# Blog - Container Solutions Read the latest thinking, news and research from the team at Container Solutions in our Cloud Native Blog. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CI Shootout: Getting started with Jenkins, Concourse, Tekton and Argo Workflows DevFeed: [CI Shootout: Getting started with Jenkins, Concourse, Tekton and Argo Workflows]() Original publisher: [Read original article]() Author: Tom Godkin Published: 2023-10-04T11:05:39Z Content type: comparison Language: en Sources: [Blog - Container Solutions]() Topics: [ci](), [Self-hosted](), [Jenkins](), [Kubernetes]() Tags: [argo](), [ci](), [continuous-integration](), [helm](), [jenkins](), [kubernetes](), [self-hosted](), [workflows]() ### AI overview This comparison evaluates Jenkins, Concourse, Tekton, and Argo Workflows as self-hosted CI systems. It examines installation and configuration, along with introductory pipeline tasks, using deployments to an existing Kubernetes cluster. ### Source excerpt At EngineerBetter we've evaluated four self-hosted CI systems in order to compare them against each other: Jenkins, Concourse, Tekton and Argo Workflows. For each CI system we've created some pipelines that: ## Debugging Kubernetes Networking DevFeed: [Debugging Kubernetes Networking]() Original publisher: [Read original article]() Author: Daniel Jones and Jonathan Matthews Published: 2023-10-04T10:48:26Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [networking](), [debug]() Tags: [debugging](), [guide](), [kubernetes](), [kubernetes-networking](), [networking]() ### AI overview A debugging walkthrough investigates Kubernetes networking problems involving service DNS lookups. The article reports intermittent failures caused by responses from an unexpected IP, along with failures resolving external domains. ### Source excerpt At EngineerBetter, we're going through the formality of ensuring that we've got the Certified Kubernetes Administrator qualification box ticked. Kelsey Hightower's Kubernetes The Hard Way is a valuable guide to setting up a Kubes cluster 'by hand', and so I set about running through it. ## External Secrets Operator Accepted into the CNCF Sandbox DevFeed: [External Secrets Operator Accepted into the CNCF Sandbox]() Original publisher: [Read original article]() Author: charles.humble@container-solutions.com (Charles Humble) Published: 2022-08-16T08:01:51Z Content type: news Language: en Sources: [Blog - Container Solutions]() Topics: [Cloud Native Ecosystem](), [Kubernetes](), [Secrets Management](), [Open Source](), [Go Language]() Tags: [cloud-native](), [cncf](), [kubernetes](), [news](), [open-source](), [operator](), [secrets]() ### AI overview External Secrets Operator, an open-source Kubernetes operator for synchronizing secrets from external APIs, was accepted into the CNCF Sandbox for early-stage incubation. ### Source excerpt The Cloud Native Computing Foundation (CNCF) has announced that External Secrets Operator (ESO), an open-source solution for synchronising secrets from external APIs into Kubernetes, can begin incubating as an early stage project in the CNCF Sandbox. ## Enforcing Policies with Gatekeeper in Kubernetes DevFeed: [Enforcing Policies with Gatekeeper in Kubernetes]() Original publisher: [Read original article]() Author: Cameron Wood, Elieser Pereira, Rodrigo Martinez Published: 2022-06-30T13:34:38Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Security](), [Open Policy Agent](), [Authorization]() Tags: [best-practices](), [how-to](), [kubernetes](), [open-policy-agent](), [open-source](), [policy](), [security](), [security-policies](), [wtf-is-cloud-native]() ### AI overview This tutorial explains how Gatekeeper works with Kubernetes RBAC to enforce authorization rules and pod security policies. It presents Gatekeeper, based on Open Policy Agent, as a way to add deny rules, protect namespaces, and replace deprecated Pod Security Policies. ### Source excerpt When managing Kubernetes clusters, cluster administrators need to ensure the overall stability of the system. To accomplish this it is necessary to avoid disruptions to the control plane, and also avoid any risks of users being able to escalate their privileges thus causing further problems. With this in mind, protecting the kube-system namespace and enforcing pod security policies to run payloads with just the necessary access is a must. ## Using Kubernetes Monitoring Mixins DevFeed: [Using Kubernetes Monitoring Mixins]() Original publisher: [Read original article]() Author: Ilias Giannoulas Published: 2022-03-14T12:25:02Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Monitoring](), [Grafana](), [Prometheus](), [dashboards](), [configuration](), [Git](), [Docker Image]() Tags: [build](), [configuration](), [dashboards](), [docker](), [docker-image](), [git](), [grafana](), [kubernetes](), [monitoring](), [prometheus]() ### AI overview This tutorial explains Kubernetes monitoring mixins: reusable bundles of Grafana dashboards and Prometheus rules and alerts, written in Jsonnet and typically managed with jsonnet-bundler. It defines the concept, discusses its motivation