With rising regulatory pressure in Europe, many organizations are being urged to leave US-based cloud providers. For engineering teams, this can be daunting if it’s a first migration. This post offers a clear, practical plan to guide the move, reduce risk, and prevent costly surprises.
How to Plan and Perform a Successful Migration? Read More »
Learn how Elastisys protects access credentials on all levels: cloud infrastructure, Kubernetes API, and SSH logins to servers. In this article, we explain one very important aspect of how we earn that faith: how we work with access credentials on all levels.
Secure Kubernetes Operational Practices: Protecting Access Credentials Read More »
Say your cloud provider is ransomware attacked. Switching regions won’t help: those are compromised, too. Learn how Elastisys implements “cross-provider” disaster recovery for our customers, which is great for all customers, and in particular those in sectors of high criticality (NIS2).
Secure Kubernetes Operational Practices: Cross-provider Disaster Recovery Read More »
In this guide we discuss how to security-harden your Kubernetes platform against “known unknowns” and “unknown unknowns” with restrictive NetworkPolicies, vulnerability management and intrusion detection.”
How to Security-Harden Kubernetes Against Unknown Unknowns Read More »
Keeping key software components up to date is crucial to operate a secure Kubernetes platform. Learn what to automate and how!
Operating Secure Kubernetes Platforms: Maintenance Read More »
Operating secure Kubernetes platforms requires ability to recover from when disaster strikes. Preparation in the form of frequent backups and training are key to success.
Operating Secure Kubernetes Platforms: Disaster Recovery Read More »
Read this blog post to see why the scope is important, an example of how it’s used in practice, why it matters, and its greater context.
Operating Secure Kubernetes Platforms: Setting the Scope Read More »
This guide discusses the four most important aspects when operating a secure Kubernetes platform. Having been with Kubernetes since 2015, we identified these aspects to still challenge platform teams, even as technology matures.
How to Operate a Secure Kubernetes Platform Read More »
Access control is about deciding and enforcing who gets to do what in a system. Learn the why, how, and what of Kubernetes access control.
The Why, How, and What of Kubernetes Access Control Read More »
Application dashboards over user happiness! Leverage application dashboards with Prometheus and Grafana to understand what truly matters.
Zen and the Art of Application Dashboards Read More »
How to security harden Kubernetes in 2022. The NSA/CISA guidelines summarized, with Elastisys hands-on advice and real-world recommendations.
Free Guide: How to Security Harden Kubernetes in 2022 Read More »
This blog examines how vcluster behaves on a security-hardened Kubernetes platform and shows that, while helpful for testing platform components, it still inherits the physical cluster’s restrictions.
Busting vCluster Myths: What Is a Virtual Cluster? Read More »
This blog walks through practical best practices for taking Kubernetes applications to production so you can load test realistically, verify resilience and recovery, and redeploy from scratch with confidence instead of firefighting.
Best Practices for Deploying Applications to Production in Kubernetes Read More »
This blog explains why regularly rebooting Kubernetes Nodes is essential for keeping security patches active, and shows how administrators and developers can coordinate smooth, low-impact reboots that keep both the cluster and the applications running safely.
Why and How Should You Reboot Kubernetes Nodes? Read More »
How Elastisys helped FRISQ create cost-effective preview environments in Kubernetes – with single click on-demand deployment.
Cost-Effective Preview Environments in Kubernetes Read More »
This blog clarifies the real difference between readiness and liveness probes in Kubernetes and explains how to use them correctly so your applications stay stable, avoid needless restarts, and handle temporary failures gracefully.
The Difference Between Liveness and Readiness Probes in Kubernetes Read More »
This blog explains why running containers as root is a major security risk and shows practical steps for switching to non-privileged users in your images and Kubernetes manifests, helping you harden your workloads without breaking functionality.
HOW TO Stop Running Containers as Root Read More »
In this article, we describe what container vulnerability scanning is, how it is done, and how open source tools help automate the procedure.
How to Do Vulnerability Management via Image Scanning in Harbor Read More »
Everything needed to use Google as your identity provider in a Kubernetes cluster.
What is DevSecOps as a Service? Our philosophy is that “DevSecOps” is a functional role, not individual people. So rather than hiring an individual DevSecOps expert on a professional service basis as a consultant, you get a dedicated multi-person team.
DevSecOps as a Service explained Read More »
How I Stopped Worrying And Started Loving Compliance Ask any developer who just heard “we got a new licence, we need to become compliant” and I bet most of them won’t receive these words with joy: The Chief Risk Officer yells legalease from one side of the corridor (“you need to do access controls”), while
How I Stopped Worrying And Started Loving Compliance Read More »
