Written by James Mak Senior Consultant at Airwalk Reply. The invention of Kubernetes (K8s) + Istio has largely reduced many emergency phone calls at 2am because it has provided a feasible way to tackle infrastructure level failure and application level failure. Its Cluster AutoScaler can scale up or down the number of nodes in the cluster based on usage…

In my previous post, I talked about how an AWS identity can be delegated the permission to manage a Kubernetes namespace. This time, I am going to do the reverse, implement a role based access for a pod in AWS EKS to assume an IAM role for consuming AWS services. How it works …

Kubernetes is an elegant tool for running and scaling your container applications. The other side of the coin is that it has got a steep learning curve to bootstrap from scratch and maintain the operability across its various components. But the good news is that you can save some effort…

Terraform has become the de facto standard of building Cloud infrastructure in Infrastructure As Code (IaC) fashion. You can establish your setup by asking Terraform to create all Cloud resources in one big ‘tf’ file. When your infrastructure grows bigger and more complex, more frequent updates to your infrastructure and…

From a security best practice point of view, it is important to look at how permissions are actually being used over time with the principle of least privilege. IAM enables you to easily identify who has access to your resource, improve your security posture by stopping the permissions not necessary…

It is indisputable to say that HashiCorp Terraform has become an essential tool in Cloud deployment. At the same time, it also got its own limitation. Have you ever encountered the following issues? …