Operations | Monitoring | ITSM | DevOps | Cloud

5 Takeaways from Gartner's 2020 IOCS Conference

I recently had the pleasure of attending the Gartner IT Infrastructure, Operations & Cloud Strategies (IOCS) Conference. Like most events in 2020, this event was virtual and brought together infrastructure and operations (I&O) leaders from across the world together to redefine, reassess, and prepare for what normal might be in the near future. Here are some of the major takeaways from my experience at this four-day event.

Detect CVE-2020-8554 using Falco

CVE-2020-8554 is a vulnerability that particularly affects multi-tenant Kubernetes clusters. If a potential attacker can create or edit services and pods, then they may be able to intercept traffic from other pods or nodes in the cluster. An attacker that is able to create a ClusterIP service and set the spec.externalIPs field can intercept traffic to that IP. In addition, an attacker that can patch the status of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.

Hindsight is 2020: How we learned to swim in the river

Come December, it’s traditional in the industry to meditate on emerging trends and make predictions about how these will shape the year to come. I have my fair share of prognostications for 2021, but I want to take this moment to reflect on a year that could never have been predicted.

Introducing Monitoring Query Language, now GA in Cloud Monitoring

Developers and operators on IT and development teams want powerful metric querying, analysis, charting, and alerting capabilities to troubleshoot outages, perform root cause analysis, create custom SLI / SLOs, reports and analytics, set up complex alert logic, and more. So today we’re excited to announce the General Availability of Monitoring Query Language (MQL) in Cloud Monitoring! MQL represents a decade of learnings and improvements on Google’s internal metric query language.

What to Expect from DevOps in 2021

As we move into the next year, we are hoping for a return to relative normalcy. That goes for our personal lives, social lives, and professional lives. Professionals have acclimated to the situation, or now see a return to relative normalcy just around the corner with the development of vaccines. And despite the wait, different industries and the DevOps community in particular have persisted.

How to Manage MSP Businesses More Efficiently

By leveraging specialist tools built to save time, money, and effort, MSPs can manage their business more effectively. There has been an increased demand for high-quality IT services and MSPs this year. Due to the pandemic, the majority of companies have been forced to adopt remote working conditions, which has led many to seek out support for their IT services that they haven’t necessarily needed in the past.

SDLC Security: It's Personal for JFrog

The SolarWinds hack, which has affected high-profile Fortune 500 companies and large U.S. federal government agencies, has put the spotlight on software development security — a critical issue for the DevOps community and for JFrog. At a fundamental level, if the code released via CI/CD pipelines is unsafe, all other DevOps benefits are for naught.

An introduction to the Elastic data stream naming scheme

With Elastic 7.9, the Elastic Agent and Fleet were released, along with a new way to structure indices and data streams in Elasticsearch for time series data. In this blog post, we'll give an overview of the Elastic data stream naming scheme and how it works. This is the first in a series of blog posts around the Elastic data stream naming scheme.