Move virtual machines to OpenShift at-scale with Red Hat’s migration toolkit for virtualization

Red Hat OpenShift, the industry’s leading enterprise Kubernetes platform, is used by enterprises across the globe that are looking to bring applications to market faster. The benefits of OpenShift can be extended to virtualized workloads through OpenShift Virtualization, OpenShift’s capability for Kubernetes-native virtualization, but first comes the hard part: How do you actually move your workloads to Kubernetes in the first place?
Quelle: CloudForms

Learn Kubernetes by Example

If you’ve worked in enterprise IT at any point in the past six years – either in development or operations – chances are high that you’ve crossed paths with Kubernetes, which has become the de facto standard for deploying, managing and scaling containerized applications—and for good reason. Software architecture is arguably one of the most important assets for the future of your business, and Kubernetes is the foundation for today’s hybrid cloud architectures.
Quelle: CloudForms

Let’s Celebrate Pride by Supporting Nonprofits

It’s Pride month; perhaps you’ve noticed from the rainbows all over everything?

A most unusual Pride month it is, too — the familiar sights of parades were missing last year, and those happening this year are somewhat cautious by comparison to years past. The representation and visibility that Pride was conceived to address has been obscured by the pandemic, and the queer community, though strong and passionate, has seen quite enough historical isolation already.

To make matters worse, the redoubled attacks over the last year on the queer community’s rights, especially the direct lobbying against trans rights in the UK and US, have made it clear that the vulnerability all humans faced during 2020 hasn’t really ended for many of those in the queer and trans communities; while we’re slowly putting the pandemic behind us, the disease of discrimination still infects far too much of humankind.

While allying with the queer community is a noble intent, the nonprofits, charities and organizations that make up the core of the queer community’s ongoing battle for equal rights have been taking much of the strain through this pandemic.

This year, we’re taking a constructive approach to Pride by celebrating and highlighting the work of important queer organizations, charities, and nonprofits tirelessly working to ensure the queer community is respected and protected through these turbulent times. To uplift and support a community, it’s important to uplift those who already do so, and who continue to do so all year round, long after the rainbow flags come down again.

We invite everyone, queer and ally alike, to support these critical organizations in the work they do. If you’re unsure where to start, take some time to visit a few of their websites and get a sense of what they do, follow them on social media and reshare the information they post, and please take heed of volunteering and direct donation opportunities to support their work, too!

Stonewall UK

An internationally-reaching queer and trans rights organization, advocating for the rights of the queer community and providing frameworks for equitable employment and treatment of queer and trans people. #standforstonewall

stonewall.org.uk

Out In Tech

The world’s largest nonprofit community of LGBTQ+ tech leaders, creating opportunities for members to advance their careers, grow their networks, and leverage tech for social change.

outintech.com

Translifeline

A grassroots hotline and microgrants nonprofit organization offering direct emotional and financial support to trans people in crisis — for the trans community, by the trans community.

translifeline.org

GLSEN

Every day GLSEN works to ensure that LGBTQ students are able to learn and grow in a school environment free from bullying and harassment.

glsen.org

The Trevor Project

The leading national organization providing crisis intervention and suicide prevention services to lesbian, gay, bisexual, transgender, queer, and questioning young people under 25.

thetrevorproject.org

National Black Trans Advocacy Coalition

The only social justice organization led by black trans people to collectively address the inequities faced in the black transgender human experience.

blacktrans.org

Gendered Intelligence

A trans-led and trans-involving grassroots organization with a wealth of lived experience, community connections of many kinds, and a depth and breadth of trans community knowledge that is second to none.

genderedintelligence.co.uk

GaymerX

GaymerX is a nonprofit dedicated to celebrating and supporting LGBTQ+ people and culture in the world of gaming, with a focus on video games.

gaymerx.org

It Gets Better Project

The It Gets Better Project’s mission is to uplift, empower, and connect lesbian, gay, bisexual, transgender, and queer youth around the globe.

itgetsbetter.org

Mermaids

Mermaids has been supporting transgender, nonbinary and gender-diverse children, young people, and their families since 1995.

mermaidsuk.org.uk

Black and Pink

Black & Pink coordinates a nationwide pen pal program in which we match incarcerated LGBTQIA2S+ people and people living with HIV/AIDS with pen pals who correspond, build relationships, and participate in harm reduction and affirmation.

blackandpinkpenpals.org

Lambda Legal

A national organization committed to achieving full recognition of the civil rights of lesbians, gay men, bisexuals, transgender people, and everyone living with HIV through impact litigation, education, and public policy work.

lambdalegal.org

GLAAD

GLAAD rewrites the script for LGBTQ acceptance. As a dynamic media force, GLAAD tackles tough issues to shape the narrative and provoke dialogue that leads to cultural change. GLAAD protects all that has been accomplished and creates a world where everyone can live the life they love.

glaad.org

There are lots of ways to support these critical organizations year-round, not just at Pride! Remember — check them out, follow them on social media, and consider volunteering and donating where you can.
Quelle: RedHat Stack

