Operations | Monitoring | ITSM | DevOps | Cloud

In this post we want to give a simple introduction for using network policies in a sample project and explaining how it works in K3s to help improving the security of your deployments. There is a common misunderstanding about K3s support for network policies, as K3s is using flannel CNI by default, and the Flannel CNI doesn’t support network polices.

Rancher is a Kubernetes management platform that creates a consistent environment for multicloud container operation. It solves several of the challenges around multicloud Kubernetes deployments, such as poor visibility into where workloads are running and the lack of centralized authentication and access control. Multicloud improves resiliency by letting you distribute applications across providers.

Cloud technology is growing rapidly, and we see a new cloud service almost every day. Deploying your product releases rapidly and efficiently is crucial for any business. AWS, being the market leader in the cloud world, has a lot of tools and services which facilitate deployments. Last year, we discussed different deployment options on AWS. Now that AWS has launched some new features, we will present the 2023 version of our previous article on the best AWS deployment options in 2022.

What is the difference with similar tools? Detect graftcp with Falco Conclusion A new network open source tool called graftcp (GitHub page) has been discovered in everyday attacks by the Sysdig Threat Research Team (TRT). Nowadays, threat actors try to improve their techniques by using new tools (as we mentioned in the PRoot article) to enhance the compatibility of their code to hit as many targets as possible and hide their traces properly.

The arrival of Docker container technology brought with it an amazing array of capabilities. By encapsulating an entire software package, including its dependencies and libraries, into a single, portable container, Docker has made deployment across platforms such as AWS, Google Cloud, Microsoft Azure, and Apache a simple and straightforward process. When people talk about Docker, they probably talk about Docker Engine, the runtime that allows you to build and run containers.

Security in the cloud has become an increasingly important topic over the years, with the move to more managed services, additional trust is being handed over to cloud providers. With this being said, we must begin to pay closer attention to the security surrounding cloud computing, especially when it comes to Kubernetes. Join me as I explore the concept of confidential computing and a new use case we at Civo have been working on related to the Kubernetes control plane in managed clusters.

Overprovisioning or underprovisioning your Kubernetes resources can have significant consequences on both your budget and your app performance. By underprovisioning your Kubernetes infrastructure, you’ll end up with lagging, underperforming, unstable, or non-functional applications. On the opposite end of the spectrum, overprovisioning is a costly issue: Organizations spent almost $500 billion on cloud resources in 2022, yet an estimated 30% of those were wasted.

We are thrilled to announce our partnership with Kubecost, a game-changing provider of cost monitoring for Kubernetes clusters. This collaboration marks a new era in efficiency and cost-effectiveness for DevOps teams everywhere. With Kubecost's advanced monitoring capabilities integrated into our own Kubernetes deployment platform, we are empowering organizations to take control of their cloud-native infrastructure like never before.