How to Use Generative AI for Securing Cloud Infrastructures (Part II)
How does Generative AI enhance detection, response, and adaptation in cloud security? How can cloud security professionals effectively utilize Generative AI ...
Posts
2024
2023
How to Use Generative AI for Securing Cloud Infrastructures
Why embrace Generative AI in cloud security strategies? How does Generative AI enhance threat detection and response in cloud environments? What role does Ge...
Deploying an AI ChatBot in Azure Red Hat OpenShift fully integrated with Azure OpenAI
How can we integrate the power of Azure OpenAI and Azure Red Hat OpenShift in an easy and scalable way? How can we deploy a ChatBot in ARO using Azure OpenAI...
Exposing apps using Application Gateway LB in Private ARO clusters
What is the role of Application Gateway in enabling the secure exposure of customer applications within Private Azure Red Hat OpenShift (ARO) clusters? How d...
Deploying and Testing Machine Learning Applications in Kubernetes with Gradio
How can Gradio be utilized to facilitate the deployment and testing of Machine Learning Applications within a Kubernetes environment, ensuring user-friendly ...
Deploying AI/ML Models in Kubernetes using Seldon Core, Istio and MetalLB
How can organizations leverage Seldon Core and Kubernetes to deploy, manage, and scale machine learning models effectively and efficiently? What steps and co...
Deploying Private ARO clusters with Custom Domains
How can Private Azure Red Hat OpenShift (ARO) clusters be deployed with custom domains, allowing organizations to bring their own domain? What are the key co...
Building Trust in the Software Supply Chain
What steps can we take to establish trust in our Software Supply Chain and ensure that our software can be traced back to its origin without malicious code o...
Embracing the Open Hybrid Multi-Cloud connecting overlay networking from ARO and ROSA clusters
How can we embrace the Open Hybrid Multi-Cloud by connecting overlay networking from ARO and ROSA clusters? How can you connect Managed OpenShift clusters ru...
Connecting overlay networks of ROSA clusters with Submariner
How can we connect the overlay networks of multiple ROSA clusters? How can we deploy stateful applications spanning multiple Multi-Cluster environments? How ...
Securing the integrity of Software Supply Chains
How can we secure the integrity of our Software Supply Chains and have confidence that our software has not been tampered with and can be traced to its sourc...
Scaling your Azure Private OpenShift clusters with Virtual Network NAT
How can we generate private OpenShift clusters in Azure, controlling our outbound traffic with a scalable, managed Virtual NAT Gateway? What are the benefits...
2022
Network Observability Deep Dive in Kubernetes with NetObserv Operator
How can we analyze our Network Flows in our Kubernetes clusters? How can we enable Network Observability for Kubernetes in a simple, searchable and visual wa...
Securing CICD pipelines with StackRox / RHACS and Sigstore
How can we ensure that our supply chain is secured, and all the container images deployed in our Kubernetes clusters are signed and secured, and no one can d...
Secure your Private OpenShift clusters with Azure Firewall and Hub-Spoke architectures
How can we generate private OpenShift clusters in Azure, secured by Azure Firewall? How can we have fine-grained egress access from our applications within o...
Deep dive in Private OpenShift 4 clusters deployments in Azure
How can we generate a Private OpenShift cluster into an existing Azure Virtual Network (vNet) on Microsoft Azure? How can we deploy our cluster without expos...
Signing and Verifying Images to Secure CICD pipelines using Sigstore and Kyverno - (Part II)
How can we Sign and Verify container images within the CICD Pipelines, adding Security to our DevOps pipelines? How can we ensure that our supply chain is se...
Signing and Verifying Images to Secure CICD pipelines using Sigstore and Kyverno
How can we improve our supply chain security by signing container images, in an open, accessible and transparent manner? How can we store the signatures in a...
Predictive Autoscaling Patterns using Vertical Pod Autoscaler in Kubernetes
How can you adjust your application / workloads resource requests automatically, to ensure that your pods stay up during periods of high demand, like Black F...
Implementing DevSecOps CI/CD pipelines with RHACS and OpenShift
How can you add Security to your DevOps pipelines? How can you shift left, securing your software lifecycle application development using DevSecOps tools and...
Secure GitOps Supply Chain with GnuPG Signature verification in ArgoCD
How can I secure my GitOps supply chain using ArgoCD and GPG? How can I ensure that nobody introduces malicious changes in my repositories that will be used ...
