Welcome to Wolkwacht

Azure Kubernetes Chronicles part 4: Dataprotection Welcome back to the Azure Kubernetes Chronicles! In previous episodes, we explored network-related topics like container network interfaces, eBPF, and observability in Azure Kubernetes Service (AKS). But securing an AKS cluster goes beyond networking and runtime security — it extends to protecting, recovering, and managing data. In this episode, we’re shifting gears to focus on a topic that’s equally critical but often underestimated: data protection in AKS. While Kubernetes brings agility and scalability, it also introduces complexities in securing persistent storage, managing sensitive secrets, and ensuring compliance with evolving regulations like NIS2 and DORA. ...

Azure Kubernetes Chronicles part 3: Observability Welcome back to the Azure Kubernetes Chronicles! In our previous posts, we explored the basics of Container Network Interfaces (CNIs) and had a first glance at how eBPF is changing networking within Azure Kubernetes Service (AKS). If you haven’t had a chance to read it yet, you might want to catch up here. In this episode, we’re diving even deeper into the labyrinth of Kubernetes by shining a light on a topic that’s both critical and fascinating: Observability! ...

Azure Kubernetes Chronicles Networking using eBPF Welcome back to the Azure Kubernetes Chronicles, a blog series dedicated to unraveling the complexities of Kubernetes on Azure. In the first edition, we explored the fundamentals of the Container Network Interface (CNI), its role in Kubernetes networking, and how it powers communication within clusters. Building on that foundation, this next episode delves into the transformative impact of eBPF (extended Berkeley Packet Filter) when integrated with CNI. By combining these technologies, we unlock new possibilities for enhancing networking, security, and observability in Kubernetes environments, particularly on Azure Kubernetes Service (AKS). ...

Azure Kubernetes Chronicles Container Network Interfaces In today’s cloud landscape, Kubernetes has become one of the backbones of modern application development, empowering businesses to deploy, scale, and manage containerized applications effortlessly. But with great power comes great complexity! That’s where Azure Kubernetes Service (AKS) comes into play — a managed Kubernetes service designed to make your container orchestration journey smoother and more productive. This blog series, Azure Kubernetes Chronicles, is here for platform engineers, CloudOps professionals and Cloud architects who are beginning their Kubernetes journey or looking to streamline their operations to guide you through the essentials and beyond, as we dive into some of the tools, features, and best practices for leveraging Azure Kubernetes to its fullest potential.In this first part the focus lies on the Container Network Interface (CNI). ...

Challenging the Cloud Cost-Saving Myth: A Closer Look at Azure and cost control Created by Microsoft Designer Introduction In today’s rapidly evolving digital landscape, the migration to cloud computing is often heralded as a golden pathway to significant cost savings, increased efficiency, and unparalleled scalability. This popular belief has led countless organisations to embark on cloud migration journeys with the expectation of automatic reductions in IT expenditures. However, the reality of cloud computing costs is far more complex, asking for a closer examination to understand the true impact on cost. ...

Zero Trust in the Cloud A Simple Path to Securing Cloud Infrastructure Created by Microsoft Designer Introduction In the world of cybersecurity, traditional network perimeter security models are no longer sufficient to protect against increasingly sophisticated threats. As cloud adoption continues to grow, ensuring robust security measures for both data and resources is critical. Enter Zero Trust — a security framework that shifts the paradigm from implicit trust to “never trust, always verify.” In this blog post, we will explore what Zero Trust is, the pros and cons of this security approach, and how to implement Zero Trust in both Microsoft Azure (Azure) and Amazon Web Services (AWS) environments. ...

In 2023 a lot has happened. The company I work for Luminis became part of Yuma. I achieved several certifications. Next to attending conferences I also was a speaker at several conferences. This year I was for the first time a guest in a podcast. In the technology space also a lot happened. With ChatGPT, Bard, Dall-E, Copilot and others AI became a very hot topic. There was also a lot of attention for sustainability, how can IT help in reducing the carbon foot print. ...

Introduction In the rapidly changing cloud landscape, security and privacy are key concerns for businesses and individuals alike. Confidential Compute turns out to be a possible solution, ensuring sensitive data remains private and secure even in shared computing environments. In this blog post, I want to explain the concept of Confidential Compute in general and explore the specifics of how Azure has implemented confidential compute and how this can help with cloud sovereignty. ...

From the 21st of June till the 23rd of June the Devopsdays Amsterdam were held in Pakhuis de Zwijger in Amsterdam. There is a first time for everything and for me this I attended the Devopsdays in three roles: Attendee, for me this was the third time I attended the Devopsdays in Pakhuis de Zwijger. (Gold) Sponsor, Luminis was one of the gold sponsors. In 2019 the company I worked for at that moment was also a gold sponsor. Speaker, this was the first time for me to speak at Devopsdays. Devopdays starts with a workshop day and after that two days of sessions. Next to that there is a lot of stuff going on what makes my Devopsdays in my opinion an conference everyone should attend. I will give a recap of some of sessions that I thought were interesting and also some focus on my different roles during the conference. ...

Introduction This year KubeCon / CloudNativeCon Europe was held in the Netherlands at the RAI conference center in Amsterdam. KubeCon started with the different sponsor hosted and CNCF hosted colocated events like ArgoCon, CiliumCon, Observability day and Azure Day with Kubernetes. Very cool that it was hosted in the Netherlands, felt as home game. In this post I want to give a recap of the Azure Day with Kubernetes and KubeCon with some of the highlights, announcements and interesting sessions that I have attended. Videos of all the colocated events are or will become available in the next days. Watch this channel for the all the talks of KubeCon and other events like KCD. ...