Cloudnative Anatomy of a CVE This article is an in-depth exploration of an impactful container-breakout vulnerability affecting runc-based container runtimes.
Security Codebreaking Clouds: Hacking Cloud Native Environments through VAPT Mastery. Discover all you need to know about Cloud-Native Vulnerability Assessment and Penetration Testing (VAPT) with practical examples.
Kubernetes Secure Your Kubernetes Environment with OPA and Gatekeeper We will introduce you to the powerful combination of Open Policy Agent (OPA) and Gatekeeper for Kubernetes security.
Security Supply Chain Security Framework: S2C2F In this article, we will introduce you to S2C2F. The Secure Supply Chain Consumption Framework is a combination of requirements and tools for any organization to adopt made by the Open Source Security Foundation.
announcements Fury Distribution v1.25.3 and furyctl-ng v0.25.0-beta.0 are now available We're thrilled to introduce the latest releases of Fury Distribution v1.25.3 and furyctl-ng v0.25.0-beta.0.
Kubernetes Developing software on Kubernetes in 2023 - Part 1 Discover how to use tilt.dev to streamline the development process on a local machine in a Kubernetes-based workflow.
conference FOSDEM + Cfgmgmtcamp 2023 Here are our takeaways from FOSDEM + Cfgmgmtcamp 2023, two of the most interesting conferences in the Open Source space in Europe
DevSecOps Snyk and Shift-Left approach: Boosting your security compliance with ease. This article will provide a brief overview, some example use cases on Snyk's tools and features, and how we used it to improve Kubernetes Fury Distribution's security.
Cloudnative PromCon EU 2022: Our highlights As our company sponsored PromCon EU 2022 and a delegation of us had the chance to attend the conference, we decided to share an event wrap-up.
Kubernetes How to run untrusted containers in Kubernetes The IT world is adopting container-based infrastructures more and more every day. However, the advantages, disadvantages and even the limitations are not clear to everyone.
Security Awesome CKS – Tips and tricks Preparing for a certification exam is always challenging. You have to retrieve the material to study, the exercises, and above all, to have a suitable environment to practice.
Cyberark Managing Kubernetes secrets with CyberArk Conjur We will explore the different strategies available to access Conjur secrets in Kubernetes and which use case they solve.
Kubernetes How to run Kubernetes without Docker Sooner or later this moment had to come, and it finally has: Kubernetes is deprecating Docker as a Container Runtime Interface in favor of the other supported runtimes. Let's try to explain why Docker seems really replaceable.
Java A journey of migration: Java applications on Kubernetes Your journey to migrate Java applications from standard systems, such as physical or virtual machines, to a Kubernetes cluster is full of threats. Here you can find some guidelines to follow if you want to avoid the main dangers and make the trip as safe as possible.
GitOps How adopting GitOps made our lives easier GitOps is a buzzword, but it's also a concept which simply just works. In this article, I'll share the story of how and why it worked for my Kubernetes Infrastructure team.
GitOps Keeping Kubernetes Secrets secret in Flux Managing Secrets is a tough challenge in GitOps. This article explores how Bitnami Sealed Secrets can be used to handle your Kubernetes Secrets in a Flux workflow.
Kubernetes Secrets? It is one of the most controversial topics when you start playing around with Kubernetes: Secrets are not secrets. You probably hear about them as an "encrypted" alternative to the ConfigMaps. But are they "encrypted"?
Kubernetes Featured Another brick in the SIGHUP Cloud-Native Stack: Introducing the Certified Container Images (CCI) SIGHUP is happy to introduce Certified Container Images (CCI): a secured and supported catalog of cloud native docker images to run your containerised workloads with confidence by SIGHUP
Kubernetes Featured Hierarchical Namespace Controller (HNC): a look into the future of Kubernetes Multitenancy Hierarchical Namespace Controller (HNC) is bringing a better multi-tenancy model to Kubernetes. In this article we are exploring the current state of the project and useful use-cases.
Kubernetes Introducing support for Kubernetes 1.17 and 1.18 -Welcome Kubernetes Fury Distribution (KFD) v1.3.0 We are happy to introduce official and certified support for Kubernetes 1.17 and 1.18 to our Kubernetes Fury Distribution (KFD) with release 1.3
Kubernetes Featured Announcing Kubernetes Fury Distribution (KFD) v1.2.0: new installers, certified Kong module, Harbor Container Registry and more We are happy to announce Kubernetes Fury Distribution v1.2.0 shipping three main new features: improved public cloud installers, Kong is now our certified API gateway and support for Harbor as registry.
Announcing our latest release of Kubernetes Fury Distribution (KFD) - Fury v1.1 We are happy to announce our amazing Product Team at SIGHUP has just released v1.1 for Kubernetes Fury Distribution [https://github.com/sighupio/fury-distribution/releases/tag/v1.1.0]. This update comes with a ton of changes - you can check out the official release page on GitHub, linked
dotscale Featured dotScale 2018 recap Conferences are a place to get inspired and motivated. Let me share with you the ideas out of dotScale 2018.
Terraform Featured Running terraform in production: best practices and lessons learnt Terraform allows for the automation of your cloud infrastructure. Being able to maintain that infrastructure with ease requires attention to details