Explore insights, best practices, and lessons learned from the Elastisys team. Learn about cloud native operations, platform engineering, and security from people who build and run them every day.
In this article, we describe what container vulnerability scanning is, how it is done, and how open source tools help automate the procedure.
How to Do Vulnerability Management via Image Scanning in Harbor Read More »
The Challenges of Availability Zone Outage AWS recently had an outage of one of their availability zones in their US East region. The outage took down parts of popular services such as Slack and Hulu. The effects were felt worldwide: during the outage, we were unable to create new Slack chats between individuals, for instance.
The Challenges of Availability Zone Outage Read More »
Four invaluable pieces of advice for those that migrate from US- to EU-owned clouds for GDPR compliance reasons.
4 Actionable Advice When Moving to EU Clouds Read More »
This post explains how Lens provides an easy, secure graphical interface for managing Compliant Kubernetes clusters. It shows how Lens works with your existing permissions, requires no extra setup in the cluster, supports Helm, and can be quickly installed and connected using the provided steps.
Using Lens with Compliant Kubernetes Read More »
In this article, I’ll walk you through different kinds of CI/CD pipelines and how you can integrate them with your existing RBAC solution.
This blog post gets hands-on about access control, including everything from the difference between authentication and authorization, how this works in a couple of CNCF projects, and how to set it all up.
Access control via OpenID Connect (OIDC) Read More »
A comparison between Kubernetes as a Service (e.g (EKS, GKE, AKS), Kubernetes Platform as a Services & Containers as a Service (e.g Fargate).
Managed Container Services: KaaS, KPaaS & CaaS Explained and Compared Read More »
Is Kubernetes sufficient by itself? This post highlights the features that a DevOps team typically needs to add on top of a vanilla Kubernetes cluster to obtain a secure, production-ready Kubernetes cluster.
What do I need to add on top of Kubernetes? Read More »
In this post, we will show you how we solve Cross-data-center redundancy using Kubernetes, Rook / Ceph, Calico and WireGuard.
Redundancy across Data Centers with Kubernetes, WireGuard and Rook Read More »
Kubernetes is now the most popular container orchestration platform. This article is an informative read for decision makers
NSA and CISA Kubernetes Security Guidance: Summarized and Explained Read More »
Learn how Multi-Cluster Kubernetes (mck8s) uses custom Controllers to vastly improve the multi-cluster experience and how you can deploy it.
Automatic Multi-cluster Deployments and Services in Kubernetes Read More »
In this article, I walk down my own memory lane and share my embarrassing experience from cobbling together much of what Kubernetes is today. Why do I now love Kubernetes? You’ll see when you read it.
Why Kubernetes was inevitable Read More »
Joel Sandman’s Master thesis evaluating caching methodologies (full-page and fine-grained caching) of microservices in Kubernetes.
Evaluation of Caching Methodologies for Microservice-Based Architectures in Kubernetes Read More »
“But what if we just use encryption?” I get this a lot from CTOs when it comes to GDPR compliance. Can we use US cloud services if we encrypt the data?
“But what if we just use encryption?” – Practical GDPR for CTOs Read More »
Today, Elastisys and Debricked announced the joint project ARVOS – using AI and eBPF to turn 53 vulnerabilities into 2 action points.
Introducing ARVOS: Vulnerability Management Done Right Read More »
Managed Kubernetes services from cloud providers are not for everyone. We list 5 benefits of using a cloud-agnostic managed Kubernetes.
Cloud-agnostic third party managed Kubernetes services – the unexploited opportunity Read More »
Monitoring your application and its platform is basic hygiene for running a healthy software-as-a-service business. But how exactly do you monitor your application? In this post, we will illustrate how to achieve that using kube-prometheus.
Kube-Prometheus – A Complete Monitoring Stack Using Jsonnet Read More »
One of the most important aspects of compliance is business continuity. In this post, we will explain how using off-the-shelf open source components makes business continuity planning a breeze for risk officers.
How open source benefits business continuity Read More »
This post explains how to use OPA and Gatekeeper to enforce policy as code in Kubernetes. It walks through installing Gatekeeper, creating simple policies, and blocking non-compliant resources—helping teams automatically prevent configuration and security mistakes.
Enforcing Policy as Code using OPA and Gatekeeper in Kubernetes Read More »
Everything needed to use Google as your identity provider in a Kubernetes cluster.
Elastisys is committed to open source, and to supporting Kubernetes on a wide range of cloud infrastructure. Our recently contributed updates enable Kubespray to fully support the features of our partner cloud infrastructure provider UpCloud.
Elastisys contributes Kubespray support for UpCloud Read More »
In this blog post, we’ll give you an insight in the daily life of the team, starting top down with the operations part.
A Fortnight in the Life of the Welkin DevOps Team Read More »
Ensure your cloud-to-cloud migration is cost-effective and successful. Careful service inventory required but cloud native tech come to the rescue!
CTO Headaches: Top 5 cloud-to-cloud migration woes (and how to solve them!) Read More »
Elastisys today announced Europe’s biggest cloud provider OVHcloud as a Partner. This partnership will enable customers of both companies to access enterprise grade security-focused container services that are fully EU compliant.
Elastisys and OVHcloud partner up to provide GDPR-compliant managed container services Read More »
In this Elastisys Engineering blog post, we show how to set up a production-ready Kubernetes cluster on Exoscale using kubespray and Terraform. It gets a control plane and a set of worker nodes, and leverages Rook and Ceph to get Persistent Volume support.
Elastisys Engineering: How to set up Kubernetes on Exoscale Read More »
What is DevSecOps as a Service? Our philosophy is that “DevSecOps” is a functional role, not individual people. So rather than hiring an individual DevSecOps expert on a professional service basis as a consultant, you get a dedicated multi-person team.
DevSecOps as a Service explained Read More »
Learn how to set up Rook with Ceph on Kubernetes to get dynamic Persistent Volume support even in cloud environments without a block storage service or in bare metal, on-premise setups.
Elastisys Engineering: How to set up Rook with Ceph on Kubernetes Read More »
Explains how Virtual Machine (VM) images are booted onto virtual disks including details about disk layouts and the cloud-init boot process.
Cloud Under The Hood: How do Virtual Images Grow? Read More »
TL;DR: EKS Distro = kops + Kubernetes fixes + aws-iam-authenticator AWS has recently launched EKS Distro, the Kubernetes distribution that powers its managed Kubernetes offer, called Elastic Kubernetes Service (EKS). This means that customers no longer have to choose between EKS (as a managed service) and some other Kubernetes setup. Instead, they can choose between EKS as a service managed by AWS or managed by themselves. The application hosted on top won’t observe any difference.
Taking EKS Distro for a Spin Read More »
How I Stopped Worrying And Started Loving Compliance Ask any developer who just heard “we got a new licence, we need to become compliant” and I bet most of them won’t receive these words with joy: The Chief Risk Officer yells legalease from one side of the corridor (“you need to do access controls”), while
How I Stopped Worrying And Started Loving Compliance Read More »
