Kubernetes Archives - Welkin by Elastisys

Kubernetes Workload Isolation: Balancing Logical and Physical Separation

September 22, 2026 • By Lars Larsson Lundsten

Learn about Kubernetes workload isolation levels, and how relying strictly on physical machine separation is a legacy heuristic that fails to correctly make use of modern platform capabilities. In our experience, a robust and resilient cloud-native security strategy relies on logical software boundaries for all workloads and reserves physical node-level separation for critical, stateful data services.

Kubernetes Workload Isolation: Balancing Logical and Physical Separation Read More »

Personalkollen Relies on Welkin for Security, Compliance, and Developer Efficiency

June 9, 2025 • By Elastisys

In this customer case, we highlight how Personalkollen leverages Welkin to spend less time maintaining a platform and more time delivering value to their customers.

Personalkollen Relies on Welkin for Security, Compliance, and Developer Efficiency Read More »

Automating NIS2-complinace in Kubernetes with Kyverno

Automating NIS2 Compliance in Kubernetes with Kyverno: A Practical Guide

February 25, 2025 • By Cristian Klein

Learn how NIS2 impacts platform engineering and get practical implementation insights with Kyverno. This guide helps you overcome “analysis paralysis” and take the first steps toward NIS2 compliance.

Automating NIS2 Compliance in Kubernetes with Kyverno: A Practical Guide Read More »

AKS vs Elastisys Managed Kubernetes Platform on Azure

November 21, 2024 • By Jakub Krzywda

In this blog post, we explain the benefits of running your applications on top of Welkin Managed on Azure compared to the default AKS deployment.

AKS vs Elastisys Managed Kubernetes Platform on Azure Read More »

Welkin application platform available on Azure

Resilient by Design: Managed Welkin on Azure

November 13, 2024 • By Elastisys

We’re excited to share that Welkin, our fully managed, secure, and compliant Kubernetes platform, is now available on Microsoft Azure Marketplace.

Resilient by Design: Managed Welkin on Azure Read More »

Discover Kubernetes – Security and Scalability for Software Critical to Society

October 8, 2024 • By Elastisys

For those of you who are owners, investors, or perhaps part of the management team of a company working with software critical to our society, you’ve probably heard of Kubernetes. But what exactly is it, and why should you care?

Discover Kubernetes – Security and Scalability for Software Critical to Society Read More »

The Business Value of a Kubernetes-Based Platform

October 4, 2024 • By Cristian Klein

The upcoming NIS2 directive will impact all industry sectors. They will have to tighten up the security of their applications, or risk heavy fines. Learn how a Kubernetes-based platform can reduce the time and cost to implement certain security measures, as needed to comply with the upcoming EU NIS2 directive.

The Business Value of a Kubernetes-Based Platform Read More »

Benefits of Kubernetes App Developer Training and Certification with Elastisys and Elastx

July 30, 2024 • By Jakub Krzywda

Discover the benefits of Kubernetes Application Developer training and certification with Elastisys and Elastx. Learn about course content, hands-on labs, expert instructors, and how this training can enhance your Cloud Native skills and prepare you for the CKAD exam. Plus, get insights into the training experience and location in central Stockholm.

Benefits of Kubernetes App Developer Training and Certification with Elastisys and Elastx Read More »

5 Key Takeaways from KubeCon EU 2024

April 25, 2024 • By Cristian Klein

Being big fans of platform engineering, we at Elastisys went to Paris to listen in on the latest and greatest trends in the area. Delve into the 5 key takeaways from KubeCon EU 2024, handpicked by our DPO and Product Owner, Christian Klein.

5 Key Takeaways from KubeCon EU 2024 Read More »

Secure Kubernetes Operational Practices: Protecting Access Credentials

February 14, 2024 • By Lars Larsson Lundsten

Learn how Elastisys protects access credentials on all levels: cloud infrastructure, Kubernetes API, and SSH logins to servers. In this article, we explain one very important aspect of how we earn that faith: how we work with access credentials on all levels.

Secure Kubernetes Operational Practices: Protecting Access Credentials Read More »

Container Platforms: Why and How?

December 18, 2023 • By Lars Larsson Lundsten

This article is all about demystifying container platforms and showing what value they bring on several levels: business, organization, and tech.

