Ryan Willger

If you're looking for a mindblowing video tut on dynamic admission control, aka mutating versus validating webhooks look no further than the video below. Marcel Dempers gives a thorough introductory treatment on the topic with style and authority. You can't really understand kubernetes unless you're coding to, or extending, its API in some way. Highly recommended!

1

Chatgpt is becoming more of a great everyday tool in an IT person's toolbox. The more you understand it and understand how to extract the information you need out of it, its easy to skip pass the fluff or things that dont make sense. Needing to import hundreds of existing subnets into terraform using terraforms import block, i knew i did not want to import all of that per subnet and that i also needed to import these into modules. Essentially I have a code block that does a for_each through all of the subnets that come into the variable. import {  for_each = { for key, value in var.subnet : key => value if value.import }  id = each.value.import_resource_id  to = module.subnet.azurerm_subnet.main[each.key] } Only problem was i needed all of those subnets in a specific format in my tfvars file before i could do that. In comes chatgpt and a very much needed python script. As somebody who didnt have the need or time to spend a ton of time writing that script out, i was able to ask it a very small subset of questions piecing this script together found here in my github https://lnkd.in/gWSarEpH. I of course used powershell to export out the subnets in a specific format also that was needed. All in i was able to take a task that could have taken me days to complete by not having to manually import all those subnets in one by one and also generating a script using chatgpt vs having to search forums and ask around and get a bunch of methods for the same outcome. What are some IT use cases you have used chatgpt to improve daily task? #chatgpt #ai #automation #scripting

5

1 Comment

Both orchestrated containers and serverless functions are extremely flexible and powerful tools to build modern applications on top of – but which is best for your project? AIM Consulting Group breaks down the differences between the two methodologies and shares how to evaluate when to apply one over the other. #Serverless #Kubernetes #K8s #ApplicationDevelopment https://lnkd.in/gBrKqQ7e

3

Learn how to use Kyverno, the native policy engine for Kubernetes, to enforce policies, validate configurations, and manage resources dynamically within your Kubernetes clusters. https://lnkd.in/gaDZkFm9

48

2 Comments

Long trusted for expertise in application security and analysis, Veracode adopted Kubernetes approximately two years ago. As they migrated to Amazon EKS, they recognized the need to ensure compliance with reliability and security policies across their Kubernetes deployments. Our latest case study dives into how they built reliability and security into their K8s infra right from the start: https://bit.ly/48DVU8G #kubernetes #infrastructure #veracode #fairwindsInsights #K8s #reliability #security #casestudy

3

More AWS Identity Launches! Yesterday, we launched support for the AWS CLI to get credentials from Identity Center using OAuth2 Authorization Code Grant + PKCE. If you're a real OAuth standards nerd, it's also using dynamic client registration. That's certainly a mouthful, but what this means is that now you can sign into the AWS CLI without using device code, which is faster and more secure(much more phishing resistant). https://lnkd.in/gfTtEqVH Happy pre:invent!

146

8 Comments

Learn how to deploy Buildbarn on Kubernetes with added security using mTLS. This guide, by Yuriy Taraday, walks you through the setup process, ensuring your distributed build system is both scalable and secure. https://hubs.ly/Q02Q48YX0

8

Terraform is really meant to be able to build more complex environments. Watch all of Episode 5 featuring the Frozen Hurricane and Q&A with Mike McCabe on infrastructure as code at https://lnkd.in/gcgqbQCi. ✅ Don't forget to hit that subscribe button! #terraform #cloudsecurity

8

Maintain safe and secure deployments to Kubernetes with Octopus 👏 When scaling Kubernetes deployments it can be hard to ensure safety and security. But not with Octopus. Octopus provides built-in RBAC controls and ITSM integrations to handle access to projects, approvals, and safe deployments to production. Audit logs store every action so you have a complete picture of who did what and when. Runbooks let you automate day-0 provisioning and day-2 maintenance tasks that your team can self-serve with a single click. Learn more: https://lnkd.in/g63sT52P #Kubernetes #ContinuousDelivery #OctopusDeploy #DevOps

17

Microsoft's new HybridCache 🤑 gives developers more affordable options to choose from other than Redis in a distributed cloud environment.

1

“As more and more applications continue to get built, we are approaching a critical point where managing applications without AI and automation will become impractical. Applications are going to be vulnerable if they’re not managed by AI capable of providing actionable insights.” #DevOps #AI #LegacyApps

16

🔐 Building a Secure Software Development Practice with SAMM Governance | Strategy and Metrics As software architects, DevSecOps practitioners, and leaders in IT companies, we’re always seeking ways to make security a foundational pillar of our software development lifecycle. One such guiding framework is OWASP’s Software Assurance Maturity Model (SAMM), which provides a comprehensive approach to integrating secure practices across the software lifecycle. Today, I want to highlight the Governance domain—particularly focusing on Strategy and Metrics. 🧭 Strategy & Metrics: Every successful security initiative begins with a clear strategy backed by measurable goals. SAMM’s Strategy & Metrics practice helps organizations define their security strategy and ensure alignment with business objectives, allowing us to quantify the impact of security initiatives. Key takeaways: • Align security with business goals: Security should drive business value, not hinder it. • Create a security roadmap: Establish clear goals for evolving your software security practices over time. • Monitor & measure progress: Use KPIs and metrics to track the impact and success of your security initiatives. • Continuous improvement: Use insights to adjust strategy and tactics to address evolving risks. 🔑 Why is this important? The Governance domain emphasizes that security must be part of the organization’s DNA. With an actionable strategy and solid metrics, teams can not only comply with security standards but also foster a culture where security is proactive and integral. 💡 If you’re looking to mature your security posture, OWASP SAMM is an excellent framework to start with. Remember: What gets measured, gets improved! https://lnkd.in/dgVAGy2i #DevSecOps #OWASPSAMM #Governance #SoftwareSecurity #Strategy #Metrics

