--- title: "Java 10, securing Kubernetes, and Windows Server 2019" publication: "StatusCode Weekly" issue: 158 published_at: "2018-03-21" canonical_url: "https://weekly.statuscode.com/issues/158" --- The latest Web operations, HTTP, and Web performance news #158 — March 21, 2018 [Read on the Web](https://webopsweekly.com/issues/158) Web Operations Weekly [NGINX Adds Native Support for gRPC](https://www.nginx.com/blog/nginx-1-13-10-grpc/) — NGINX adds gRPC, a remote procedure call protocol transported over HTTP/2, to its long list of supported protocols. You can now terminate, inspect, route, and load balance gRPC method calls, much as you would HTTP. NGINX [Building Container Images Securely on Kubernetes](https://blog.jessfraz.com/post/building-container-images-securely-on-kubernetes/) — How to build container images without doing anything to compromise cluster security and why it was a hard problem to solve. Jessie Frazelle [![\](https://copm.s3.amazonaws.com/7aab25e8.png)](https://www.sqreen.io/?utm_medium=email&utm_source=external&utm_campaign=WebOpsWeekly%20-%20email%20-%20Security%20Automation) [Automate Your Application Security](https://www.sqreen.io/?utm_medium=email&utm_source=external&utm_campaign=WebOpsWeekly%20-%20email%20-%20Security%20Automation) — Get full visibility into your security, get alerted on critical issues and easily build automated responses against security threats. Sqreen sponsor [Netlify Offers Lambda Functions on Its Static Platform](https://www.netlify.com/blog/2018/03/20/netlifys-aws-lambda-functions-bring-the-backend-to-your-frontend-workflow/) — A new feature from the popular static site hosting platform to deploy AWS Lambda-powered functions simply by adding files to Git repositories. Matt Billmann and Chris Bach [Windows Server 2019, Now Available in Preview](https://cloudblogs.microsoft.com/windowsserver/2018/03/20/introducing-windows-server-2019-now-available-in-preview/) — Focuses on hybrid cloud, security, Kubernetes, Linux, and ‘hyper-converged infrastructure’ (the idea of having virtualized compute, storage, and networking in a single system). Microsoft Windows Server Team [IBM Announces Managed Kubernetes on Bare Metal](https://www.ibm.com/blogs/cloud-computing/2018/03/managed-kubernetes-bare-metal/) — With this, IBM is the first major cloud provider to enable running Kubernetes containers as a managed service directly on _bare metal_ cloud infrastructure. Jason McGee (IBM Cloud) [RedisWannaMine: A New Cryptojacking Attack Powered by Redis & NSA Exploits](https://www.imperva.com/blog/2018/03/rediswannamine-new-redis-nsa-powered-cryptojacking-attack/?utm_source=webops&utm_medium=article&utm_campaign=sponsored) — Web threats persist as a new generation of cryptojacking targets both DB and app servers. Imperva sponsor [Java 10 Released; JDK 10 General Availability](http://mail.openjdk.java.net/pipermail/announce/2018-March/000247.html) — Or, if you prefer, a more accessible [post on how Java 10 is better.](https://blog.takipi.com/how-java-10-will-change-the-way-you-code/) Oracle [Let's Encrypt Issued Over 10K Wildcart Certificates in First 48 Hours](https://twitter.com/i/web/status/974393551554359298) — Support for wildcard certificates [went live last week.](https://community.letsencrypt.org/t/acme-v2-and-wildcard-certificate-support-is-live/55579) Let's Encrypt on Twitter 💻 Jobs [Join Our Lean and Agile Dev Team at Microsoft San Francisco](https://careers.microsoft.com/jobdetails.aspx?ss=&pg=0&so=&rw=1&jid=347392&jlang=EN&pp=SS) — Join our lean and agile engineering team that's building modern cloud-native technologies at Microsoft San Francisco. Microsoft [WebOps Expert? Sign Up for Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-19589) — Create your profile and we’ll connect you with top companies looking for talented WebOps