2 ways to migrate your SAP HANA database to Google Cloud

Many of the world’s leading companies run on SAP—and deploying it on Google Cloud extends the benefits of SAP even further. Migrating your current SAP S/4HANA deployment to Google Cloud—whether it resides on your company’s on-premises servers or another cloud service—provides your organization with a flexible virtualized architecture that lets you scale your environment to match your workloads, so you pay only for the compute and storage capacity you need at any given moment. Google Cloud includes built-in features, such as Compute Engine live migration and automatic restart, that minimize downtime for infrastructure maintenance. And it allows you to integrate your SAP data with multiple data sources and process it using Google Cloud technology such as BigQuery to drive data analytics.SAP server-side architecture consists of two layers: the SAP HANA database, and the Netweaver application layer. In this blog post, we’ll look at the options and steps for moving the database layer to Google Cloud as a lift and shift or rehost, a straightforward approach that entails moving your current SAP environment unchanged onto Google Cloud.Deploying an SAP HANA system on Google CloudGoogle Cloud offers SAP-certified virtual machines (VMs) optimized for SAP products, including SAP HANA and SAP HANA Enterprise Cloud, as well as dedicated servers for SAP HANA for environments greater than 12TB. (For a complete list of VM and hardware options, visit theCertified and Supported SAP HANA Hardware Directory.)Before proceeding with a rehost migration to Google Cloud, your current (source) environment and Google Cloud (target) environments should meet these specifications:Prerequisites:  The configuration of the Google Cloud environment (i.e., VM  resources, SSD storage capacity) should be identical to that of the source environment. If the underlying hardware is different, however, you must use Option 2 for your migration, detailed below.Both environments should be running the same operating system (SUSE or RHEL Linux).The HANA version, instance number, and system ID (SID) should be identical.Schema names must remain the same.Establishing the network connection between the on-premises environment and Google Cloud will be required in this phase to support rehost of the SAP application.you can use Cloud VPN or Dedicated Interconnect. Learn more about Dedicated Interconnect and Cloud VPN.Note: Depending on your internet connection and bandwidth requirements, we recommend using a Dedicated Interconnect over Cloud VPN for production environments. We offer a number of automated processes to accelerate your cloud journey. To deploy the SAP HANA system on Google Cloud, you can use theGoogle Cloud Deployment manager or Terraform and Ansible scripts available on GitHub with configuration file templates to define your installation. For more details, see theGoogle Cloud SAP HANA Planning Guide.Note: To deploy SAP HANA on Google Cloud machine types that are certified by SAP for production, please review theCertification for SAP HANA on Google Cloud page. Moving an SAP HANA Database to Google CloudThere are two different options you can use to rehost your SAP HANA database to Google Cloud, and each has pros and cons that you should consider when deciding on your approach.Option 1: Asynchronous replication uses SAP’s built-in replication tool to provide continuous data replication from the source system (also known as the primary system) to the destination or secondary system—in this case residing on Google Cloud. It’s best for mission-critical applications for which minimum downtime is a high priority, and for large databases. In addition, the high level of automation means that the process requires less manual intervention. Here’s where you can learn more on HANA Asynchronous Replication.Option 2: Backup and restore relies on SAP’s backup utility to create an image of the database that is then transferred to Google Cloud, where it is restored in the new environment. Downtime for this method varies by database size, so large databases may require more downtime via this method vs. asynchronous replication. It also involves more manual tasks. However, it requires fewer resources to perform, making it an attractive option for less urgent use cases. Here’s where you can learn more on SAP HANA database Backup and restore.Click to enlargeHow to migrate the SAP HANA database to Google Cloud using Asynchronous ReplicationClick to enlargeCreate and configure Dedicated Interconnect or Cloud VPN between the current environment and Google Cloud.Set up SAP HANA asynchronous replication. You can configure system replication using SAP HANA Cockpit, SAP HANA Studio, or hdbnsutil. See Setting Up SAP HANA System Replication in the SAP HANA Administration Guide.Be sure to use the same instance number and HANA SID in the template as the primary instance.Configure the Google Cloud instance as the secondary node for using HANA Asynchronous replication.Perform data validation once full data replication is completed to the SAP HANA database in Google Cloud. To learn more: HANA System Replication overview.  Perform an SAP HANA takeover on your standby database. This switches your active system from the current primary system onto the secondary system on Google Cloud. Once the takeover command runs, the system on Google Cloud becomes the new primary system.To learn more: HANA Takeover. How to migrate the SAP HANA database to Google Cloud using Backup and RestoreClick to enlargeCreate a full backup of your SAP HANA database in your current environment.Create a new storage bucket in your Google Cloud environment. VisitCreating Storage Buckets in the Google Cloud Storage documentation. Download and install gsutil onto the source environment and run it to upload the HANA backup to the Google Cloud storage bucket. To install gsutil utility on any computer or server, visit Install gsutil in the Google Cloud Storage documentation.Note: You can run parallel multi thread/multi processing in gsutil to copy large files more quickly.Recover the HANA database on Google Cloud using SAP’s RECOVER DATABASE statement. SeeRECOVER DATABASE Statement (Backup and Recovery) in the SAP HANA SQL Reference Guide for SAP HANA Platform.Note: BackInt agent is an integrated SAP interface tool used for HANA database on Google Cloud.Backint agent for SAP HANA can be used to store and retrieve backups directly from Google Cloud Storage. It is supported and certified by SAP on Google Cloud. To learn more:  SAP HANA Backint Agent on Google Cloud. In summary, we recommend using Asynchronous Replication (Option 1) for mission-critical applications that require the lowest downtime window. For all other applications, we recommend Backup and Restore (Option 2), as this approach requires fewer resources. It’s also a great way to implement the backup and restore functionality on Google Cloud.A rehost migration is the most straightforward path to getting your SAP on HANA system up and running on Google Cloud. And the sooner you migrate, the sooner you can take advantage of the many benefits Google Cloud brings to your SAP solution. For more information on the different migration options please review: SAP on Google Cloud: Migration strategies. Learn more about deploying SAP on Google Cloud. Technical resources can be found here.Related Article9 ways to back up your SAP systems in Google CloudBackup and storage design should be part of any business continuity plan. This post explains Google Cloud’s multiple cloud-based backup s…Read Article
Quelle: Google Cloud Platform