Generate and Manage ApplicationSets of OpenShift-GitOps/ArgoCD in ACM
How can I connect my ArgoCD/OpenShift GitOps deployments in each managed cluster, and have full visibility, control and management of my Argo Applications in...
Deep Dive of ARO4 - Microsoft Azure Red Hat OpenShift 4
What is ARO4 and how can you install it in Azure? What are the procedures and the benefits of ARO4? How can we automate the installation and configuration pr...
2021
Managing Egress IP in OpenShift 4 with OVN Kubernetes CNI plugin using OpenShift-GitOps
How can you configure the EgressIP when you are using the OVN Kubernetes CNI Plugin? What are the differences between the EgressIP implementation of OVN and ...
Configuring mTLS in OpenShift with Ingress Controller Operator
How can you enable mTLS authentication with OpenShift using the Ingress Controller Operator (without Service Mesh)? How is this implemented in the Ingress Co...
Egress Firewall in OpenShift with OVN Kubernetes plugin
How can we limit the external hosts that some or all pods in an OpenShift project can access from within the cluster? How can we configure an Egress Firewall...
Deep Dive of Sandbox Containers / Kata Containers in OpenShift
How can we provide more isolation to our containers running on OpenShift? What are Kata Containers and how can we implement them in OpenShift? What are the d...
Zero Trust Networks and mTLS Deep Dive in OpenShift Service Mesh
How can we ensure that our traffic between our microservices is encrypted and safe in a Zero Trust Network? How can we enable mTLS in an easy way in our Serv...
Testing eBPF in OpenShift 4
What is eBPF and how can I use it in OpenShift 4? What are the tools and the benefits of eBPF programs? How can we run custom eBPF programs in our cluster to...
Encrypting the network traffic with Ipsec in OpenShift 4
How can we ensure that the traffic between pods on the pod network across our OpenShift cluster is encrypted and confidential? How can I enable IPsec to secu...
Deep Dive of Egress IP in OpenShift 4 with OpenShift SDN CNI
How can you control and predict which source IP addresses are used by your workloads when they reach outside Kubernetes resources? How can you control and tr...
Monitoring and analysis of Network Flow Traffic in OpenShift (Part II)
How can you monitor and analyse the network flow records of OpenShift in a graphical way and execute search queries for specific values? And how can you have...
Monitoring and analysis of Network Flow Traffic in OpenShift (Part I)
How can we monitor the traffic in and out of our OpenShift cluster in an easy way? How can we do an analysis of the network traffic flows of our workloads in...
Connecting stateful applications in multicluster environments with RHACM and Submariner
How can I deploy my applications in multiclustering environments and connect my microservices across the different clusters using the SDN and overlay network...
Deep Dive with RHACM and Submariner - Connecting multicluster overlay networks
How to connect the overlay networks of different Kubernetes clusters? How can you deploy stateful applications spanning multicluster environments?
Regenerating Kubeconfig for system:admin user in OpenShift clusters
You missed your kubeconfig file of your OpenShift cluster? Your dog ate your kubeconfig file? No worries! Let’s regenerate it in an easy and automated way!
Load Balancing and DNS with OpenShift IPI in VMware & On-Premise (Part II)
This is the second blog post of the Load Balancing and DNS with OpenShift IPI series.
Load Balancing and DNS with OpenShift IPI in VMware & On-Premise (Part I)
How are the LoadBalancers and DNS managed in OpenShift IPI on VMware and the rest of the on-premises platforms such as BareMetal, OpenStack, or RHV? What are...
2020
Multiple Route Shardings in the Same Node in an On-Premise OpenShift 4
How to run a Route Sharding on the same OpenShift nodes in an on-premise installation (UPI or IPI)? What are the steps to configure it?
Deep Dive of OpenShift 4 Routers in On-Premise deployments
What’s the difference between the Routers / IngressController of OpenShift 4 in cloud environments and the deployments in On-premise? What are the main compo...
DNS Forwarding in OpenShift
How can I use a custom DNS in our cluster without modifying the actual cluster DNS on top of, for example, AWS or Azure? How can I forward custom DNS and use...
Secure inter-cluster traffic in OpenShift with Service CA Operator
How can I secure the inter-cluster communication between two pods running in OpenShift? How can I secure one service calling another service using SSL, both ...
Analysis of Operator Lifecycle Manager in OpenShift 4
How can I use Operators in my OpenShift 4 cluster? And how are they updated and managed by the Operator Lifecycle Manager? What are the components of its arc...
