• Search for:
    12 Jan, 2021
    How To Ensure Security With Cloud Hosting?
    Cloud , ,

    How To Ensure Security With Cloud Hosting?

    Our world will become completely digital in a few years. This is a good thing but also raises some serious questions about data security; every business (be it small or large) needs to be vigilant about data security in this digital era.  Most companies store their data on-premise and look after its security themselves. However, […]

    The post How To Ensure Security With Cloud Hosting? appeared first on Compare the Cloud.

    …

    Read MoreHow To Ensure Security With Cloud Hosting?

    11 Jan, 2021
    Ubiquiti: Change Your Password, Enable 2FA
    Cybersecurity ,

    Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear. …

    Read MoreUbiquiti: Change Your Password, Enable 2FA

    11 Jan, 2021
    Using Velero to Protect Cluster API
    Cloud

    Cluster API (also known as CAPI) is, as you may already know, an effort within the upstream Kubernetes community to apply Kubernetes-style APIs to cluster lifecycle management—in short, to use Kubernetes to manage the lifecycle of Kubernetes clusters. If you’re unfamiliar with CAPI, I’d encourage you to check out my introduction to Cluster API before proceeding. In this post, I’m going to show you how to use Velero (formerly Heptio Ark) to backup and restore Cluster API objects so as to protect your organization against an unrecoverable issue on your Cluster API management cluster.

    To be honest, this process is so straightforward it almost doesn’t need to be explained. In general, the process for backing up the CAPI management cluster looks like this:

    1. Pause CAPI reconciliation on the management cluster.
    2. Back up the CAPI resources.
    3. Resume CAPI reconciliation.

    In the event of catastrophic failure, the recovery process looks like this:

    1. Restore from backup onto another management cluster.
    2. Resume CAPI reconciliation.

    Let’s look at these steps in a bit more detail.

    Pausing and Resuming Reconciliation

    The process for pausing and resuming reconciliation of CAPI resources is outlined in this separate blog post. To summarize that post here for convenience, the Cluster API spec includes a paused field that causes the Cluster API controllers to stop reconciliation when the field is set to true (and resume reconciliation when the field is false or absent). Setting this field allows you, the cluster operator, to pause or resume reconciliation.

    Backing up CAPI Resources

    Once you’ve paused reconciliation for Cluster API, you can then run a backup using Velero. Based on my testing, I didn’t see anything unusual or odd about running a backup; generally speaking, it looks to be as simple as velero backup create (with appropriate flags). Given the large number of custom resources used by Cluster API (Clusters, Machines, MachineDeployments, KubeadmConfigs, etc.) it may be challenging to include only Cluster API resources using Velero’s --include-resources functionality. It’s probably easier to either a) not use any of Velero’s filtering functionality and catch everything, or b) make sure you are either using namespaces or labels comprehensively for CAPI objects and then use Velero’s --include-namespaces and/or --selector filtering options for selecting things to be included in the backup. Refer to Velero’s resource filtering documentation for more details.

    Restoring from Backup

    As with creating the backup using Velero, restoring from the Velero backup follows the standard Velero procedures (i.e., run velero restore create with appropriate flags/options). Naturally, the cluster to which you are restoring should be an appropriately-configured Cluster API management cluster with the appropriate Cluster API components already installed.

    Since this article is more focused on the “Oh no my management cluster is dead” scenario, all of the information on disaster recovery in the Velero docs is appropriate.

    After the restore is complete, you’ll then want to resume reconciliation on the target/destination cluster, as outlined above.

    Backup and Restore Versus Moving

    The clusterctl utility used by CAPI for initializing management clusters (among other things) also has a move subcommand that can be used to move CAPI resources from one cluster to another cluster. Some readers may be wondering why we should bother with Velero, and if they could use clusterctl move instead.

    clusterctl move is a viable option for moving CAPI objects between two clusters as long as both the source and target clusters are up and running. Using Velero, on the other hand, only requires that the source cluster is up and running when a backup needs to be taken; users can then restore this backup to another cluster even if the source cluster has completely failed. I’m also of the opinion that Velero will provide more fine-grained control over what can be backed up and restored, although I have yet to test that directly.

    Additional Resources

    Readers may find the following resources useful as well:

    Disaster recovery use case with Velero

    Cluster migration use case with Velero

    I hope that readers find this article helpful. If there’s anything I’ve discussed here that you’d like to see examined/explained in greater detail, feel free to let me know. You can find me on the Kubernetes Slack instance, or find me on Twitter. I’d love to hear from you!

    …

    Read MoreUsing Velero to Protect Cluster API

    11 Jan, 2021
    How Cloud accounting can help your business continuity
    Cloud ,

    HOW CLOUD ACCOUNTING CAN HELP YOUR BUSINESS CONTINUITY

    The events of this year has led to many businesses revisiting their business continuity plans – in some cases for the first time since they were created.  As lockdown restrictions return to England and other parts of the UK, businesses are faced with a ‘lessons learned’ phase, where they are in position to use what […]

    The post How Cloud accounting can help your business continuity appeared first on Compare the Cloud.

    …

    Read MoreHow Cloud accounting can help your business continuity