Learn how Elastisys protects access credentials on all levels: cloud infrastructure, Kubernetes API, and SSH logins to servers. In this article, we explain one very important aspect of how we earn that faith: how we work with access credentials on all levels.
Secure Kubernetes Operational Practices: Protecting Access Credentials Read More »
Say your cloud provider is ransomware attacked. Switching regions won’t help: those are compromised, too. Learn how Elastisys implements “cross-provider” disaster recovery for our customers, which is great for all customers, and in particular those in sectors of high criticality (NIS2).
Secure Kubernetes Operational Practices: Cross-provider Disaster Recovery Read More »
This article is all about demystifying container platforms and showing what value they bring on several levels: business, organization, and tech.
Container Platforms: Why and How? Read More »
Our DevOps engineers explain basic Kubernetes and container concepts, such as Nodes, Pods, Deployments, and many more.
Kubernetes “What is” Read More »
In this guide we discuss how to security-harden your Kubernetes platform against “known unknowns” and “unknown unknowns” with restrictive NetworkPolicies, vulnerability management and intrusion detection.”
How to Security-Harden Kubernetes Against Unknown Unknowns Read More »
Keeping key software components up to date is crucial to operate a secure Kubernetes platform. Learn what to automate and how!
Operating Secure Kubernetes Platforms: Maintenance Read More »
Learn how to design a two-tiered application for edge and cloud with Avassa and Elastisys Compliant Kubernetes in this white-paper.
Edge Computing with Avassa and Elastisys Welkin Read More »
Learn how to ensure that your application follows security best practices by enabling the OPA-enforced safeguards in Compliant Kubernetes.
Enable Open Policy Agent (OPA) Policies Read More »
Read this blog post to see why the scope is important, an example of how it’s used in practice, why it matters, and its greater context.
Operating Secure Kubernetes Platforms: Setting the Scope Read More »
This guide discusses the four most important aspects when operating a secure Kubernetes platform. Having been with Kubernetes since 2015, we identified these aspects to still challenge platform teams, even as technology matures.
How to Operate a Secure Kubernetes Platform Read More »
Access control is about deciding and enforcing who gets to do what in a system. Learn the why, how, and what of Kubernetes access control.
The Why, How, and What of Kubernetes Access Control Read More »
In this post, we share thoughts on the psyche of Dev and Ops engineers. What motivates them, how they prefer to work, and how to help them strike a balance between Dev and Ops tasks, such that you can adopt a DevOps way of working.
How to Strike a Healthy Balance Between Dev and Ops (DevOps?) Read More »
Application dashboards over user happiness! Leverage application dashboards with Prometheus and Grafana to understand what truly matters.
Zen and the Art of Application Dashboards Read More »
In this article, we will focus on the benefits cloud native technology brings, how it brings them, and also, the greatest pitfall.
Cloud Native: Why Bother, Its Benefits, and Its Greatest Pitfall Read More »
How to security harden Kubernetes in 2022. The NSA/CISA guidelines summarized, with Elastisys hands-on advice and real-world recommendations.
Free Guide: How to Security Harden Kubernetes in 2022 Read More »
This blog examines how vcluster behaves on a security-hardened Kubernetes platform and shows that, while helpful for testing platform components, it still inherits the physical cluster’s restrictions.
Busting vCluster Myths: What Is a Virtual Cluster? Read More »
This blog walks through practical best practices for taking Kubernetes applications to production so you can load test realistically, verify resilience and recovery, and redeploy from scratch with confidence instead of firefighting.
Best Practices for Deploying Applications to Production in Kubernetes Read More »
This blog explains why regularly rebooting Kubernetes Nodes is essential for keeping security patches active, and shows how administrators and developers can coordinate smooth, low-impact reboots that keep both the cluster and the applications running safely.
Why and How Should You Reboot Kubernetes Nodes? Read More »
This blog clarifies the real difference between readiness and liveness probes in Kubernetes and explains how to use them correctly so your applications stay stable, avoid needless restarts, and handle temporary failures gracefully.
The Difference Between Liveness and Readiness Probes in Kubernetes Read More »
This blog explains why running containers as root is a major security risk and shows practical steps for switching to non-privileged users in your images and Kubernetes manifests, helping you harden your workloads without breaking functionality.
HOW TO Stop Running Containers as Root Read More »
This blog shows how standardising on Kubernetes lets you run databases, message queues and caches securely across any cloud or on-premise environment, and explains how operators and built-in Kubernetes capabilities make it possible to build a truly portable, future-proof platform.
HOWTO use Istio and OAuth2-Proxy to secure all your micro-service endpoints in a centralized and easily managed way on Kubernetes.
Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication Read More »
In this article, we describe what container vulnerability scanning is, how it is done, and how open source tools help automate the procedure.
How to Do Vulnerability Management via Image Scanning in Harbor Read More »
The Challenges of Availability Zone Outage AWS recently had an outage of one of their availability zones in their US East region. The outage took down parts of popular services such as Slack and Hulu. The effects were felt worldwide: during the outage, we were unable to create new Slack chats between individuals, for instance.
The Challenges of Availability Zone Outage Read More »
This blog post gets hands-on about access control, including everything from the difference between authentication and authorization, how this works in a couple of CNCF projects, and how to set it all up.
Access control via OpenID Connect (OIDC) Read More »
Learn how Multi-Cluster Kubernetes (mck8s) uses custom Controllers to vastly improve the multi-cluster experience and how you can deploy it.
Automatic Multi-cluster Deployments and Services in Kubernetes Read More »
Everything needed to use Google as your identity provider in a Kubernetes cluster.
In this blog post, we’ll give you an insight in the daily life of the team, starting top down with the operations part.
A Fortnight in the Life of the Welkin DevOps Team Read More »
