Josh Samuelson

Kubernetes is brilliant at orchestrating containers. It’s far less brilliant at securing them, especially at enterprise scale. You’ve got clusters across clouds. VMs in the mix. And workloads moving faster than your policies can keep up. What you need is a way to enforce security beyond the cluster, across clouds, and at the speed of CI/CD. That’s what the Aviatrix Kubernetes Firewall delivers: → Identity-aware policies → Centralized control → Visibility that spans multicloud and hybrid environments 🔍 Read the crash course: https://loom.ly/hViZRfY #Kubernetes #CloudSecurity #Multicloud #CloudFirewall #Aviatrix

12

Managing Kubernetes at scale means dealing with pod crashes, alert storms and cascading failures, often at 2 a.m. Manual triage and tribal knowledge can't keep up. Our new eBook shows how to automate Kubernetes incident response with AI-powered diagnostics, intelligent remediation and proactive workflows that cut MTTR and eliminate toil. Download now ➡️ bit.ly/4qiczWJ

11

As HCP Terraform continues to evolve, we want to share clarity around upcoming Free tier changes. This post outlines the move away from legacy Free plans, how Free usage is measured, and what teams should know moving forward for the Free tier. https://lnkd.in/gnVh59U4

101

1 Comment

Kubernetes monitoring shouldn’t feel like a game of hide and seek. We’ve reimagined it in Splunk Observability: think smarter insights, smoother navigation, and all your data (yes, even YAML) right where you need it. No more wild goose chases, just faster fixes and clearer views. Want to see how? Get the full scoop on #SplunkBlogs 👇 #SplunkO11y

241

2 Comments

Structured Events in Rails! OMG! I've been waiting for this for ~4 years. Want to send *proper* structured events? Yeah. Me too. This is the most exciting development in observability for Rails in... ...well, forever. This opens the door to proper OpenTelemetry instrumented Rails apps... ...with a single subscriber and an intuitive interface. But it's way more than that - it allows us to instrument *business* events. Things like: * Order Processed * Customer Paid * Invoice Created I'm beyond excited about the direction the Rails team has gone in. * Decoupled the subscriber from the instrumenter * Aligned the API with the ridiculously good error reporting * Namespaces for events This will open the door to massive improvements in the observability of Rails apps. A HUGE thanks to Adrianna Chang for leading this effort and getting a huge feature into Rails that's critical for modern observability. Kudos! Comment below with your questions about how to use observability and I'll answer what I can.

11

6 Comments

“It took 5 minutes to solve what we couldn’t for years.” Relay Network’s DevOps team didn’t need another tool that just flagged issues. They needed a fix for legacy IAM, SCP sprawl, and permissions chaos across AWS. With the Cloud Permissions Firewall, they: ✅ Disabled unused AWS regions ✅ Quarantined zombie resources ✅ Cleaned up years of policy sprawl in minutes 🌐 Hear it straight from Brendan Putek, Director of DevOps at Relay Network: https://lnkd.in/egw7MWkg Sonrai Security → 🤯 One-click least privilege. 😁 Zero disruption.

23

From Terraform to Crossplane Kubernetes-native IaC is evolving—are you keeping up? Crossplane is redefining how we manage infrastructure: declarative, secure, and fully integrated with the K8s ecosystem. Think Terraform, but closer to your cloud-native apps. -YAML over DSL -Native RBAC & multi-tenancy -Seamless integration with Helm, Operators & more Explore how Crossplane offers the next-gen control plane—bridging DevOps and Platform Engineering like never before. #InfrastructureAsCode #Crossplane #Kubernetes #CloudNative #DevOps #PlatformEngineering #MSysTechByte #Infraunlocked #MSysTechnologies

13

Your CI/CD bill is not exploding because of “expensive runners,” it is bleeding out through flaky tests, over-parallelized jobs, and slow feedback loops that quietly tax every deploy This piece shows you how to redesign pipelines so you cut compute waste, shrink queues, and speed up developer flow without adding yet another approval gate or YAML religion Full breakdown in the comments. #DevOps #CICD #PlatformEngineering

8

1 Comment

Our most popular RAG solution now has support for ACLs in the cloud ingestion pipeline! Bring your existing ADLS2 blob storage account or create a new one, and the indexer will extract the oids/groups based off blob ACLs, and store those on the oids/groups fields in the AI Search index. Then, when the user is logged in, they can only chat with documents which they're allowed to access! Release notes here: https://lnkd.in/ewQfJ6Sg

85

1 Comment

Demand for managed Kubernetes on GPU infrastructure is surging. 40% of GPU cloud customers want a turnkey, Kubernetes-native service. vCluster and vNode provide the architecture to launch your managed Kubernetes offering in weeks, not months. Virtual control planes give each customer their own isolated API server, etcd, and RBAC on shared infrastructure. No separate physical clusters to manage. Three deployment models for different service tiers: - Shared Nodes: Soft isolation for high-density serverless GPU workloads - Dedicated Nodes: Hard isolation with dedicated GPU pools per tenant - Private Nodes: True node-level isolation for enterprise customers No VMs. No hypervisor overhead. Just bare metal GPU performance with the tenant isolation and security your customers require. Launch faster. Support multiple service tiers. Maximize revenue per GPU. Stand apart from hyperscalers with infrastructure purpose-built for AI/ML workloads. Schedule a call to discuss how vCluster + vNode can power your managed Kubernetes offering: https://lnkd.in/egKS4pcX (Full technical architecture in the comments)

745

3 Comments

There's been some talk around storage unification and zero-copy lakehouse integrations recently, and I wanted to better define these terms as well as look at ways we should evaluate different design decisions in this space. So I’ve published a new post: A Conceptual Model for Storage Unification Storage unification isn't about “one storage format to rule them all,” but virtualizing them into a unified logical model. In this post, I lay out a conceptual framework for thinking about storage unification (aka data virtualization). I explore: 🔹 Internal vs. shared tiering (and why shared tiering is so tricky). 🔹 When materialization makes more sense. 🔹 Client vs. server-side stitching. 🔹 Lifecycle and schema management across evolving formats. 🔹 Seven key considerations for evaluating different approaches. This is the groundwork for a set of posts where I’ll dig into how some real-world systems deliver storage unification, primarily about unifying real-time and historical data. https://lnkd.in/dBiS2kxJ

45