Kubernetes

blog-thumb
by Thomas Memenga on 12 Feb 2025

Securely Using Spring Boot Actuator

Spring Boot Actuator offers powerful insights into your application’s internals, enabling production-grade monitoring and management. However, if misconfigured, these same tools can expose sensitive information, leading to serious security breaches. A notable example of this occurred when researchers discovered an unprotected Spring Boot Actuator endpoint in a Volkswagen telematics service. A single open /actuator/heapdump endpoint granted access to a heap dump containing AWS credentials in plaintext. Those credentials led to the download of 9 terabytes of GPS data from hundreds of thousands of cars.

blog-thumb
by Thomas Memenga on 29 Jan 2022

Scaling Java Workloads on Kubernetes: A Dive into CPU and Memory Metrics

In the dynamic world of container orchestration, Kubernetes stands out as a robust platform for managing diverse workloads. For Java applications, particularly, the decision of how to effectively scale in a Kubernetes environment is nuanced, involving a careful consideration of both CPU and memory metrics. This complexity is rooted in the unique characteristics of Java’s memory management.