Container Platforms: Why and How? Read More »

Customer case: Prorenata and Welkin by Elastisys

Prorenata’s Strategic Move: Bringing Their Application Back Home

October 11, 2023 • By Elastisys

Prorenata uses Welkin and Elastx to ensure all data stays in Sweden – meeting GDPR, Patientdatalagen, and ISO-27001 demands. With a fully managed platform, their team can focus on innovating for school healthcare and winning public procurements.

Prorenata’s Strategic Move: Bringing Their Application Back Home Read More »

Confidential Computing: Great for Security, not for Privacy

September 26, 2023 • By Elastisys

Confidential Computing: Strong security, privacy questions. Elastisys offers EU-based Kubernetes solutions.

Confidential Computing: Great for Security, not for Privacy Read More »

Kubernetes VS Docker

March 29, 2023 • By Elastisys

Kubernetes? Docker? Both?! Learn about Kubernetes and Docker and gain a better understanding of how these technologies are used in the Cloud Native ecosystem.

Kubernetes VS Docker Read More »

Kubernetes “What is”

March 9, 2023 • By Elastisys

Our DevOps engineers explain basic Kubernetes and container concepts, such as Nodes, Pods, Deployments, and many more.

Kubernetes “What is” Read More »

How to Security-Harden Kubernetes Against Unknown Unknowns

February 3, 2023 • By Elastisys

In this guide we discuss how to security-harden your Kubernetes platform against “known unknowns” and “unknown unknowns” with restrictive NetworkPolicies, vulnerability management and intrusion detection.”

How to Security-Harden Kubernetes Against Unknown Unknowns Read More »

Connect Your IDP to Your Welkin Cluster

January 9, 2023 • By Elastisys

Learn what information you need to provide to connect your Google or Azure IDP to your Managed Compliant Kubernetes cluster.

Connect Your IDP to Your Welkin Cluster Read More »

Operating Secure Kubernetes Platforms: Maintenance

December 14, 2022 • By Elastisys

Keeping key software components up to date is crucial to operate a secure Kubernetes platform. Learn what to automate and how!

Operating Secure Kubernetes Platforms: Maintenance Read More »

Operating Secure Kubernetes Platforms: Disaster Recovery

November 30, 2022 • By Elastisys

Operating secure Kubernetes platforms requires ability to recover from when disaster strikes. Preparation in the form of frequent backups and training are key to success.

Operating Secure Kubernetes Platforms: Disaster Recovery Read More »

Process for Passing the BSI IT-Grundschutz Audit

November 17, 2022 • By Elastisys

Learn how Elastisys helped Data4Life, a German non-profit HealthTech company, establish a process that helped them pass the BSI IT-Grundschutz audit.

Process for Passing the BSI IT-Grundschutz Audit Read More »

Operating Secure Kubernetes Platforms: Alerting Culture

October 24, 2022 • By Elastisys

This is the second blog post in a series on operating a secure Kubernetes platform. Read the blog post to see why alerting culture is important, an example of how it’s used in practice, why it matters, and its greater context.

Operating Secure Kubernetes Platforms: Alerting Culture Read More »

Edge Computing with Avassa and Elastisys Welkin

October 18, 2022 • By Elastisys

Learn how to design a two-tiered application for edge and cloud with Avassa and Elastisys Compliant Kubernetes in this white-paper.

Edge Computing with Avassa and Elastisys Welkin Read More »

Enable Open Policy Agent (OPA) Policies

October 13, 2022 • By Elastisys

Learn how to ensure that your application follows security best practices by enabling the OPA-enforced safeguards in Compliant Kubernetes.

Enable Open Policy Agent (OPA) Policies Read More »

Operating Secure Kubernetes Platforms: Setting the Scope

October 5, 2022 • By Elastisys

Read this blog post to see why the scope is important, an example of how it’s used in practice, why it matters, and its greater context.

Operating Secure Kubernetes Platforms: Setting the Scope Read More »

How to Operate a Secure Kubernetes Platform

September 16, 2022 • By Elastisys

This guide discusses the four most important aspects when operating a secure Kubernetes platform. Having been with Kubernetes since 2015, we identified these aspects to still challenge platform teams, even as technology matures.