15

1 Comment

Announcing Firefly Workflows—simplify the way you deploy infrastructure using Terraform with your existing CI/CD solution. 🚀 GitOps Automation → Meet IaC Accelerate your cloud operations and manage infrastructure with unparalleled confidence. With Workflows you can enhance your IaC pipeline with GitOps automation for superior efficiency and reliability, all while leveraging your existing tech stack. 🌟 Features of Firefly Workflows: ✅ Simplify IaC Automation: Automatically generate a new IaC pipeline or integrate into your existing pipeline in GitHub, GitLab, and more.  ✅ Gain Visibility and Insights: Visualize all planned changes to your cloud resources and show their relationships. ✅ Prevent Undesired Changes: Secure your code by automatically preventing policy violations and excessive costs. ✅ Get a Post-Deployment Rundown: View post-provisioning insights into cloud activities, streamline debugging, and manage your asset inventory. Couple Workflows with Firefly’s cloud control plane to solve cloud complexity. Link to try in comments 👇

59

3 Comments

As a sensitive piece of your data infrastructure, actively monitoring #ApacheKafka's attack surface with enterprise security controls is a must. And there's a lot to log. This week we zoom in by showing you: → How to audit access to Kafka through Lenses → Then send those audits to third party SIEM tools such as Splunk. Join on Zoom: https://lnkd.in/epNRk_-s Join on YouTube: https://lnkd.in/ejYgMpun

3

1 Comment

Did you know Terraform state can save your cloud infrastructure from chaos? Here’s how👇 Managing cloud infrastructure can get messy—resources disappearing, duplicating, or spinning out of control. If you’re a developer or handle infrastructure, you’ve likely felt the frustration. Enter Terraform state. It’s like a detailed map of your digital setup, keeping everything organized and preventing issues before they happen. Terraform state helps you stay on top of your resources, boosts performance, catches unexpected problems, and even makes teamwork easier. Ready to change how you manage your infrastructure? Let’s dive in. 🔗Continue reading here: https://lnkd.in/dVJErR8v

3

Hot off the digital presses: Our new whitepaper is here!🔥📄 Revealing best practices and strategies to develop K8s operators for extending Kubernetes capabilities.☸️🚀 Get your copy today👇 https://lnkd.in/gbTCDPnD

14

Have you heard about Kyverno? It's a powerful policy engine designed specifically for Kubernetes. With Kyverno, you can: - Validate, Mutate, and Generate - Kubernetes resources effortlessly. - Secure your software supply chain by verifying OCI image signatures and artifacts. - Manage policies using familiar tools like `kubectl`, `git`, and `kustomize` - no need to learn a new language! Kyverno integrates seamlessly into your CI/CD pipeline, ensuring compliance, security, and automation at every step. 🌟 Check it out on GitHub: [Kyverno](https://lnkd.in/dguXtbFP)   Learn more: [Kyverno.io](https://kyverno.io/) #Kubernetes #DevOps #CloudNative #PolicyManagement #Kyverno 🔗 Let's connect and discuss how Kyverno can enhance your Kubernetes workflows!

1

Steps on how to successfully deploy a highly available and scalable AWS web cluster in 3 AZs using Terraform. Picture this: You’re hosting a party with 5 guests, but suddenly 1000 people show up. If your setup can’t scale, you’re in big trouble. But with AWS, scalability is like a magic button that lets you handle a crowd without breaking a sweat. When traffic spikes, AWS automatically adds more resources like a secret army of servers—keeping your site up and running smoothly. It’s the equivalent of ordering 100 extra pizzas just in time! Now, let’s talk high availability. AWS ensures your website stays online no matter what. If one part of the system goes down (like the DJ accidentally pulling out the wrong wire), it seamlessly shifts to another, so the party doesn’t stop. It’s like having backup DJs in every room, just in case. Together, scalability and high availability mean your website is always prepared for the unexpected, whether it’s a sudden traffic surge or a rogue party crash. And you? You get to relax, knowing AWS has everything under control while you focus on the important stuff—like the next big idea (or your next playlist). Scaled my infrastructure with aws elactic load balancer today and using Terraform! #30daytfchallenge #HUG #hashicorp #HUGYDE @chiche #IaC"

5

🧩 Does your team use Terraform? Are you looking for patterns and tools to scale and accelerate your product delivery? Then please join Welly Siauw and I as we discuss Terraform and AWS, and how to best leverage it. When Welly and I host a chalk talk, they are in front of a whiteboard and we take audience questions. We dive deep into real customer problems (proffered by the audience) and provide actionable suggestions.

153

3 Comments