Kairo Araujo

Embracing sustainability: managing Kubernetes clusters with innovation and responsibility In the Nederlandse Kubernetes Podcast, Maarten and Jurg shared how they use open-source components and the Cluster API to manage Kubernetes clusters efficiently. They leverage tools like KubeVirt to manage virtual machines, allowing them to run Kubernetes within Kubernetes and maximizing resource utilization and flexibility. A key strategy was using refurbished hardware. By extending the lifespan of existing hardware and integrating it into its infrastructure, Aknostic reduces costs and minimizes environmental impact. This approach aligns with its commitment to sustainability, proving that high performance and sustainability practices can go hand in hand. The always-returning discussion with this topic is the alleged increased carbon efficiency of new model hardware (chips in particular). The point is that stuff's lifespan is essential. Refurbished can mean reusing the chassis and retrofitting it with later generations of chips, memory, and disks. However, this debate will ultimately be settled with full transparency (embodied emissions) and carbon reporting. 💡 In more everyday terms, perhaps old shit running the Nordics is better than the latest and greatest in a dense urban environment like Amsterdam. Share your thoughts on balancing IT infrastructure performance, cost, and sustainability. How do you integrate sustainability into your tech practices? #Sustainability #Kubernetes #OpenSourceInnovation

4

The tutorial explores the capabilities of multicluster-scheduler and Argo workflows in managing workloads across Kubernetes clusters without the need for specific federation configurations. More: https://lnkd.in/gTJrkxn8

175

1 commentaar

Excited about #Kubernetes and #Linux? Join Pepijn Oomen for an eye-opening talk on #Talos Linux! Discover how Talos Linux revolutionizes Kubernetes deployment with its secure, immutable, and minimal design. No SSH, no shell, just pure efficiency managed via gRPC API. Learn how to set up a robust Kubernetes cluster in minutes, whether on a Cloud Platform or your developer workstation. Don't miss out! #stackconf Redpill Linpro https://lnkd.in/dqspbr2T

2

In March, Fullstaq could be found at KubeCon | CloudNativeCon Paris! Afterwards, Gerrit had an interview with Daniëlle in which he shared his insights on the event, the topics, and the potential future of Kubernetes and the cloud-native landscape. In this blog post, you can read all about these findings, tips on how to use AI, how to make developers comfortable with Kubernetes, and more! 🚀 Read it on our website: https://lnkd.in/enjWwq9G #cloudnative #cloudengineer #kubernetes #kubernetesandAI

17

How to Use Open Policy Agent (OPA) with Terraform From the content: In this article, we will delve into the Open Policy Agent (OPA), first explaining what ‘policy as code’ is and how to use it with Terraform....[read more] Follow #techbeatly @techbeatly gmsocial, tbsocial

1

🚀Now on-demand!🚀 The webinar 'Discover the strengths of Kubernetes' by Gerrit Tamboer and Thomas van der Feer. Did you miss out on this informative webinar that teaches you about the benefits of Kubernetes for your organisation? Or do you want to refresh all the information that was shared during the live? Rewatch the (Dutch) webinar here: https://lnkd.in/e8qRtiNx #webinar #cloudnative #kubernetes

13

A severe SQL injection vulnerability has been discovered in Grafana, a popular open-source platform extensively used for monitoring and observability. This flaw enables attackers with valid user credentials to execute arbitrary SQL commands, posing risks such as data leakage and security breaches. Grafana Tool Vulnerability The vulnerability is located within the Grafana SQL package, specifically in the SqlDatasource.ts file, where SQL queries are managed and executed. This can be exploited by attackers who send a malicious POST request to the /api/ds/query endpoint, utilizing a carefully constructed raw SQL parameter. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/g47ctywr #sql #vulnerability #grafana #monitoring #attackers #breach #malicious #endpoint #cyberattack #cyberdefence #cybersecurity #fhn #firsthackersnews #informationsecurity #latestupdates

1

In betav1, Karpenter has adopted a more fine-grained approach to IAM permissions, aligning operations with security best practices and the principle of least privilege access. Learn more about these enhancements and what they mean for Karpenter users in this article by nOps engineer Alonso Parasxidis Moreno. https://lnkd.in/g6bdFq5g . #karpenter #aws #nops #eks