How to Operate a Secure Kubernetes Platform Read More »

The Why, How, and What of Kubernetes Access Control

August 11, 2022 • By Elastisys

Access control is about deciding and enforcing who gets to do what in a system. Learn the why, how, and what of Kubernetes access control.

The Why, How, and What of Kubernetes Access Control Read More »

What Was Observability Again?

July 18, 2022 • By Elastisys

Let us dive deeper into observability: What it is, different types of observability, and what it technically means to implement observability. At the end of this post, you will understand why you should resist the temptation to save a few bucks on observability.

What Was Observability Again? Read More »

Alternatives to Consider Before Investing in Service Meshes

June 17, 2022 • By Elastisys

4 alternatives to service meshes which – in our experience – are closer to what administrators are already familiar with.

Alternatives to Consider Before Investing in Service Meshes Read More »

Nu finns Elastisys Kubernetes Platform as a Service tillgänglig hos Elastx

May 24, 2022 • By Elastisys

Äntligen kan vi meddela att Elastisys Kubernetes Platform as a Service (KPaaS) finns tillgänglig på Elastx infrastruktur!

Nu finns Elastisys Kubernetes Platform as a Service tillgänglig hos Elastx Read More »

Zen and the Art of Application Dashboards

May 24, 2022 • By Elastisys

Application dashboards over user happiness! Leverage application dashboards with Prometheus and Grafana to understand what truly matters.

Zen and the Art of Application Dashboards Read More »

Cloud Native: Why Bother, Its Benefits, and Its Greatest Pitfall

May 16, 2022 • By Elastisys

In this article, we will focus on the benefits cloud native technology brings, how it brings them, and also, the greatest pitfall.

Cloud Native: Why Bother, Its Benefits, and Its Greatest Pitfall Read More »

Free Guide: How to Security Harden Kubernetes in 2022

May 4, 2022 • By Elastisys

How to security harden Kubernetes in 2022. The NSA/CISA guidelines summarized, with Elastisys hands-on advice and real-world recommendations.

Free Guide: How to Security Harden Kubernetes in 2022 Read More »

Busting vCluster Myths: What Is a Virtual Cluster?

April 28, 2022 • By Elastisys

This blog examines how vcluster behaves on a security-hardened Kubernetes platform and shows that, while helpful for testing platform components, it still inherits the physical cluster’s restrictions.

Busting vCluster Myths: What Is a Virtual Cluster? Read More »

Best Practices for Deploying Applications to Production in Kubernetes

April 22, 2022 • By Elastisys

This blog walks through practical best practices for taking Kubernetes applications to production so you can load test realistically, verify resilience and recovery, and redeploy from scratch with confidence instead of firefighting.

Best Practices for Deploying Applications to Production in Kubernetes Read More »

Why and How Should You Reboot Kubernetes Nodes?

April 13, 2022 • By Elastisys

This blog explains why regularly rebooting Kubernetes Nodes is essential for keeping security patches active, and shows how administrators and developers can coordinate smooth, low-impact reboots that keep both the cluster and the applications running safely.

Why and How Should You Reboot Kubernetes Nodes? Read More »

The Difference Between Liveness and Readiness Probes in Kubernetes

April 5, 2022 • By Elastisys

This blog clarifies the real difference between readiness and liveness probes in Kubernetes and explains how to use them correctly so your applications stay stable, avoid needless restarts, and handle temporary failures gracefully.

The Difference Between Liveness and Readiness Probes in Kubernetes Read More »

Why We Selected Thanos for Long Term Metrics Storage

March 22, 2022 • By Elastisys

Long-term Metrics Storage: Thanos vs. Cortex vs. InfluxDB vs. M3DB vs. VictoriaMetrics vs. TimescaleDB Why we selected Thanos among 28 Prometheus integrations.

Why We Selected Thanos for Long Term Metrics Storage Read More »

HOW TO Stop Running Containers as Root

March 7, 2022 • By Elastisys

This blog explains why running containers as root is a major security risk and shows practical steps for switching to non-privileged users in your images and Kubernetes manifests, helping you harden your workloads without breaking functionality.

