How to Use Generative AI for Securing Cloud Infrastructures (Part II)
How does Generative AI enhance detection, response, and adaptation in cloud security? How can cloud security professionals effectively utilize Generative AI ...
Posts
2024
2023
How to Use Generative AI for Securing Cloud Infrastructures
Why embrace Generative AI in cloud security strategies? How does Generative AI enhance threat detection and response in cloud environments? What role does Ge...
Deploying an AI ChatBot in Azure Red Hat OpenShift fully integrated with Azure OpenAI
How can we integrate the power of Azure OpenAI and Azure Red Hat OpenShift in an easy and scalable way? How can we deploy a ChatBot in ARO using Azure OpenAI...
Exposing apps using Application Gateway LB in Private ARO clusters
What is the role of Application Gateway in enabling the secure exposure of customer applications within Private Azure Red Hat OpenShift (ARO) clusters? How d...
Deploying and Testing Machine Learning Applications in Kubernetes with Gradio
How can Gradio be utilized to facilitate the deployment and testing of Machine Learning Applications within a Kubernetes environment, ensuring user-friendly ...
Deploying AI/ML Models in Kubernetes using Seldon Core, Istio and MetalLB
How can organizations leverage Seldon Core and Kubernetes to deploy, manage, and scale machine learning models effectively and efficiently? What steps and co...
Deploying Private ARO clusters with Custom Domains
How can Private Azure Red Hat OpenShift (ARO) clusters be deployed with custom domains, allowing organizations to bring their own domain? What are the key co...
Building Trust in the Software Supply Chain
What steps can we take to establish trust in our Software Supply Chain and ensure that our software can be traced back to its origin without introducing mali...
Embracing the Open Hybrid Multi-Cloud connecting overlay networking from ARO and ROSA clusters
How can we embrace the Open Hybrid Multi-Cloud connecting overlay networking from ARO and ROSA clusters? How you can connect Managed OpenShift clusters runni...
Connecting overlay networks of ROSA clusters with Submariner
How can we connect the overlay networks of multiple ROSA clusters? How can we deploy stateful applications spanning in a Multi-Cluster environments? How can ...
Securing the integrity of Software Supply Chains
How can we secure the integrity of our Software Supply Chains and have confidence that our software has not been tampered with and can be traced to its sourc...
Scaling your Azure Private OpenShift clusters with Virtual Network NAT
How can we generate Private clusters OpenShift in Azure, controlling our Outbound traffic with scalable, managed Virtual NAT Gateway? What are the benefits o...
2022
Network Observability Deep Dive in Kubernetes with NetObserv Operator
How can we analyze our Network Flows in our Kubernetes clusters? How can we enable Network Observability for Kubernetes in a simple, searchable and visual wa...
Securing CICD pipelines with StackRox / RHACS and Sigstore
How can we ensure that our supply chain is secured, and all the container images deployed in our Kubernetes clusters are signed and secured, and no one can d...
Secure your Private OpenShift clusters with Azure Firewall and Hub-Spoke architectures
How can we generate Private clusters OpenShift in Azure, secured by Azure Firewall? How can we have a Fine-Grained egress access from our Applications within...
Deep dive in Private OpenShift 4 clusters deployments in Azure
How can we generate a Private OpenShift cluster into an existing Azure Virtual Network (vNet) on Microsoft Azure? How can we deploy our cluster without expos...
Signing and Verifying Images to Secure CICD pipelines using Sigstore and Kyverno - (Part II)
How can we Sign and Verify container images within the CICD Pipelines, adding Security to our DevOps pipelines? How can we ensure that our supply chain is se...
Signing and Verifying Images to Secure CICD pipelines using Sigstore and Kyverno
How can we improve our supply chain security by signing container images, in an open, accessible and transparent manner? How can we store the signatures in a...
Predictive Autoscaling Patterns using Vertical Pod Autoscaler in Kubernetes
How you can adjust your application / workloads resource requests automatically, to ensure that your pods stay up during periods of high demand, like Black F...
Implementing DevSecOps CI/CD pipelines with RHACS and OpenShift
How you can add Security to your DevOps pipelines? How you can shift left, securing your software lifecycle application development using DevSecOps tools and...
Secure GitOps Supply Chain with GnuPG Signature verification in ArgoCD
How can I secure my GitOps supply chain using ArgoCD and GPG? How can I ensure that nobody introduces malicious changes in my repositories that will used for...
