Installing AWX 19 on MicroK8s in AWS

AWX is now deployed on Kubernetes (since AWX release 18), which is great – the only thing is, what do you do if this is the only application you need Kubernetes for? It is a bit of a hassle setting up the K8s master and worker nodes just for a single application.

The documentation suggests you use Minikube for this, but that seems to be designed for local / testing use only. There’s no middle ground between these two options, so I decided to work it out on MicroK8s.

MicroK8s is Canonical’s minimal production Kubernetes environment. It installs on one host, but can be set up for high availability and even run on a Raspberry Pi!

Here are the instructions if you want to do the same.

Install an Ubuntu 20 host on a t2.medium or higher instance in AWS.

Give it 20Gb of general purpose SSD disk.

Create a security group that permits TCP/443 through from your location – only TCP/22 is permitted by default.

Install Microk8s on a new Ubuntu host in AWS:

ubuntu@ip-172-31-0-208:~$ sudo snap install microk8s --classic
microk8s (1.20/stable) v1.20.5 from Canonical✓ installed
ubuntu@ip-172-31-0-208:~$

Add the ‘ubuntu’ user you are logged in Continue reading

5 top open-source infrastructure projects

Open source software has been a key underpinning of enterprise IT for years, so it’s no surprise that it’s helping to drive the infrastructure part of the equation forward just as much as application development.Some projects are much more influential than others, and here are five that are doing the most to help enterprise infrastructure keep pace with the demands of an ever-more sophisticated operating environment.OpenStack OpenStack is notable in part for being an open-source competitor to the most important proprietary virtualization software on the market—VMware’s VSphere. For the basic task of virtualizing servers into a flexible pool of computing resources, the difference appears to be ease of use—it’s simpler to use VMware when there isn’t a lot of in-house virtualization or private-cloud expertise.To read this article in full, please click here

5 top open-source infrastructure projects

Open source software has been a key underpinning of enterprise IT for years, so it’s no surprise that it’s helping to drive the infrastructure part of the equation forward just as much as application development.Some projects are much more influential than others, and here are five that are doing the most to help enterprise infrastructure keep pace with the demands of an ever-more sophisticated operating environment.OpenStack OpenStack is notable in part for being an open-source competitor to the most important proprietary virtualization software on the market—VMware’s VSphere. For the basic task of virtualizing servers into a flexible pool of computing resources, the difference appears to be ease of use—it’s simpler to use VMware when there isn’t a lot of in-house virtualization or private-cloud expertise.To read this article in full, please click here

Greening the Internet: Five Questions with Dr. Chomora Mikeka

Today is Earth Day, an international event celebrated around the world to pledge support for environmental protection. From small actions to large, we all have a role to play in protecting our planet. As we celebrate today, we’re shining a light on people like Chomora Mikeka, a scientist in Malawi and a recent awardee of […]

The post Greening the Internet: Five Questions with Dr. Chomora Mikeka appeared first on Internet Society.

What’s the Controversy Over Bitcoin?

Bitcoin – something we have all heard of but never fully understand what the hype is all about. Apart from the hype, there are always news headlines regarding the scandals related to bitcoin. All of this talk in town only leads us to one question: what’s the controversy over Bitcoin?

For starters, you need to know what Bitcoin is. According to the company, they are the pioneers of a peer-to-peer payment network that involves no intermediary. Here , the first controversy begins: governments are highly against cryptocurrencies like Bitcoin simply due to the lack of a middleman during the buying and selling of money or commodities.

Governments and Money: What’s the Relationship?

Governments are the ones who issue currencies to their people. While currencies are merely numbers printed on pieces of paper or metal, the government claims that they have value, and the general population believes them. These notes and coins are then used to make transactions of all kind, and the money flows around through the entire economy.

However, conventional currencies do not have any actual value since they cannot be given back to the government in exchange for commodities. If you want to purchase even something as simple Continue reading

IT certifications: Popular and valuable but not for everyone

In today’s IT profession, how important are certifications? Do you need them to do your job, stay relevant, or receive a promotion? Or is on-the-job training enough?Some IT professionals get certifications because they are required, some get them for monetary reasons, and some get them for their own personal growth. At work, it’s a big topic of discussion. Here’s my experience and what I decided.Network pros react to Cisco certification curriculum When I began my IT career as a network engineer, I was unfamiliar with certifications, but getting the CompTIA Security+ certification was a requirement for my job because of the sensitivity of my work. By getting the certification I would know more about securing networks and keeping them secure. I had to try three times before passing the exam because I had to learn how to take the test, not because I hadn’t mastered the material. That taught me to stay relaxed and reread the questions during the exam, and it taught me that persistence pays off.  Obtaining the Security+ certification gave me a level of confidence that I could obtain more certifications, so I decided to try for the CompTIA Network+ certification to increase my Continue reading

Ethics: University of Minnesota’s hostile patches

The University of Minnesota (UMN) got into trouble this week for doing a study where they have submitted deliberately vulnerable patches into open-source projects, in order to test whether hostile actors can do this to hack things. After a UMN researcher submitted a crappy patch to the Linux Kernel, kernel maintainers decided to rip out all recent UMN patches.