candidates. Vettery 📈 Articles, Tutorials and Case Studies [Securing Kubernetes for OpenFaaS and Beyond](https://www.twistlock.com/2018/03/20/securing-kubernetes-openfaas-beyond/) — Want to roll out your own serverless architecture on top of OpenFaaS and Kubernetes? Some pointers on security here. Daniel Shapira [Running End-to-End Tests on Kubernetes](https://www.gocd.org/2018/02/27/running-end-to-end-tests-kubernetes/?utm_campaign=e2e_k8s&utm_medium=newsletter_ad&utm_source=cooperess_webops&utm_content=e2e_k8s&utm_term=) GoCD sponsor [Building a Highly Available MongoDB Webapp on DigitalOcean](https://www.digitalocean.com/community/tutorials/solution-deep-dive-building-a-highly-available-web-application-with-web-processing-and-storing-capabilities-using-mongodb-and-elk-stack) — A high-level look at a potential setup for a highly available app that depends on MongoDB and the ELK stack (Elasticsearch, Logstash, and Kibana) with a focus on DigitalOcean but the principles could work with most providers. Kathleen Howard and Sebastian Canevari [Best Practices for Service Quality in Microservice Apps](https://thenewstack.io/3-best-practices-ensuring-service-quality-microservice-applications/) — Service discovery needs to be automatic and immediate, and AI can be used for faster incident response. Mirko Novakovic [Resiliency in Distributed Systems](https://blog.gojekengineering.com/resiliency-in-distributed-systems-efd30f74baf4) Rajeev Bharshetty [Migrating From Heroku to AWS with Kubernetes and Without Stopping Production](https://www.voucherify.io/blog/migrating-from-heroku-to-aws-with-kubernates-and-without-stopping-production) Voucherify [Why a Firewall Can’t Protect Against a Memcache DDoS Attack](https://thenewstack.io/firewall-cant-protect-memcache-ddos-attack/) — Further thoughts on [the memcached-manified DDoS problems](https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/) of late. Nitzan Niv [Improve Site Performance by Optimizing Queries](https://learn.percona.com/cp-troubleshooting-slow-queries-recording) Percona sponsor [Protecting Against HSTS Abuse](https://webkit.org/blog/8146/protecting-against-hsts-abuse/) WebKit Project [Bringing Tokusatsu to AWS using Python Flask, Zappa and Contentful](https://www.contentful.com/blog/2018/03/07/bringing-tokusatsu-to-aws-using-python-flask-zappa-and-contentful/?utm_term=) — How to build and deploy a Python with AWS Lambda and a third-party CMS. Contentful 🔧 Code, Tools & Demos [Introducing Skaffold: Easy and Repeatable Kubernetes Development](https://cloudplatform.googleblog.com/2018/03/introducing-Skaffold-Easy-and-repeatable-Kubernetes-development.html?m=1) — We linked the tool itself last week but now Google have explained in more detail what it’s for. Google Cloud Platform Blog [Komiser: An AWS Environment Inspector](https://hackernoon.com/komiser-aws-environment-inspector-8340946b6237) — Essentially a self-hosted dashboard for your AWS resources. Mohamed Labouardy [Jenkins X: A CI/CD Solution for Modern Cloud Apps on Kubernetes](https://jenkins.io/blog/2018/03/19/introducing-jenkins-x/) Jenkins CI [Varnish Cache 6.0.0 Released](https://varnish-cache.org/releases/rel6.0.0.html) — Despite the version number change, not a huge change in terms of configuration but it now [supports Unix Domain Sockets](https://varnish-cache.org/docs/6.0/whats-new/changes-6.0.html) and HTTP/2 support has been improved. Poul-Henning Kamp [SSH Permit A38: Central Management and Deployment for SSH Keys](https://github.com/ierror/ssh-permit-a38) — Written in Rust. Binaries available for macOS and Linux. Bernhard Janetzki [Jackal: An XMPP Server in a Container (and written in Go)](https://hub.docker.com/r/ortuman/jackal/) Miguel Ángel Ortuño Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) [Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom