Use Helm+Terraform to installing and initialization the OpenTelmetry and Enable auto instrumentation the workloads Dowload the OpenTelmetry Operator Helm package to local 1# add OpenTelemetry chat repo 2helm repo add open-telemetry https://open-telemetry.github.io/opentelemetry-helm-charts 3# pull the chat package …

read more

To protect the some internal web resources we can use Oauth2 proxy to integration many identity tools for example: gitlab, github, Open ID, OpenLDAP and so on Get the Oauth2-proxy helm chat package 1# add the oauth2-pxory helm repo url 2helm repo add oauth2-proxy https://oauth2-proxy.github.io/manifests 3# …

read more

ossim tcpdump tshark wireshark Nmap skipfish security onion snort zeek openvas,Greenbone Community Edition backbox kali platform penetration testing and security assessmen zeltser Threats with ATT&CK-based Analytics threat hunting tools canarytokens security tools and parse events for most products open source, …

read more

Today, Cloud Native Security is more and more important. the Falco is sysdig open source cloud security tools. We can install to independent host or kubernetes cluster Please reference previous post about basic and install falco: Change every independent machine hostname to a meaningful name 1hostnamectl set-hostname …

read more

For greater isolation and convenience, we can use farget as the run time environment for eks. Create eks farget execute role named: AmazonEKSFargatePodExecutionRole the TrustPolicy statements like following 1# trust policy 2{ 3 "Version": "2012-10-17", 4 "Statement": [ 5 { 6 "Effect": …

read more