Both things can be true:

  • Their study was an important contribution to the field of cybersecurity.
  • Their study was unethical.
It's like Nazi medical research on victims in concentration camps, or U.S. military research on unwitting soldiers. The research can simultaneously be wildly unethical but at the same time produce useful knowledge.

I'd agree that their paper is useful. I would not be able to immediately recognize their patches as adding a vulnerability -- and I'm an expert at such things.

In addition, the sorts of bugs it exploits shows a way forward in the evolution of programming languages. It's not clear that a "safe" language like Rust would be the answer. Linux kernel programming requires tracking resources in ways that Rust would consider inherently "unsafe". Instead, the C language needs to evolve with better safety features and better static Continue reading

Dell reportedly looking to unload its cloud unit

Hot on the heels of its pending spin-off of VMware, Dell is now reportedly looking to sell off its Boomi cloud business for $3 billion. Bloomberg first broke the news, citing people familiar with the matter.Dell is working with a financial adviser on the sale, sources told Bloomberg, and the idea is said to be in the early stages. One thing about Dell, it does not rush these decisions. The VMware spin-off, which has been discussed for years, started last summer and only now is coming to fruition.Boomi provides an integration platform as a service (iPaaS), which enables the connection of applications and data sources. The platform provides API, lifecycle management, and event-driven architecture features for cloud integration. Dell acquired Boomi in 2010.To read this article in full, please click here

The Hedge 80: Ian Goetz and 5G

Although there are varying opinions 5G—is it real? Is it really going to have extremely low latency? Does the disaggregation of software and hardware really matter? Is it really going to provide a lot more bandwidth? Are existing backhaul networks going to be able to handle the additional load? For network engineers in particular, the world of 5G is a foreign country with its own language, expectations, and ways of doing things.

On this episode of the Hedge, Ian Goetz joins Tom Ammon and Russ White to provide a basic overview of 5G, and inject some reality into the discussion.

download

Juniper: Managing the complexity of future networks

Juniper Networks Manoj Leelanivas Like most of its competitors, Juniper Networks is leaning hard on developing all manner of software components—from automation to intent-based networking—in order to address the changing needs of enterprise-network customers. Moving into the software realm is no small task as Juniper has to integrate products from a number of acquisitions including Mist, 128 Technologies, Apstra, and NetRounds. At the same time it continues to develop its own Junos software and invest in key open-source projects such Software for Open Networking in the Cloud (SONiC) among other undertakings. Network World talked with Manoj Leelanivas, Juniper’s executive vice president and chief product officer about the company’s software directions and how it is preparing for challenges of the future. Here is an edited version of that conversation. To read this article in full, please click here

Juniper: Managing the complexity of future networks

Juniper Networks Manoj Leelanivas Like most of its competitors, Juniper Networks is leaning hard on developing all manner of software components—from automation to intent-based networking—in order to address the changing needs of enterprise-network customers. Moving into the software realm is no small task as Juniper has to integrate products from a number of acquisitions including Mist, 128 Technologies, Apstra, and NetRounds. At the same time it continues to develop its own Junos software and invest in key open-source projects such Software for Open Networking in the Cloud (SONiC) among other undertakings. Network World talked with Manoj Leelanivas, Juniper’s executive vice president and chief product officer about the company’s software directions and how it is preparing for challenges of the future. Here is an edited version of that conversation. To read this article in full, please click here

How to Implement Network Segmentation with Zero Changes to Your Network

Across industries, network segmentation is quickly becoming a critical capability for enterprises of all sizesWhy? First, network segmentation prevents the lateral spread of threats inside the network. Second, it separates dev, test, and production environments. And lastly, it meets increasingly complex compliance requirements while enabling a Zero Trust security strategy. 

Howeverhistorically network segmentation has been fraught with operational challenges and limited by platform capabilities, leading to the perception that setting up and configuring segmentation policies requires massive changes to the physical network as well as a complex, bloated, and costly deployment of physical firewall appliances. 

Not anymore. VMware takes a distributed, software-based approach to segmentation, eliminating the need to redesign your network in order to deploy security. Instead, segmentation policies are applied at the workload level through NSX Firewall, which is deployed on top of your existing VSphere 7 environments. This allows you to easily create zones in the data center where you can separate traffic by application or environment  providing the quickest and easiest way to achieve your data center segmentation Continue reading

Tech Bytes: Unifying Cloud Automation And Network Infrastructure With Gluware (Sponsored)

In this Tech Byte podcast, sponsored by Gluware, we explore the latest features and capabilities in the Gluware network automation and orchestration platform, including an API-based controller to work with SD-WAN, and Terraform integration to support infrastructure automation across public clouds.

The post Tech Bytes: Unifying Cloud Automation And Network Infrastructure With Gluware (Sponsored) appeared first on Packet Pushers.