9

Cloud Console Cartographer: Free, Open-Source, and Making Security Simpler 💎Cloud Console Cartographer is an innovative open-source solution that helps you navigate the complex maze of console logs. It is designed to transform the chaos of log activity into clear and actionable insights. As more and more organizations adopt Infrastructure as Code, console access remains essential for various operations. However, dealing with the vast amount of log data generated by console sessions can be challenging for security professionals. 💎Despite the emergence of Infrastructure as Code, console usage remains prevalent. However, Cloud Console Cartographer mitigates the noise of logs generated by these sessions, allowing a clear understanding of console behavior. 💎Consider this scenario: when navigating to the IAM → Users section in the AWS console, it can trigger over 300 CloudTrail events. These events are mainly API calls that shape the console interface but can also overshadow the user's actions. For example, clicking on the IAM homepage may unintentionally trigger events such as iam: ListMFADevices or iam: ListAccessKeys, which may not be related to the user's original purpose. 💎This inherent ambiguity poses a formidable challenge for security teams as distinguishing between user-initiated API calls and secondary events becomes imperative. Threat actors capitalize on this convolution, exacerbating the complexity of incident response efforts. 💎The Cloud Console Cartographer is a tool that carefully examines raw log events and combines related actions into understandable sequences. Consolidating 17 events into a single action provides valuable context that includes active groups, policies, roles, or access keys. This correlation enables security teams to quickly understand console activity, which was previously a complex task. 💎Cloud Console Cartographer is now on GitHub and accessible to all, improving console log analysis and cybersecurity. Reflecting on the impact of deciphering console logs on your organization's security posture, how could Cloud Console Cartographer potentially revolutionize your approach?💬 #CloudSecurity #InfrastructureAsCode #LogAnalysis #OpenSource #SecurityAnalytics #ThreatIntelligence

3

This article explores the Kubernetes API groups and versions, highlighting the role of core and named groups in cluster management. More: https://lnkd.in/dXXHaUU6

1

In 2020, MinIO implemented Direct Persistent Volumes (DirectPV) for #Kubernetes-based deployments of MinIO storage. DirectPV is similar to LocalPV but dynamically provisioned. In this post, Praveen Raj Mani describes the interesting design decisions that went into creating #DirectPV as well as a quick review of Direct Persistent Volumes vs. Network Persistent Volumes. https://hubs.li/Q02pGDYQ0

12

In 2020, MinIO implemented Direct Persistent Volumes (DirectPV) for #Kubernetes-based deployments of MinIO storage. DirectPV is similar to LocalPV but dynamically provisioned. In this post, Praveen Raj Mani describes the interesting design decisions that went into creating #DirectPV as well as a quick review of Direct Persistent Volumes vs. Network Persistent Volumes. https://hubs.li/Q02pGKjb0

8

🚨Gitlab: Security Token Theft via Kubernetes Agent Server (KAS)🚨 In GitLab CE/EE versions from 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1, a medium severity vulnerability CVE-2023-7045 was detected. An attacker could exploit this vulnerability to steal security tokens through the Kubernetes Agent Server (KAS). Stay informed and learn how to protect your data by reading more about this vulnerability here: https://lnkd.in/dvuuB4pV. #vulnerability #security #hossted

1

Have you checked your CPU load lately? Do you know what CPU load is? Understand the work your central processing unit juggles, and learn how to manage it to keep your system running smoothly. #CPULoad #TechTips

1

New Blog Alert! Curious about the best tool for managing your Azure infrastructure? Our latest blog by Samir Zorlak, Software Developer, dives deep into the comparison between Terraform and Azure Bicep, exploring their key features, deployment processes and pros and cons. 🔍 What You'll Learn: - The versatility of Terraform with its multi-cloud support - How Azure Bicep simplifies Azure-native deployments - Detailed comparisons to help you choose the right tool for your project Whether you're a multi-cloud enthusiast or an Azure purist, this blog will provide you with valuable insights to streamline your infrastructure management. 👉 Read the full blog here:https://lnkd.in/dxafTaCC

32

🚨 What's the state of Kubernetes, 10 years into it? During #KubeCon, Sander Almekinders sat down with Shaun O'Meara from Mirantis to talk about what's happening in the world of #kubernetes. It's an interesting discussion about maturity, challenges and - of course - the impact AI has and will have on #cloudnative development. You can find the link to the episode in the first comment below 👇 Martha de Monclin

5

1 commentaar

"Debugging Kubernetes is Hard" - do we all agree with that? 🧐 In this video, we learn about Inspektor Gadget - a collection of eBPF-based gadgets to debug and inspect Kubernetes apps and resources! Watch now https://buff.ly/3xEj7cp #debugging #kubernetes #ebpf

10

2 commentaren

The tutorial guides you through setting up a budget-friendly Kubernetes playground on a dedicated server. It leverages k0s, MetalLB, Traefik Ingress, and the OpenEBS local path provisioner. More: https://lnkd.in/gabQ3zVV

9

🔒 The Lowdown on Locked Namespaces 🔒 ControlPlane’s Senior Consultant Marco De Benedictis gave a talk at KubeCon EU 2024, where he discussed how namespaces have grown from an optional feature to the cornerstone for several Kubernetes security controls and why you should consider them as a security boundary in your cluster 🔗 To read more about this, click the link below to read Marco’s blog piece 👇

17