Traffic Mirroring in OpenShift Service Mesh
How do you test with live production traffic in a safe, secure, and predictable way? How can we achieve this within our Service Mesh? And what is traffic mir...
Canary deployments in OpenShift Service Mesh
What’s a Canary deployment and how do you configure it in Service Mesh? What are the benefits of a Canary deployment? And how can we give more intelligence t...
Blue Green deployments in OpenShift Service Mesh
What’s a Blue Green deployment and how do we configure it for our microservices within the Service Mesh? How do we change the balancing of our requests in an...
Ingress Routing & Traffic Management in OpenShift Service Mesh
How do we configure ingress routing in Service Mesh and what components are involved? And what are the main differences between OpenShift Routes and Ingress ...
Including microservices in OpenShift Service Mesh
How can we include our microservices within Service Mesh easily and automatically? How to control and istiofy them? And what are the main components involved?
Deploying AMQStreams Kafka without Cluster Admin
How to deploy a fully automated Kafka cluster using AMQStreams / Strimzi? And how to deploy Kafka clusters without being cluster-admin, using always regular ...
Upgrade OpenShift 4 clusters with the CLI
How to perform an OCP4 upgrade from the CLI safely, securely, and fully from the command line?
Making an OpenShift 4 UPI Libvirt/KVM Lab Accessible from Our Laptop
How to expose certain ports of our VMs — for example, exposing our Load Balancer port that balances the API port of OpenShift 4? How to access the DNS config...
DNS Deep Dive in OpenShift 4
How does the DNS of OpenShift 4 work? And the operators to manage it? And how can I check the resolution basics within and outside my OCP4 cluster?
Microservices Deployment in Service Mesh
How can we deploy microservices within Service Mesh easily and automatically? How to control and istiofy them? And what are the main components involved?
Service Mesh Installation
How to install Service Mesh easily, in a straightforward way, with a basic but fully operational installation on top of OpenShift 4? And what are the advanta...
Analyse and debug network traffic in OpenShift
Sometimes it is hard to analyse what is happening at the networking level in your pods deployed in OpenShift or Kubernetes.
2019
Disabling the self provisioning in OpenShift 4
How to disable the Self Provisioning in OpenShift 4 clusters to gain more control over the projects created? How to display a custom message when someone wit...
Extract AWS Credentials in a cluster of OpenShift 4
How do you obtain the AWS Credentials once the OCP4 cluster is deployed? Where are they stored in the cluster?
Update SSH Keys into the nodes of OpenShift4 cluster
How do you update the SSH keys in your OpenShift 4 clusters once they are deployed and up & running? And how can you automate this easily and in a straig...
UPI Installation of OpenShift 4
How can we install OpenShift 4 in UPI mode on AWS? How can we do it in a semi-automatic way? What are the caveats and the steps to execute?
Renew Certificates automatically in OpenShift 4
How can we generate certificates for our apps and sign them with a free and trusted Certificate Authority? And most importantly, how can we automate the proc...
Collect Sosreport in OpenShift 4
This blog post aims to provide a guide for collecting a Sosreport on a node of an OpenShift 4 Cluster.
Deep dive of Route Sharding in OpenShift 4
This blog post aims to provide a guide to implement Route Sharding in OpenShift Container Platform 4 (deployed in AWS), creating multiple routers for particu...
Machine Management in action into OpenShift 4
When you deploy an OpenShift 4.1 cluster using the UPI (User-Provisioned Infrastructure) AWS installation, the deployment can be performed using the AWS Clou...
2018
Connect to Serial Console RHV VM through SSH
Imagine that you have one or several VMs deployed on top of your RHV deployment, and you do not have SSH access configured (because it is a brand new VM with...
Share Vault between Ansible Core Roles
Sometimes you need to share the Ansible Vault between different Ansible Roles, because you want to integrate it within Tower or just in different Workflow Te...
Integrate Ansible Tower with IDM
This is a way to configure Ansible Tower 3.2.5 authentication with an IdM.
2017
Custom Backup Satellite 6
Some time ago, a customer asked a question about Satellite 6.1.x: what about the backups? So, I dug further into the official documentation and found a scri...
Control Pacemaker Resources with Ansible
When an OpenStack installation is configured in High Availability across the several pieces it is divided into (haproxies, controllers, backends, etc.), ther...