Case Study: Microservices bei LeanIX

Overview of hardened container base images

How to choose the best container base image? What does “best” mean in this context? This blog post will not try to determine the best base image. We will pick just one of the aspects: security. We will have a look at how you can give your container base...

• CI/CD
• IT-Security

9.8.2021 | 6 Minuten Lesezeit

Site Reliability Engineering: Software in Produktion betreiben

In letzter Zeit hat Site Reliability Engineering (SRE) viel Aufmerksamkeit erregt. Mit SRE kamen Metriken wie Service-Level Objectives (SLO), Service-Level Indicator (SLI) und Error Budget auf. Ebenso widmet sich SRE stark dem Betrieb von Software in...

• Softwarearchitektur
• Infrastructure
• Softwareentwicklung

12.7.2021 | 7 Minuten Lesezeit

Site Reliability Engineering: Running software in production

Lately, Site Reliability Engineering (SRE) has been getting a lot of attention. With SRE came metrics such as Service-Level Objective (SLO), Service-Level Indicator (SLI), and error budget. The SRE discipline also details a lot about running software...

• Software architecture
• Infrastructure
• Software development

1.7.2021 | 7 Minuten Lesezeit

How to use OAuth2 Proxy for central authentication

This blog post will show you how to use one central OAuth2 Proxy (see the official page ) as authentication proxy for multiple services inside your Kubernetes Cluster . The default example on how to secure a service with Nginx and OAuth2 Proxy shows...

• Infrastructure
• Microservices
• Cloud
• Kubernetes
• IT-Security

7.6.2021 | 2 Minuten Lesezeit

The how of monitoring your services

Lately, there has been a lot of discussion about SLAs, SLOs and SLIs. As this article states, it is hard to define the correct SLOs and SLIs. This discussion is about what part of your services you want to monitor. But it is also difficult to measure...

• Infrastructure
• APM

17.11.2020 | 5 Minuten Lesezeit

Cynicism and burnout in Information Technology

Earlier this year, my colleague Nandor already wrote about passion and burnout . The following post will show my perspective on cynicism and burnout. Sadly, last year, @sadserver and @sadoperator retired their Twitter accounts. As stated in this blog...

• HR

24.8.2020 | 6 Minuten Lesezeit

Kubernetes deployment concepts

There is a wide variety of tools out there to deploy software to a Kubernetes cluster. In the context of these tools, even a new *Ops term emerged: GitOps . This article will not be another comparison of Kubernetes deployment tools but a comparison of...

• CI/CD
• DevOps
• Kubernetes

5.8.2020 | 3 Minuten Lesezeit

Debugging Kubernetes Network Policies with ephemeral containers

As you are developing your new shiny containerized service on Kubernetes (k8s), you might also want to apply Network Policies . But during the process, you experience connection problems inside your containers. You followed best practices and kept your...

• Software development
• Kubernetes

22.7.2020 | 2 Minuten Lesezeit

Configuring Kubernetes login with Keycloak

Kubernetes does not have its own user management and relies on external providers like Keycloak. This blog post will describe how to configure Kubernetes to use Keycloak as an authentication provider. We are running Kubernetes clusters based on OpenStack...

16.5.2019 | 2 Minuten Lesezeit

Configure your Gitlab CI with docker-machine against keystone v3

We are running our Gitlab CI infrastructure on top of OpenStack . To not use a fixed number of VMs, we use Gitlab CI with docker-machine to create VMs as needed by the build jobs. This blog post will describe how to enable docker-machine to properly...

27.11.2018 | 2 Minuten Lesezeit

Measure your radosgw usage with OpenStack-Ansible

We use OpenStack-Ansible to set up our OpenStack cluster and Ceph’s Rados Gateway (radosgw) as object store backend. Unfortunately, the telemetry (and in consequence accounting) for radosgw will not work out of the box. You need to change different ...

• Infrastructure
• Cloud

25.7.2018 | 2 Minuten Lesezeit

Measuring your OpenStack Cloud with Gnocchi and Ceph storage backend

To solve our performance problems with Gnocchi and the whole OpenStack telemetry stack, we tried Gnocchi with Ceph as backend starting with OpenStack-Ansible Newton. The experience wasn’t good. Sooner or later, we experienced slow requests and stuck ...

• Software architecture
• Cloud
• Open Source
• Infrastructure

15.7.2018 | 4 Minuten Lesezeit

Monitoring für die Cloud

In diesem Artikel geht es um das Monitoring von Systemparametern wie CPU-Last, Speicherverbrauch etc. innerhalb einer Cloud. Das sind die klassischen Metriken, die man schon seit Jahrzehnten mit Monitoringsystemen abfragt. Warum sollte sich daran mit...

26.10.2015 | 6 Minuten Lesezeit

Docker Ambassador mit HAProxy und etcd

In einem vorherigen Artikel habe ich über den allgemeinen Aufbau des Ambassador in einem gemeinsamen Projekt der LeanIX GmbH mit der codecentric AG geschrieben. In diesem Artikel werde ich weiter auf die technischen Details des Ambassador Containers...

• Pattern
• Linux

13.8.2015 | 4 Minuten Lesezeit

Modifications to the CoreOS Ambassador Pattern

In this post I explain my changes to the ambassador pattern I implemented during a microservices project earlier this year. With Docker Links , Docker containers are able to communicate with each other over the network. When creating a Link, IP and exposed...

• Pattern
• Linux
• Microservices

12.8.2015 | 2 Minuten Lesezeit

Nicer Ansible output for Puppet tasks

In a previous post , I wrote about executing Puppet from within an Ansible playbook. But the output did not look very nice. In this post I take a closer look at how to change that. Just as a reminder, the output of Puppet looks like this, when called...

15.4.2015 | 4 Minuten Lesezeit

Migrate from Puppet to Ansible

In a previous post , I wrote about combining Ansible and Puppet, with Ansible as remote executor for arbitrary commands. In this post I take a look at how to migrate from Puppet to Ansible. Combine the Execution of Ansible and Puppet If you want to ...

17.12.2014 | 3 Minuten Lesezeit

Ansible as remote executor in a Puppet environment

When you are using Puppet you might know this problem: How can I execute arbitrary commands on all or some of my Puppet nodes? In this article, I explain how you can do so with Ansible . Ansible it another configuration management tool like Puppet and...

• CI/CD
• DevOps
• Infrastructure
• Open Source

21.9.2014 | 4 Minuten Lesezeit