Use Istio Egress Traffic Control to prevent attacks involving egress traffic.

Application failure injection is a form of chaos engineering where we artificially increase the error rate of certain services in a microservice application to see what impact that has on the system as a whole. Traditionally, you would need to add some kind…

For the last year-ish I’ve been working on Virtual Kubelet, a pretty cool project created by some awesome people (not me). A lot has…

Most Prometheus metrics recording durations are subject to a time-of-measurement bias, causing misleading graphs that can derail investigations. See how an open-source Tracer can help solve this problem.

One of the key features of our container management platform, Pipeline, and our CNCF certified Kubernetes distribution, PKE, is their ability to seamlessly form and run federated clusters across multi- and hybrid-cloud environments. While users of the Pipeline…

Learn about three new open source projects -- Kabanero, Appsody, and Codewind -- that developers can use to build cloud-native apps faster for Kubernetes environments.

What you need to know about Kubernetes deployments to deliver your Docker containers to production.

Back in 2012, CERN announced one of its most important achievements; the discovery of the Higgs boson. This work led to the 2013 Nobel Prize in Physics. Ricardo Rocha, Lukas Heinrich and Clemens Lang of CERN redid the data analysis on top of Kubernetes this…

Osgood is a secure, fast, and simple platform for running JavaScript HTTP servers. - IntrinsicLabs/osgood

Services written today share a common flaw: Being over-privileged. Node.js applications, for example,...

The prize of ubiquity is invisibility

Kubernetes Security Low-Hanging Fruit Container Camp #10 Sydney, July 2019 @lukeb0nd

Migrating your database schema when your application’s Docker container starts up? Here’s some reasons to rethink that choice.

Fuzz testing killing C

Difficulty balancing between too many and too few dimensions in metric data is known as the Cardinality challenge in monitoring. Here's how to overcome it.

Probably the most common question I received when I told people I was writing a book about monitoring was, “Have you read James Turnbull’s book?”

I’m putting that to rest with a delightful conversation with James Turnbull on a variety of topics, including…

The prize of ubiquity is invisibility