Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Containers, Kubernetes, Docker and related technologies.

Top Cloud-Native Guides for 2020

2020 was a busy year for Civo, and we couldn’t have done it, and get where we are now, without our community of users. Between the wider community, our Civo Ambassadors, and our staff team, there is an enormous amount of knowledge and skill to be found. I’d like to present some of our top cloud-native guides for the year gone by, drawn both from guides published on our site and around the web by our community of users.

5 Best practices for ensuring secure container images

Most modern organizations understand that the earlier you integrate security into the development process, the more secure the applications will be in production. For containerized workloads, securing the container image throughout the application life cycle is a critical part of security, but many organizations don’t even follow basic best practices for ensuring secure container images.

Calico in 2020: The World's Most Popular Kubernetes CNI

Calico and Kubernetes go hand-in-hand. Kubernetes is the de facto standard for deploying and managing container-based applications at scale, both on-premises and in the cloud. Calico continues to be the most popular open-source networking and network security solution for Kubernetes. Despite the cataclysmic events that occurred in 2020, the Calico community, supported by the team at Tigera, remained focused and achieved several major successes. We are excited to share these highlights.

Key Kubernetes audit logs for monitoring cluster security

Kubernetes continues to be a popular platform for deploying containerized applications, but securing Kubernetes environments as you scale up is challenging. Each new container increases your application’s attack surface, or the number of potential entry points for unauthorized access. Without complete visibility into every managed container and application request, you can easily overlook gaps in your application’s security as well as malicious activity.

FlashDrive's mission

This is everything you need to know about FlashDrive, and how it can help you reduce your infrastructure costs while improving your applications' responsiveness and overall quality. FlashDrive is a Docker cloud hosting service constituted in a network of high availability clusters located in North America and Europe. To completely understand what FlashDrive is and how it can help you, let's first talk about the Docker cloud, containers, and the purpose of containerization.

Heroku vs AWS: What to choose as a startup?

Cloud computing sometimes spoils one with choices. Let's just take a look at a couple of common cloud services. You can use cloud services to deploy and scale web and mobile apps besides monitoring them. AWS and Heroku provide cloud computing resources. AWS is from Amazon, while Heroku is from Salesforce. In this article, let us see which one is better to use from the start-up perspective.

Building a Cloud Strategy with Kubernetes

Enterprises are increasingly trying to leverage diversified cloud infrastructures. Specifically, to scale as business demand varies. So, how can you scale your applications to meet customer demands? The answer is you want to deploy your software on-premises or to a specific public cloud, based on business value. Kubernetes is the answer to your cloud strategy and it provides a holistic solution that simplifies the deployment, management, and operational tasks. Write to us: contact@ziniosedge.com

Detect CVE-2020-8554 using Falco

CVE-2020-8554 is a vulnerability that particularly affects multi-tenant Kubernetes clusters. If a potential attacker can create or edit services and pods, then they may be able to intercept traffic from other pods or nodes in the cluster. An attacker that is able to create a ClusterIP service and set the spec.externalIPs field can intercept traffic to that IP. In addition, an attacker that can patch the status of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.