At NetEye we’re always working towards more and more integration with Kubernetes. The NetEye Operator is the first piece of that journey we’re working on, with the goal of obtaining a component that ships as a Kubernetes operator rather than as an RPM. The process of building it gave us a rare opportunity, a chance…
Read MoreJira Automation can create native issue links inside one site, but the standard link action doesn’t cover issues stored on two separate Atlassian sites. You can work around this limitation by creating reciprocal application links and calling Jira’s remote issue link REST API. The reliable pattern uses one authenticated request for each direction, with a…
Read MoreTekton has been at the core of our CI/CD infrastructure for several years. On OpenShift, however, we’ve never interacted with Tekton only through its APIs or command-line tools: The OpenShift web console provides a convenient graphical interface to inspect pipelines, understand their structure, start them with custom parameters and workspaces, and follow their execution. As…
Read MoreIf you spend enough time working on Linux, your home directory slowly becomes a reflection of how you like to work. A few aliases are added to your shell. Git gets its own configuration. Your editor starts accumulating plugins and custom keybindings. The terminal gets some additional settings, and eventually even tools you barely remember…
Read MoreHow Terraform has turned our NetEye Cloud Elastic configuration management into a declarative, verifiable, and repeatable process that improves governance, security, and operational speed. From Manual Configuration to a Declarative Platform The configuration of an observability and security platform quickly grows in complexity. Workspaces, permissions, retention policies, data views, and user experience settings must remain…
Read MoreWhy We Decided to Address This At some point while reviewing our endpoint security posture, we realized that BIOS protection was one of those areas we tend to take for granted rather than actually verify. This was the situation we encountered: • No BIOS password configured• Unrestricted access to BIOS settings• External boot still enabled…
Read MoreFor a long time, Sealed Secrets was our go-to solution for managing confidential data like database credentials, tokens and private keys within Kubernetes. However, as our operations grew, the operational overhead of this approach led us to migrate to External Secrets. This transition has significantly streamlined our workflow, enhanced our security posture during credential rotations,…
Read MoreIn a previous post, I wrote about the challenges of building a public GitHub organization correctly: The need for structure, consistency, and enforcement rather than relying on memory. What I didn’t cover was how we actually solved it. The short answer: We treat the organization as infrastructure. Repositories, teams, branch protection rules, labels, permissions, all…
Read MoreSOAR for Controlled Response SOAR is often described in broad terms: orchestration, automation, response, integration. That’s true, but it can also feel vague. A simpler way to explain it is this: SOAR helps a SOC turn a decision into action without repeating the same manual steps every time. This matters most when the action is…
Read MoreI recently faced a challenge that many large organizations run into when scaling their use of Atlassian Confluence. I needed to create an automation that would automatically change the page status under specific conditions – for every page created or updated across more than 600 spaces. The Problem Out of the box, Confluence provides a…
Read MoreCreating a GitHub organization is easy. Creating a public one that is actually well-structured, secure, and maintainable over time… not so much. At the beginning, it feels like a simple task: create the org, push some repositories, maybe define a couple of teams, and you’re done. But as soon as things become public, the whole…
Read MoreTL;DR The Challenge LinkedIn is my single source of truth for professional experience. Every new role, certification, or skill update goes there first. A person’s CV should reflect those changes automatically – not weeks later when he or she remembers to manually copy information across formats and through different portals. The idea was simple: build…
Read MoreThis is the first article in the RTO series The Problem Red team and penetration testing activities are full of repetition: the network scans, reconnaissance, OSINT collection, and routine validation tasks are all necessary, but they’re also time-consuming and error-prone when executed manually. Over time, most teams end up with a zoo of scripts, half-maintained…
Read MoreIntroduction For on-premise Elasticsearch installations, performing a rolling restart across a cluster can be a time-consuming task, especially when dealing with large clusters. Rolling restarts are typically required when changing node configurations or upgrading the cluster to a new version. Elastic provides an official procedure to ensure service continuity during this process. However, after analyzing…
Read MoreToday we continue our journey into monitoring automation in NetEye. In my previous post we discussed the possibility of automating Business Processes. As you may remember, for those of us working on NetEye Cloud monitoring dozens of clients, it’s important to be able to standardize and automate the creation of BPs to have a consistent…
Read More