Alfonso Valdes

Is your Kubernetes ingress secure?👮 🔐How to secure it: Envoy Gateway + Security Policies +Coraza WAF Don't only secure the external facing edge. Secure the internal edges too. Focus on three areas at every edge: 1. Encrypt data 2. Authorize access 3. WAF for attack prevention Don't just lock the front door—lock every door. How do you secure the Kubernetes edge? What features do you wish you had? 📰 Read the article: https://lnkd.in/gaPnUPdJ ✍️ Written by Erica Hughberg

3

Learn how to deploy Buildbarn on Kubernetes with added security using mTLS. This guide, by Yuriy Taraday, walks you through the setup process, ensuring your distributed build system is both scalable and secure. https://hubs.ly/Q02Q48YX0

8

Engineers who deploy many applications to production discover the importance of LLM Proxy. In his latest blog post, Diogo Azevedo walks you through deploying our open-source proxy solution, LLMstudio, on Google Kubernetes Engine. This powerful setup is designed to serve as a scalable LLM proxy for your organization. 🔗 Ready to dive into the technical details? Check out Diogo’s full step-by-step guide here: https://lnkd.in/dwyD_Mtk #AI #LLM #GKE #Kubernetes #GoogleCloud

10

In this KubeFM episode, Yakir and Assaf from Aqua Security explore how a robust Kubernetes secrets strategy is necessary to prevent leaks and maintain a strong security posture. You will learn: - How Kubernetes secrets are leaked, and what tools can you use to prevent that (Hint: Yakir and Assaf suggested using more than one.) - How shadow IT is a more significant threat you might think and why companies should monitor personal Github repositories. - What happens when a secret is leaked and how attackers exploit your resources (or further gain access to more). Watch (or listen to) it here: https://lnkd.in/gAmW-nxZ 🙏 Many thanks to Isovalent for supporting our work and sponsoring this episode. Make sure to watch the top Kubernetes security use cases that Tetragon and eBPF cover for platform teams https://lnkd.in/gZRu-pyC With 🎙Bart "The vivacious riddler" Farrell

24

🚨 Exposed Kubernetes secrets are a ticking supply chain attack bomb! Yakir Kadkoda and Assaf Morag break down this critical issue on KubeFM, offering insights on how to stay secure. Check out the full conversation here ⤵️ https://lnkd.in/gAmW-nxZ #AquaNautilus #ThreatResearch #Kubernetes

24

1 Comment

🔍 Unlock seamless security with DuploCloud’s provider for Terraform and Pulumi! 🔐 With DuploCloud’s IaC provider, integrating advanced security constructs into your cloud infrastructure has never been easier! Effortlessly use tenant IAM roles, instance profiles, KMS keys, and more—all while ensuring that resources created via IaC fully leverage DuploCloud's powerful security features. 🛡️✨ Take control of your infrastructure with confidence, knowing your security is built right in from the start. 🚀 For more information on working with DuploCloud's IaC provider, follow this link: https://hubs.li/Q02PL5dK0

3

⚠️Medium Risk Vulnerability Alert⚠️: CVE-2021-43815 Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths. CVSSv3.1 Base Score: 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #grafana #apisecurity #owasp https://lnkd.in/d4VKqS76

8

🐳 #Docker or #Kubernetes? Join 📦️ Jérôme Petazzoni, Docker original dev advocate, for a deep dive into container technologies, managing Kubernetes across multiple providers, unexpected IaC challenges and more! Tune in to our latest episode now👇

6

1 Comment

🚀 Introducing K8 Mate: Your Ultimate Kubernetes Visualization Tool 🌐 We're excited to announce the launch of K8 Mate 🎉, a comprehensive tool designed to simplify Kubernetes monitoring and visualization! K8 Mate brings clarity to your Kubernetes clusters, offering an intuitive interface and a suite of powerful features tailored to enhance your DevOps experience. 🔑 Key Features: 🔔 Custom Alerts: Stay ahead of issues with custom alerts, utilizing Prometheus for real-time monitoring of cluster health and performance metrics. 🌳 Tree Visualization: Easily explore your cluster's architecture with our tree visualization, detailing nodes, services, pods, and containers. 📊 Grafana Integration: Leverage Grafana's live graph visualization to track and analyze metrics with ease, directly within K8 Mate. 🖥️ Interactive Dashboards: Utilize a clean, interactive interface to navigate through various Kubernetes components, providing a clear understanding of your cluster's state. 🤖 Automated Anomaly Detection: Automatically detect and analyze anomalies, simplifying root cause analysis to keep your clusters running smoothly. 🔗 Seamless Integration: Integrates effortlessly with existing Kubernetes setups, providing immediate insights without the hassle. K8 Mate is here to make Kubernetes management more intuitive and efficient. Give it a try and experience a new level of clarity in your Kubernetes operations! 🎊 👉 Check out our page at: k8mate.vercel.app 👉 Dive into the code on GitHub: https://lnkd.in/ggn6r5Xk