HOW TO Stop Running Containers as Root Read More »

Leveraging Kubernetes to Run Databases, Message Queues, and In-Memory Caches: How We Built a Truly Portable Platform

February 25, 2022 • By Elastisys

This blog shows how standardising on Kubernetes lets you run databases, message queues and caches securely across any cloud or on-premise environment, and explains how operators and built-in Kubernetes capabilities make it possible to build a truly portable, future-proof platform.

Leveraging Kubernetes to Run Databases, Message Queues, and In-Memory Caches: How We Built a Truly Portable Platform Read More »

Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication

February 14, 2022 • By Elastisys

HOWTO use Istio and OAuth2-Proxy to secure all your micro-service endpoints in a centralized and easily managed way on Kubernetes.

Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication Read More »

Our 15 Principles for Designing and Deploying Scalable Applications on Kubernetes

February 2, 2022 • By Lars Larsson Lundsten

Our 15 principles for how to design and deploy cloud native applications on Kubernetes – for scalability, observability, automation & security.

Our 15 Principles for Designing and Deploying Scalable Applications on Kubernetes Read More »

How to Do Vulnerability Management via Image Scanning in Harbor

January 11, 2022 • By Lars Larsson Lundsten

In this article, we describe what container vulnerability scanning is, how it is done, and how open source tools help automate the procedure.

How to Do Vulnerability Management via Image Scanning in Harbor Read More »

The Challenges of Availability Zone Outage

December 23, 2021 • By Lars Larsson Lundsten

The Challenges of Availability Zone Outage AWS recently had an outage of one of their availability zones in their US East region. The outage took down parts of popular services such as Slack and Hulu. The effects were felt worldwide: during the outage, we were unable to create new Slack chats between individuals, for instance.

The Challenges of Availability Zone Outage Read More »

How to Use Lens with Elastisys Compliant Kubernetes

Using Lens with Compliant Kubernetes

December 2, 2021 • By Lars Larsson Lundsten

This post explains how Lens provides an easy, secure graphical interface for managing Compliant Kubernetes clusters. It shows how Lens works with your existing permissions, requires no extra setup in the cluster, supports Helm, and can be quickly installed and connected using the provided steps.

Using Lens with Compliant Kubernetes Read More »

How to Integrate Your CI/CD Pipeline with Kubernetes When Using Role Based Access Control (RBAC)

November 15, 2021 • By Elastisys

In this article, I’ll walk you through different kinds of CI/CD pipelines and how you can integrate them with your existing RBAC solution.

How to Integrate Your CI/CD Pipeline with Kubernetes When Using Role Based Access Control (RBAC) Read More »

Managed Container Services: KaaS, KPaaS & CaaS Explained and Compared

October 19, 2021 • By Lars Larsson Lundsten

A comparison between Kubernetes as a Service (e.g (EKS, GKE, AKS), Kubernetes Platform as a Services & Containers as a Service (e.g Fargate).

Managed Container Services: KaaS, KPaaS & CaaS Explained and Compared Read More »

What do I need to add on top of Kubernetes?

September 27, 2021 • By Elastisys

Is Kubernetes sufficient by itself? This post highlights the features that a DevOps team typically needs to add on top of a vanilla Kubernetes cluster to obtain a secure, production-ready Kubernetes cluster.

What do I need to add on top of Kubernetes? Read More »

NSA and CISA Kubernetes Security Guidance: Summarized and Explained

September 1, 2021 • By Elastisys

Kubernetes is now the most popular container orchestration platform. This article is an informative read for decision makers

NSA and CISA Kubernetes Security Guidance: Summarized and Explained Read More »

Automatic Multi-cluster Deployments and Services in Kubernetes

August 1, 2021 • By Elastisys

Learn how Multi-Cluster Kubernetes (mck8s) uses custom Controllers to vastly improve the multi-cluster experience and how you can deploy it.

Automatic Multi-cluster Deployments and Services in Kubernetes Read More »

Why Kubernetes was inevitable

July 19, 2021 • By Lars Larsson Lundsten

In this article, I walk down my own memory lane and share my embarrassing experience from cobbling together much of what Kubernetes is today. Why do I now love Kubernetes? You’ll see when you read it.

Why Kubernetes was inevitable Read More »

WEBINAR: "Build or Buy: Inside Telia’s Kubernetes Platform Strategy"

Kubernetes