With the acceleration of digitalization, enterprises across all verticals are running more and more distributed applications deployed on multiple clouds. This poses a new set of challenges when it comes to maintaining, updating, and securing these distributed applications. Our customers are looking for solutions to connect and secure their applications for rapid delivery with minimal disruptions and code changes.
The upstream Kubernetes community recently discovered a security issue—CVE-2020-8554— affecting multitenant clusters that allows anyone who is able to create a ClusterIP service and set the spec.externalIPs field to intercept traffic to that IP address. There is no patch for this issue yet, and it can currently only be mitigated by restricting access to the vulnerable features.
Kubernetes monitoring can be complex. To do it successfully requires several components to be monitored simultaneously. First, it’s important to understand what those components are, which metrics should be monitored and what tools are available to do so. In this post, we’ll take a close look at everything you need to know to get started with monitoring your Kubernetes-based system.
More and more employers are looking for people experienced in building and running Kubernetes-based systems, so it’s a great time to start learning how to take advantage of the new technology. Elasticsearch consists of multiple nodes working together, and Kubernetes can automate the process of creating these nodes and taking care of the infrastructure for us, so running ELK on Kubernetes can be a good options in many scenarios.
With massive adoption of Kubernetes at enterprises worldwide, we are seeing Kubernetes going to new extremes. On the one hand, Kubernetes is being adopted for workloads at the edge and delivering value beyond the data center. On the other hand, Kubernetes is being used to drive Machine Learning (ML) and high-quality, high-speed data analysis capabilities.
Intezer and Microsoft reported on Sept. 9 that TeamTNT hackers are deploying Weave Scope in compromised systems as an auxiliary tool in their intrusions. Weave Scope is a legitimate and powerful tool to manage server infrastructure that, once deployed, makes it easy to control all resources. In this article, we will describe how this tool can be used maliciously, and how to add specific checks in your security set up to look for it.
We are pleased to announce that Spring Cloud Data Flow for Kubernetes 1.2.0 is now generally available. This commercial offering bundles the latest open source release of Spring Cloud Data Flow with several new features designed to boost developer productivity. The new product is supported by VMware as part of VMware Spring Runtime.
I joined Civo just over a year ago (straight out of a web development bootcamp) and had to quickly become familiar with concepts of Kubernetes and modern cloud-native software development as we prepared to launch our #KUBE100 beta. So, I, along with the rest of the team, thought about how we could help new users learn the basics of Kubernetes in a simple, practical, and fun way. This is how KubeQuest was born.
DigitalOcean has just announced the DigitalOcean Container Registry, which is directly integrated into the DigitalOcean Dashboard. While you can use any Container Registry in your DigitalOcean resources, the goal of the Container Registry is to provide for easy connection between the Container Registry and DigitalOcean Kubernetes resources.
Each Kubernetes release is driven by the community. The features that are delivered, along with the release cadence, are guided by Kubernetes contributors. This year presented a number of challenges that impacted the community and, as a result, the Kubernetes 1.19 release was prolonged and saw a large focus on stability, both in terms of testing and features delivered. After this prolonged release, there was just enough time to get one more release out for the year!
