Implementing security within your container workloads — Container security is one of the critical aspects of cybersecurity these days as the tech industry is moving to containers at an ever-increasing pace. Container images are derived from base images, and there is a lot of stuff within the base images that might be vulnerable. Therefore, a need arises…

Defense-in-depth for your container runtime and workloads — Kubernetes and container runtime security is one of the most critical security aspects you should consider for your Kubernetes cluster. Containers have ensured that your applications are encapsulated in their own virtual environment and are independent of others. However, with the default settings of your Kubernetes cluster, you still can…

Mounting Google Filestore as an NFS share to multiple Pods — Network File Share or NFS is Block storage provided across a network. With the help of it, you can mount the same storage resources across multiple hosts. It is an excellent choice for storing and sharing information across various systems. It generally helps in situations where you want to have…

My journey writing a technical book and why you should consider writing one — I have been a tech blogger, and I have been writing posts on Cloud, Containers, and DevOps for a long time. When I started writing, I never thought that I would write an entire book on it one day. Today is when my childhood dream of writing and publishing a…

A hands-on guide to enabling AppArmor for your container workloads — AppArmor is a standard Linux Security Module implementation that allows you to enforce fine-grained control over your Linux system, over and above the group and user-level permissions. So, it helps restrict your programs to only the limited set of resources, files, and other permissions it needs to work. In addition…

Using Python and matplotlib to find the cashback coefficient — You might have wondered that when you get a 10% cashback on something, you get a 10% discount. That is how most businesses trick their customers into believing. Well, you’ll be surprised that, in reality, the effective discount due to cashback is lesser than what you thought. Let me explain…

A hands-on guide to applying the principle of least-privilege on container’s syscalls — Kubernetes has been there for a while, and it has since been very popular with tech enthusiasts as well as serious businesses. While it seeks to improve the way we deploy and run applications, and it’s a quantum leap in itself, it is a relatively new technology taking steps to…

Declarative management of Kubernetes resources with a hands-on example — Kubernetes is one of the well-known container orchestrators and has led to the development of an entire ecosystem around it. It has allowed organizations to manage their container applications with ease by providing several resources to manage container deployments, replicas, scaling, service discovery, and networking through a single API Interface.

Declarative continuous deployment for your Kubernetes workloads — Argo CD is an extremely popular declarative, GitOps-based continuous delivery tool. It is an open source tool and part of the Cloud Native Computing Foundation (CNCF). It is effortless to install and set up, and it offers various features and a jazzy UI to manage all your application requirements. In…