Pod Security Policies (PSPs) are an important component of security in Kubernetes. Lets explore what happens without them.
gVisor on ECS
Google’s gVisor exists to provide a true sandbox for your Docker containers. It replaces runc, the default Docker runtime which recently had a serious vulnerability 1.
In theory gVisor is a drop-in replacement for runc, but does it actually work with Amazon ECS?
Google SRE Book Takeaways
SRE is what happens when you ask a software engineer to design an operations team.
I just finished reading through the (first) Google SRE book. While a lot of it is what we take for granted today, there were a few worthwhile takeaways for me.
ECS Autoscaling Tips
Amazon Elastic Container Service (Amazon ECS) is a highly scalable, high-performance container orchestration service that supports Docker containers and allows you to easily run and scale containerized applications on AWS.
Autoscaling your container orchestration system introduces some complexity. Here are some tips for creating robust autoscaling for your ECS Cluster.
Mass CloudFormation Template Validation
Ever needed to do CI on a centralised CloudFormation repository, and struggled to get template validation done quickly? Here’s how you can do it.