and components, and introduces an example using a Jsonnet file and Docker image. ### Source excerpt The term Kubernetes monitoring mixins appears in many Kubernetes related projects involving Prometheus and Grafana. Despite its broad usage, the details about it cannot be easily found. There are many cases where mixins are used without notably mentioning them (for example in prometheus-operator). In this article, we are going to explore what it is and also how you can use it in your Kubernetes cluster. ## A Beginner's Guide to Using the Prometheus Operator DevFeed: [A Beginner's Guide to Using the Prometheus Operator]() Original publisher: [Read original article]() Author: Rodrigo Martinez Published: 2022-01-25T16:58:03Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Prometheus](), [Monitoring](), [Kubernetes](), [Open Source]() Tags: [article](), [beginner](), [cno](), [guide](), [kubernetes](), [monitoring](), [prometheus](), [sre]() ### AI overview A beginner-oriented tutorial explains the Prometheus Operator, how Kubernetes operators work through custom resources and controllers, and how the operator simplifies configuration and management of Prometheus and Alertmanager on Kubernetes. ### Source excerpt Prometheus is a simple and effective open-source monitoring system. In the years after we published the article Monitoring Microservices with Prometheus, the system has graduated from the Cloud Native Computing Foundation (CNCF) and became the preferred monitoring tool for distributed systems. One of the reasons for this, as mentioned in our previous article, is its intuitive simplicity. It doesn't try to do anything fancy. It provides a data store, data scrapers, an alerting mechanism and a very simple user interface. ## Windows Container on K8s Clusters DevFeed: [Windows Container on K8s Clusters]() Original publisher: [Read original article]() Author: Sebastián Gómez Published: 2021-12-03T09:27:27Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Containers](), [Windows](), [.NET Framework](), [Amazon EKS](), [Docker](), [Selenium](), [Tool](), [PowerShell](), [Package manager](), [Spring Boot](), [Java]() Tags: [build](), [containers](), [docker](), [java](), [kubernetes](), [net-framework](), [nuget](), [powershell](), [selenium](), [spring-boot](), [windows]() ### AI overview This article describes a cloud migration scenario involving Windows containers and a .NET Framework 4.8 UI-testing application that uses Selenium to start a browser. It also discusses bringing Docker images into a managed Kubernetes cluster on Amazon EKS, alongside existing React/Redux and Java Spring Boot applications. ### Source excerpt I recently came across a fun and interesting challenge. In the latest project I joined, a team wanted to do a "lift & shift to the cloud". As a Cloud Native engineer I've seen this pattern fairly often, although it never means quite the same thing. ## The Birth of the External Secrets Community DevFeed: [The Birth of the External Secrets Community]() Original publisher: [Read original article]() Author: Lucas Severo Alves Published: 2021-05-06T07:12:38Z Content type: article Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Maintainers](), [JavaScript]() Tags: [azure](), [google-cloud](), [hashicorp-vault](), [ibm](), [javascript](), [kubernetes](), [kubernetes-secrets](), [open-source](), [secret-rotation](), [security]() ### AI overview This article describes the growth of projects that synchronize secrets from external providers into Kubernetes and the formation of a community around the External Secrets Operator. It highlights GoDaddy's kubernetes-external-secrets project, its provider integrations and active maintenance, while noting that it was developed in JavaScript. ### Source excerpt Managing secrets in Kubernetes can be a cumbersome job. In a multi-service multi-environment setup, you can end up with hundreds of secrets without even noticing. It is hard to keep track of everything and at the same time manage secret rotation, onboard new services, and onboard new people with correct access permissions. ## A .NET Operator SDK for Building Kubernetes Operators in C# DevFeed: [A .NET Operator SDK for Building Kubernetes Operators in C#]() Original publisher: [Read original article]() Author: Sebastián Gómez Published: 2021-03-16T15:16:12Z Content type: article Language: en Sources: [Blog - Container Solutions]() Topics: [.NET](), [SDKs](), [C#](), [Kubernetes](), [Java Operator SDK]() Tags: [c-sharp](), [gitops](), [kubernetes](), [net](), [news](), [open-source](), [sdk]() ### AI overview The article introduces a .NET Operator SDK that lets developers build Kubernetes operators in C# or other .NET languages. It describes the SDK as a wrapper around the official Kubernetes C# client, providing interfaces and a controller engine for Kubernetes API calls and reconciliation loops. ### Source excerpt We built a .NET Operator SDK, in C#, so you can build your own Kubernetes Operators in C# or any .NET language. There's of course the Go Operator SDK, and there's our Java Operator SDK, so why not having something for the .NET community?