How do you resolve CVEs in containers efficiently

Efficient CVE Resolution in Containers: A Practical Approach Resolving CVEs in containers is a necessary but often soul-crushing task.

JR

3 minute read

Resolving CVEs in containers is a necessary but often soul-crushing task. You’re not alone in drowning under a deluge of alerts from tools like BlackDuck. The key is to focus on what matters, automate the rest, and stop playing whack-a-mole. Here’s how to do it.

Kubernetes Q&A: What to bundle in the Argo CD application and best practices to manage other resources

If you're deploying apps with Argo CD, you're already halfway to a solid GitOps workflow.

JR

3 minute read

If you’re deploying apps with Argo CD, you’re already halfway to a solid GitOps workflow. But when it comes to bundling resources like Gateways, HTTPRoutes, and StorageClasses, confusion sets in fast. Let’s cut through the noise with production-tested patterns.

Selective OpenShift IPI on AWS GovCloud without Route 53

Bring your own DNS to an OpenShift IPI deployment on AWS

JR Morgan

4 minute read

If you’ve deployed OpenShift on AWS using the IPI (Installer Provisioned Infrastructure) deployment method then you’re aware of the hardline requirement for Route 53 public/private zones, depending on the publish method set in your OpenShift install-config.yaml. This typically doesn’t present a problem for most customers, but select companies disallow use of Route 53 in favor of their own managed DNS (e.g. Infoblox). Unfortunately this limitation forces most customers to pursue…