Generate and Manage ApplicationSets of OpenShift-GitOps/ArgoCD in ACM
How I can connect my ArgoCD/OpenShift GitOps deployments in each managed cluster, and have full visibility, control and management of my Argo Applications in...
Deep Dive of ARO4 - Microsoft Azure Red Hat OpenShift 4
What is ARO4 and how you can install it in Azure? What are the procedures and the benefits of ARO4? How we can automate the procedure of the installation and...
2021
Managing Egress IP in OpenShift 4 with OVN Kubernetes CNI plugin using OpenShift-GitOps
How you can configure the EgressIP when you are using the OVN Kubernetes CNI Plugin? What are the differences between the EgressIP implementation of OVN and ...
Configuring mTLS in OpenShift with Ingress Controller Operator
How you can enable mTLS authentication with OpenShift using the Ingress Controller Operator (without Service Mesh)? How this is implemented in the Ingress Co...
Egress Firewall in OpenShift with OVN Kubernetes plugin
How we can limit the external hosts that some or all pods in an OpenShift project can access from within the cluster? How we can configure an Egress Firewall...
Deep Dive of Sandbox Containers / Kata Containers in OpenShift
How we can provide more isolation to our containers running on OpenShift? What are Kata Containers and how we can implement them in OpenShift? What are the d...
Zero Trust Networks and mTLS Deep Dive in OpenShift Service Mesh
How we can ensure that our traffic between our microservices it’s encrypted and safe in a Zero Trust Network? How we can enable in an easy way mTLS between i...
Testing eBPF in OpenShift 4
What is eBPF and how can I use it in OpenShift 4? What are the tools and the benefits of eBPF programs? How can run custom eBPF programs in our cluster to tr...
Encrypting the network traffic with Ipsec in OpenShift 4
How to ensure that the traffic between my pods on the pod network across my OpenShift cluster it’s encrypted and confidential? How can I enable IPsec to secu...
Deep Dive of Egress IP in OpenShift 4 with OpenShift SDN CNI
How you can control and predict which source Ip address are used for your workloads when they reach outside Kubernetes resources? How you can control and tra...
Monitoring and analysis of Network Flow Traffic in OpenShift (Part II)
How can you monitor and analyse the network flow records of OpenShift in a graphical way and execute search queries for specific values? And how to have some...
Monitoring and analysis of Network Flow Traffic in OpenShift (Part I)
How can we monitor the traffic in and out of our OpenShift cluster in an easy way? How can we do an analysis about the network traffic flows of our workloads...
Connecting stateful applications in multicluster environments with RHACM and Submariner
How can I deploy my applications in multiclustering environments and connect my microservices across the different clusters using the SDN and overlay network...
Deep Dive with RHACM and Submariner - Connecting multicluster overlay networks
How to connect your overlay networks of different Kubernetes clusters? How can you deploy stateful applications spanning in a multicluster cluster environmen...
Regenerating Kubeconfig for system:admin user in OpenShift clusters
You missed your kubeconfig file of your OpenShift cluster? Your dog ate your kubeconfig file? No worries! Let’s regenerate it in a easy and automated way!
Load Balancing and DNS with OpenShift IPI in VMware & On-Premise (Part II)
This is the second blog post of Load Balancing and DNS with OpenShift IPI series .
Load Balancing and DNS with OpenShift IPI in VMware & On-Premise (Part I)
How is managed the LoadBalancers and the DNS in OpenShift IPI in VMWARE and the rest of On-Premises platforms such as BareMetal, Openstack, or RHV? What are ...
2020
Multiple Route Shardings in the same node in a On-Premise OpenShift 4
How to run a Route Sharding in the same OpenShift nodes in a On-premise installation (UPI or IPI)? What are the steps for configuring it?
Deep Dive of OpenShift 4 Routers in On-Premise deployments
What’s the difference between the Routers / IngressController of OpenShift 4 in cloud environments and the deployments in On-premise? What are the main compo...
DNS Forwarding in OpenShift
How can I use a custom DNS in our cluster without modify the actual cluster DNS on top of for example AWS or Azure? How can I forward custom DNS and use spec...
Secure inter-cluster traffic in OpenShift with Service CA Operator
How I can secure the inter-cluster communication within two pods running into OpenShift? How can I secure one service calling another service using SSL both ...
