Kubernetes

State of Kubernetes 2023 Report – The most interesting findings

Importance of cloud-native technologies, benefits, application models and challenges: The findings of VMWare's State of Kubernetes 2023 report.

24.04.2023

See Post

Blogpost

Coding Continuous Delivery: CIOps vs. GitOps with Jenkins

Continuous delivery (CD) is an agile software development approach that has proven to be a suitable way to reliably and repeatably produce high-quality software in short cycles. The use of containers and the cloud, e.g., on platforms such as Kubernetes (K8s), offers many opportunities to make CD processes more robust and simpler. One such option is GitOps. This article provides some concrete examples to illustrate the differences between classic CD pipelines (CIOps) and GitOps processes.

21.04.2023

See Post

Blogpost

Automation assistants: GitOps tools in comparison

If you want to switch from classic CI/CD environments to GitOps, then you can choose from any of a large number of available tools. However, it is not always easy to tell which features they support and how suitable they are for your project at first glance. This article provides help in making a decision.

14.04.2023

See Post

Blogpost

GitOps and Kubernetes – Secure Handling of Secrets

The handling of secrets in the Kubernetes environment is still often not secure. With the introduction of GitOps at the latest, secure handling is enforced. Here are a few solutions.

16.01.2023

See Post

Blogpost

Kubernetes least privilege implementation using the Google Cloud as an example

Everyone knows it: granting privileges is always a balance between security, usability and maintenance effort. If permissions are granted very generously, the effort is very low and there are rarely any hurdles to use; however, security is compromised. If permissions are granted sparingly, security is higher, but there are costly processes and a lot of administrative overhead.

07.04.2022

See Post

Blogpost

Kubernetes AppOps Security Part 6: Pod Security Policies (2/2) - Exceptions and Troubleshooting

Pod Security Policies (PSP) allow to use cluster wide settings that are used for all new containers. In comparison to the Security Context, the usage of PSPs not as easy, but especially for large organizations with large clusters it can be beneficial to use them, because they reduce the necessity for manual configuration.

28.10.2020

See Post

Blogpost

Kubernetes AppOps Security Part 5: Pod Security Policies (1/2) – Good Practices

Pod Security Policies (PSP) allow to use cluster wide settings that are used for all new containers. In comparison to the Security Context, the usage of PSPs not as easy, but especially for large organizations with large clusters it can be beneficial to use them, because they reduce the necessity for manual configuration.

30.09.2020

See Post

Blogpost

Kubernetes AppOps Security Part 4: Security Context (2/2) – Background

A container is basically a normal Linux process that runs isolated from the rest of the system via certain kernel components. This makes containers lighter but more vulnerable than virtual machines (VMs). To reduce this vulnerability to attack, the container runtimes offer a variety of settings whose default values strike a compromise between usability and security.

19.05.2020

See Post

Blogpost

Kubernetes AppOps Security Part 3: Security Context (1/2) – Good Practices

The virtual construct of a “container” is a normal Linux process at its core that largely runs in isolation from the rest of the system using certain kernel components. This makes containers lighter but more vulnerable than virtual machines (VMs). To reduce this vulnerability to attack, the container runtimes offer a variety of settings whose default values strike a compromise between usability and security.

17.03.2020

See Post

Blogpost

Docs As Code – Continuous Delivery of Presentations with reveal.js and Jenkins – Part 2

The first part of this series demonstrated the use cases and benefits of delivering presentations with reveal.js. They are Docs As Code, and therefore they can be subjected to versioning management and of course delivered via Continuous Delivery. Furthermore, we demonstrate how the Jenkins pipelines can be used to deploy to GitHub Pages using a model concrete implementation. This article demonstrates additional alternatives for deployment (Sonatype Nexus and Kubernetes), while the general structure of the `Jenkinsfile` remains the same.

11.02.2020

See Post

Blogpost

Kubernetes AppOps Security Part 2: Using Network Policies (2/2) - Advanced Topics and Tricks

In a Kubernetes cluster, everything (nodes, pods, Kubelets, etc.) can communicate with each other by default. If an attacker succeeds in exploiting a security vulnerability in one of the applications, he can easily expand his attack to all underlying systems in the same cluster. You can restrict this vulnerability using the on-board network policy features found in Kubernetes.

21.01.2020

See Post

Blogpost

Kubernetes AppOps Security Part 1: Using Network Policies (1/2) – Basics and Good Practices

If you deploy applications on a managed Kubernetes cluster, operations is responsible for security, right? Not really! Even though Kubernetes abstracts from hardware, its API offers many possibilities for developers to improve security for the applications that are operated on it, by not just using the default settings. This post explains for which attack vectors network policies can offer protection and it will also show pragmatic good practices based on practical examples.

29.10.2019

See Post

Blogpost

Docs As Code – Continuous Delivery of Presentations with reveal.js and Jenkins – Part 1

Reveal.js allows software developers to use web technologies (HTML, CSS, JavaScript) to deploy slides for presentations and to display them in the browser. This eliminates the dreaded mouse-driven excursion into the world of PowerPoint/Impress, with its incompatibilities between Microsoft Office, Libre/OpenOffice, problems with Linux, and exclusive access requirements to make editing changes.

26.08.2019

See Post

Blogpost

Coding Continuous Delivery — Static Code Analysis with SonarQube and Deployment on Kubernetes et al. with the Jenkins Pipeline Plugin

Jenkins Pipelines were subject to three former blog posts. This last part one is dedicated to the integration of SonarQube, Kubernetes and CD on other platforms.

13.07.2018

See Post

All articles for topic "Kubernetes"

State of Kubernetes 2023 Report – The most interesting findings

Coding Continuous Delivery: CIOps vs. GitOps with Jenkins

Automation assistants: GitOps tools in comparison

GitOps and Kubernetes – Secure Handling of Secrets

Kubernetes least privilege implementation using the Google Cloud as an example

Kubernetes AppOps Security Part 6: Pod Security Policies (2/2) - Exceptions and Troubleshooting

Kubernetes AppOps Security Part 5: Pod Security Policies (1/2) – Good Practices

Kubernetes AppOps Security Part 4: Security Context (2/2) – Background

Kubernetes AppOps Security Part 3: Security Context (1/2) – Good Practices

Docs As Code – Continuous Delivery of Presentations with reveal.js and Jenkins – Part 2

Kubernetes AppOps Security Part 2: Using Network Policies (2/2) - Advanced Topics and Tricks

Kubernetes AppOps Security Part 1: Using Network Policies (1/2) – Basics and Good Practices

Docs As Code – Continuous Delivery of Presentations with reveal.js and Jenkins – Part 1

Coding Continuous Delivery — Static Code Analysis with SonarQube and Deployment on Kubernetes et al. with the Jenkins Pipeline Plugin