Learn how to create an enterprise-grade multi-tenant logging setup using Loki, Grafana, and Promtail. Last week we encountered an issue with the Loki multi-tenancy feature in otomi. Although the otomi-core code is very well structured, some research was required. During my research, I noticed that there is a lack of…

Code, Build, Deploy, Operate and Monitor containerized applications on Kubernetes with one Platform. Getting all the tools ready to support your DevOps journey when using Kubernetes can be challenging. What if there was a single install for Kubernetes that supports teams practicing DevOps from A to Z? In this article…

The State of Kubernetes Security report was released at the end of 2021, but it seems nothing has seemed to change concerning the security of containers and Kubernetes. It even looks like organizations are losing faith. …

Otomi is a self-hosted PaaS for Kubernetes and offers a complete suite of integrated, pre-configured apps combined with automation. Otomi is optimized for running on managed Kubernetes services like AKS, EKS, and GCP, but can now be installed on really any K8s cluster, even on Minikube. …

Manage and enforce Kubernetes security policies using OPA/Gatekeeper the easy way with Otomi PodSecurityPolicy (PSP) is being deprecated in Kubernetes 1.21. There are several external admission controllers available like OPA/Gatekeeper, but getting started with OPA can be challenging. Otomi, a complete suite of integrated K8s apps and add-ons, combined with developer self-service, is using OPA/Gatekeeper as the standard for providing policy enforcement. All…

In my previous post, I demonstrated how to install Otomi on AKS. There was however still one dependency. You needed to have a DNS zone. DNS was not only required for name resolving, it was also used for generating certificates using LetsEncrypt. But with the latest release, Otomi can now…

Otomi is a single package for Kubernetes that includes projects like Istio, Knative, Prometheus, Harbor, Keycloak, Nginx ingress, External-DNS, Cert-manager, Hashicorp Vault, Gatekeeper, Drone, Gitea and combines them with a lot of automation and a desktop-like user interface. All the integrated projects are pre-configured, which means they work out-of-the-box right…

Avoid lock-in when using additional cloud services in combination with managed Kubernetes services in public clouds In this article I will try to make you aware of the consequences when using additional cloud services and add-ons when using managed Kubernetes services in public clouds. …

With Keycloak fully integrated in Otomi Container Platform, you can choose your favorite identity provider to provide Single Sign On and Role Based Access to Otomi Console, Otomi Apps and all configured services. — About Otomi Container Platform Otomi Container Platform is a (soon to be open source) solution developed by a Dutch startup called Red Kubes. It offers a set of pre-installed and configured leading open source components working in tandem, ready for you to use and installed within a couple of minutes…