7

Unlocking advanced FerretDB placement policies in Kubernetes with Nova! 🔗 https://lnkd.in/ezDwmT7x Learn how Maciek Urbański defines policies for redundancy, replication, and tailored configurations for seamless operations. 💙 Elotl #Kubernetes #DatabaseManagement #Nova #TechTrends #CloudNative #DevOps

4

🚨 Kubernetes Alerts Got You Asking Questions? 🚨 💭 Why did this alert trigger? 💭 Is my cluster healthy? 💭 What should I do next? No worries! 🤝 KubeHA is here to simplify your Kubernetes monitoring and alerting experience! 🛠️🌐 🗓️ Mark Your Calendars – November 27, 2024 🥳 🎉 KubeHA is launching on Product Hunt! https://lnkd.in/gFCjZB3n🚀 If you want to access pre-launch, try KubeHA in just 6 min: 📋 Fill out the form 👉https://lnkd.in/gdWhKfjD 💌 Get your credentials sent immediately—start exploring without delays! ✨ What to Expect? ✅ Smarter insights for faster resolutions ⚡ ✅ Enhanced reliability for your Kubernetes clusters 🛡️ ✅ Tools that empower your team to troubleshoot like pros 🧑‍💻👩‍💻 ⏳ Only 9 Days to Go! 🕘 👉 Visit: https://kubeha.com/ 📱 Scan the QR Code to learn more and stay ahead! Join us on this exciting journey to revolutionize Kubernetes alert management! 🌟 #kubeha #Kubernetes #DevOps #KubeHA #ProductHunt #CloudNative

5

2 Comments

Maintain safe and secure deployments to Kubernetes with Octopus 👏 When scaling Kubernetes deployments it can be hard to ensure safety and security. But not with Octopus. Octopus provides built-in RBAC controls and ITSM integrations to handle access to projects, approvals, and safe deployments to production. Audit logs store every action so you have a complete picture of who did what and when. Runbooks let you automate day-0 provisioning and day-2 maintenance tasks that your team can self-serve with a single click. Learn more: https://lnkd.in/g63sT52P #Kubernetes #ContinuousDelivery #OctopusDeploy #DevOps

17

💡 Where are #Terraform Output values stored? Can they be maps? Learn what outputs are, when to use them vs input variables, and see code examples for AWS/Azure/GCP, plus tips on: ✅ Handling sensitive data with output arguments ✅ Formatting outputs with -json flags ✅ Advanced techniques like loops and conditionals Read the full guide now 👇

15

🎥 𝐍𝐞𝐰 𝐕𝐢𝐝𝐞𝐨 𝐀𝐥𝐞𝐫𝐭! 🎥 Just released a video on "𝐔𝐩𝐠𝐫𝐚𝐝𝐢𝐧𝐠 𝐚 𝐤𝐮𝐛𝐞𝐚𝐝𝐦 𝐂𝐥𝐮𝐬𝐭𝐞𝐫 𝐟𝐫𝐨𝐦 𝐯𝟏.𝟐𝟗 𝐭𝐨 𝐯𝟏.𝟑𝟎 | 𝐒𝐭𝐞𝐩-𝐛𝐲-𝐒𝐭𝐞𝐩 𝐆𝐮𝐢𝐝𝐞" 🚀 If you’re managing Kubernetes clusters, staying up-to-date with the latest versions is crucial for enhanced features, security, and performance. In this video, I walk you through the entire upgrade process, ensuring a smooth transition with zero downtime. 🔧 𝐖𝐡𝐚𝐭 𝐘𝐨𝐮'𝐥𝐥 𝐋𝐞𝐚𝐫𝐧🔧 Pre-upgrade checklist 📝 Safely draining nodes 🛠️ Upgrading kubeadm, kubelet, and kubectl 🔄 Validating the upgrade ✅ Handling potential pitfalls 🚨 Whether you're a seasoned Kubernetes admin or just getting started, this guide will help you keep your clusters running smoothly. 🔗 𝐂𝐡𝐞𝐜𝐤 𝐢𝐭 𝐨𝐮𝐭 𝐡𝐞𝐫𝐞: https://lnkd.in/g5muiDQU Don't forget to like, share, and subscribe for more Kubernetes content! hashtag #Kubernetes #kubeadm #DevOps #CloudComputing #Tech #Upgrades

3

🔥 Serverless Infrastructure Mastery Alert! 🔥 Matteo Madeddu, a Platform Engineer at Prima Assicurazioni and an AWS Community Builder, is bringing the heat to ServerlessDays 2024 Milano with his talk: 📌 Title: AWS CDK and stack inheritance unveil the power of serverless infrastructures composition Matteo will take you on a journey through AWS Cloud Development Kit (CDK), showcasing how to build modular backends with reusable and extensible stacks. Starting small with a serverless upload form, you'll learn to iteratively construct more complex infrastructures like a producer/consumer chain and even a serverless OCR application leveraging Polly and Rekognition. But that's not all! Matteo will unlock the true power of AWS CDK by diving into stack inheritance, a game-changing feature that enables infrastructure reuse and modularity like never before. Check out the full agenda at https://buff.ly/2x6GecK and snag your tickets (running low!) at https://buff.ly/4az86aY #ServerlessDays

34

1 Comment