Analysis of Operator Lifecycle Manager in OpenShift 4
How can I use the Operators in my OpenShift4 cluster? And how are updated and managed by the Operator Lifecycle Manager? What is the components of their arch...
Traffic Mirroring in OpenShift Service Mesh
How to do testing cases with live production in a safe, secure and predicted mode? How can achieve this within our Service Mesh? And what’s the traffic mirro...
Canary deployments in OpenShift Service Mesh
Whats a Canary deployment and how to configure in Service Mesh? What are the benefits of a Canary deployment? And how we can give more intelligence to our ro...
Blue Green deployments in OpenShift Service Mesh
Whats a Blue Green deployment and how to configure it our microservices within the Service Mesh? How change the balancing of our requests in a easy and quick...
Ingress Routing & Traffic Management in OpenShift Service Mesh
How configure ingress routing in Service Mesh and what components are involved? And which are the main differences between OpenShift Routes and Ingress routi...
Including microservices in OpenShift Service Mesh
How we can include within Service Mesh our microservices deployed easily and automatically? How to control and istiofying them? And what are the main compone...
Deploying AMQStreams Kafka without Cluster Admin
How to deploy fully automated a Kafka cluster using AMQStreams / Strimzi? And how to deploy Kafka clusters without being cluster-admin, using always regular ...
Upgrade OpenShift 4 clusters with the CLI
How to perform an OCP4 upgrade from the CLI safe, securely and fully CLI executed?
Making accesible from our laptop an OpenShift 4 UPI Libvirt/KVM Lab
How to expose certain ports of our VMs, to for example expose our Load Balancer port balancing itself the port of the API of OpenShift4? How to access to the...
DNS Deep Dive in OpenShift 4
How the DNS of OpenShift 4 works? And the operators to manage them? And how can I check the resolution basics within and externally to my OCP4 cluster?
Microservices Deployment in Service Mesh
How we can deploy microservices within Service Mesh easily and automatically? How to control and istiofying them? And what are the main components involved?
Service Mesh Installation
How to install Service Mesh easy, straight forward and with a basic but fully operational installation on top of OpenShift 4? And how are the advantages and ...
Analyse and debug network traffic in OpenShift
Sometimes is hard to analyse what is happening as networking level into your pods deployed in OpenShift or Kubernetes.
2019
Disabling the self provisioning in OpenShift 4
How to disable the Self Provisioning in OpenShift 4 clusters to gain more control for the projects created? How to apply a fancy new message when someone wit...
Extract AWS Credentials in a cluster of OpenShift 4
How obtain the AWS Credentials once the cluster of OCP4 is deployed? Where are they stored in the cluster?
Update SSH Keys into the nodes of OpenShift4 cluster
How to update the ssh keys into your OpenShift4 clusters once is deployed and up&running? And how to automate this easy and straightforward?
UPI Installation of OpenShift 4
How we can install OpenShift4 in UPI mode in AWS? How we can do in an semi-automatic way? Which are the caveats and the steps to execute?
Renew Certificates automatically in OpenShift 4
How generate certificates for our apps and sign them with a free and trusted Certificate Authority? And the most important, how I can automate this process f...
Collect Sosreport in OpenShift 4
This blog post aims to provide a guide for collect a Sosreport in a node of an OpenShift 4 Cluster.
Deep dive of Route Sharding in OpenShift 4
This blog post aims to provide a guide to implement Route Sharding in OpenShift Container Platform 4 (deployed in AWS), creating multiple routers for particu...
Machine Management in action into OpenShift 4
When you deploy a cluster of OpenShift 4.1 using the UPI (User-Provisioned Infrastructure) AWS installation, the deployment can be performed using the AWS Cl...
2018
Connect to Serial Console RHV VM through SSH
Imagine that you have one or several VMs deployed on top of your deployment of RHV, and you have not access with ssh configured (because is a brand new VM wi...
Share Vault between Ansible Core Roles
Sometimes you need to share the Ansible Vault between the different Ansible Roles, because you want to integrated within Tower or just in different Workflow ...
Integrate Ansible Tower with IDM
This is a way to configure Ansible Tower 3.2.5 authentication with a idM.
2017
Custom Backup Satellite 6
Some time ago, a customer ask for a question about Satellite 6.1.x: how about the backups? So, I deep further into the oficial documentation and I found a s...
Control Pacemaker Resources with Ansible
When an Openstack is installed and configured in High Availability in the several pieces that is divided (haproxies, controllers, backends, etc) there is a l...