIS2 Directive really means for you who is a CTO or Engineering Manager.
NIS2: But what exactly do I need to do? Read More »
Learn how Elastisys protects access credentials on all levels: cloud infrastructure, Kubernetes API, and SSH logins to servers. In this article, we explain one very important aspect of how we earn that faith: how we work with access credentials on all levels.
Secure Kubernetes Operational Practices: Protecting Access Credentials Read More »
Say your cloud provider is ransomware attacked. Switching regions won’t help: those are compromised, too. Learn how Elastisys implements “cross-provider” disaster recovery for our customers, which is great for all customers, and in particular those in sectors of high criticality (NIS2).
Secure Kubernetes Operational Practices: Cross-provider Disaster Recovery Read More »
In this blog post, we present what the recently passed EU NIS2 Directive is and how it will increase the security of networked IT systems in the EU.
All You Need to Know About NIS2 Read More »
Let’s delve into the highlights that made 2023 an extraordinary chapter in the company’s journey, together with our CEO, Johan Tordsson.
Reflecting on 2023: A Year in Review with Elastisys Read More »
This article is all about demystifying container platforms and showing what value they bring on several levels: business, organization, and tech.
Container Platforms: Why and How? Read More »
One of the most common challenges for companies needing data security is choosing between security and efficient software development. And, of course, understanding the risks associated with this trade-off.
Digital Sovereignty for European Companies Read More »
Confidential Computing: Strong security, privacy questions. Elastisys offers EU-based Kubernetes solutions.
Confidential Computing: Great for Security, not for Privacy Read More »
Discover the journey behind a lost public procurement and gain insights into the evolving landscape of GDPR implementation. Learn from past experiences and navigate data protection regulations effectively.
The GDPR Storyline: From “Let’s Wait and See” to “We Need to Run in EU Jurisdiction Now” Read More »
Kubernetes? Docker? Both?! Learn about Kubernetes and Docker and gain a better understanding of how these technologies are used in the Cloud Native ecosystem.
Kubernetes VS Docker Read More »
Our DevOps engineers explain basic Kubernetes and container concepts, such as Nodes, Pods, Deployments, and many more.
Kubernetes “What is” Read More »
Keeping key software components up to date is crucial to operate a secure Kubernetes platform. Learn what to automate and how!
Operating Secure Kubernetes Platforms: Maintenance Read More »
Operating secure Kubernetes platforms requires ability to recover from when disaster strikes. Preparation in the form of frequent backups and training are key to success.
Operating Secure Kubernetes Platforms: Disaster Recovery Read More »
This is the second blog post in a series on operating a secure Kubernetes platform. Read the blog post to see why alerting culture is important, an example of how it’s used in practice, why it matters, and its greater context.
Operating Secure Kubernetes Platforms: Alerting Culture Read More »
Read this blog post to see why the scope is important, an example of how it’s used in practice, why it matters, and its greater context.
Operating Secure Kubernetes Platforms: Setting the Scope Read More »
Access control is about deciding and enforcing who gets to do what in a system. Learn the why, how, and what of Kubernetes access control.
The Why, How, and What of Kubernetes Access Control Read More »
Let us dive deeper into observability: What it is, different types of observability, and what it technically means to implement observability. At the end of this post, you will understand why you should resist the temptation to save a few bucks on observability.
What Was Observability Again? Read More »
4 alternatives to service meshes which – in our experience – are closer to what administrators are already familiar with.
Alternatives to Consider Before Investing in Service Meshes Read More »
In this post, we share thoughts on the psyche of Dev and Ops engineers. What motivates them, how they prefer to work, and how to help them strike a balance between Dev and Ops tasks, such that you can adopt a DevOps way of working.
How to Strike a Healthy Balance Between Dev and Ops (DevOps?) Read More »
Application dashboards over user happiness! Leverage application dashboards with Prometheus and Grafana to understand what truly matters.
Zen and the Art of Application Dashboards Read More »
In this article, we will focus on the benefits cloud native technology brings, how it brings them, and also, the greatest pitfall.
Cloud Native: Why Bother, Its Benefits, and Its Greatest Pitfall Read More »
This blog examines how vcluster behaves on a security-hardened Kubernetes platform and shows that, while helpful for testing platform components, it still inherits the physical cluster’s restrictions.
Busting vCluster Myths: What Is a Virtual Cluster? Read More »
This blog walks through practical best practices for taking Kubernetes applications to production so you can load test realistically, verify resilience and recovery, and redeploy from scratch with confidence instead of firefighting.
Best Practices for Deploying Applications to Production in Kubernetes Read More »
This blog explains why regularly rebooting Kubernetes Nodes is essential for keeping security patches active, and shows how administrators and developers can coordinate smooth, low-impact reboots that keep both the cluster and the applications running safely.
Why and How Should You Reboot Kubernetes Nodes? Read More »
This blog clarifies the real difference between readiness and liveness probes in Kubernetes and explains how to use them correctly so your applications stay stable, avoid needless restarts, and handle temporary failures gracefully.
The Difference Between Liveness and Readiness Probes in Kubernetes Read More »
Long-term Metrics Storage: Thanos vs. Cortex vs. InfluxDB vs. M3DB vs. VictoriaMetrics vs. TimescaleDB Why we selected Thanos among 28 Prometheus integrations.
Why We Selected Thanos for Long Term Metrics Storage Read More »
This blog explains why running containers as root is a major security risk and shows practical steps for switching to non-privileged users in your images and Kubernetes manifests, helping you harden your workloads without breaking functionality.
HOW TO Stop Running Containers as Root Read More »
This blog shows how standardising on Kubernetes lets you run databases, message queues and caches securely across any cloud or on-premise environment, and explains how operators and built-in Kubernetes capabilities make it possible to build a truly portable, future-proof platform.
HOWTO use Istio and OAuth2-Proxy to secure all your micro-service endpoints in a centralized and easily managed way on Kubernetes.
Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication Read More »
We discuss the difference in skill sets between developers and platform operators. And what a realistic approach to DevOps truly means.
DevOps: Why It Is Misunderstood & What It Always Should Have Been Read More »
How should you technically implement GDPR? A myriad of court rulings, opinions, recitals and guidelines has brought much needed clarity.
The GDPR Storyline: From “Business as Usual” to “We Need to Run in EU Jurisdiction” Read More »
In this article, we describe what container vulnerability scanning is, how it is done, and how open source tools help automate the procedure.
How to Do Vulnerability Management via Image Scanning in Harbor Read More »
The Challenges of Availability Zone Outage AWS recently had an outage of one of their availability zones in their US East region. The outage took down parts of popular services such as Slack and Hulu. The effects were felt worldwide: during the outage, we were unable to create new Slack chats between individuals, for instance.
The Challenges of Availability Zone Outage Read More »
Four invaluable pieces of advice for those that migrate from US- to EU-owned clouds for GDPR compliance reasons.
4 Actionable Advice When Moving to EU Clouds Read More »