Cloud CISO Perspectives: June 2021

It’s been another busy month for security teams around the globe with no signs of slowing down. Many of us virtually attended RSA, and ransomware attacks continue to dominate headlines. The Biden Administration’s Executive Order on Cybersecurity is officially underway, with important milestones like the NIST workshops where many of us discussed the Standards and Guidelines to Enhance Software Supply Chain Security.In this month’s post I’ll recap these topics, the latest security updates from our Google Cloud product teams, and more. Don’t forget we have a new newsletter sign up for this series, so you can get the latest updates delivered to your inbox. Thoughts from around the industry Post-RSA takeaways: Resilience was the theme of this year’s event, and it’s something we need to think about throughout the rest of this year and beyond. Last year Iwrote about general resilience, and how one of the common mistakes many organizations make is to think that resilience can be obtained by simply writing down plans and procedures on what to do and how to respond to specific events. Overall, as recent cyber events have shown us, there are potential problems with this approach. For example, most crises or significant events are unique, and if the organization can only respond to what is in a plan or procedure then the muscle-memory for the needed agility in response may not be there. In many ways, what we need are a set of foundational capabilities across prevention, detection, response and recovery that are continuously exercised and improved. As everyone is learning, scenario specific plans are necessary but real resilience comes from organization muscle-memory joined with continuously tested people, process and technology capabilities that can be adapted to meet any challenge.Zero trust was also a hot topic during this year’s event. Between the COVID-19 pandemic and recent cyber attacks, it’s promising to see that organizations everywhere are now realizing they need a comprehensive and modern zero trust access approach that removes overreliance on the network perimeter to protect themselves against a variety of threats. For Google, zero trust is more than a marketing buzzword or trend to attach to—it’s how we have operated and helped to protect our internal operations over the last decade with our BeyondCorp framework. We will continue to improve upon the industry standard with our lessons learned, so that other organizations can benefit from zero trust access platforms with BeyondCorp Enterprise and move toward a safer security posture. Ransomware: From Colonial Pipeline to JBS, rarely a day goes by without a new attack in the news. The reality is that many of these problems stem from a lack of rigor implementing a range of basic technology controls. We’re at an inflection point where both the private and public sector need to work together to prioritize the right defenses against these rising threats. We think it’s a mistake to assume one control or one product can be the solution to ransomware. Many organizations have started to realize you need an array of controls working together to create and sustain a defensible security posture. We recently highlighted our recommendations to protect against ransomware based on the National Institute of Standards and Technology (NIST) primary pillars for a successful and comprehensive cybersecurity program. Securing open source software: The Open Source team at Google recently announced an incredibly useful exploratory visualization site called Open Source Insights, which provides an interactive view of the dependencies, including first layer and transitive dependencies, of open source projects. This is an extremely important effort for the industry, especially as more and more organizations rely on open source software for critical aspects of their environments. While the benefits of open source software are clear, challenges persist.  Take for example the complexity of the supply chain; open source software projects often have many hundreds of dependencies. Open Source Insights gives developers a comprehensive visualization of a project’s dependencies and their properties and vulnerabilities. This includes interactive visualizations for developers to analyze transitive dependency graphs, and a comparison tool to highlight how different versions of a package might affect their dependencies by introducing or removing licenses, fixing security problems, or changing the packages’ own dependencies. While much more work and research is needed in this space, Open Source Insights is a critical step in helping secure the open source software supply chain.Click to enlargeThe EU Cloud Code of Conduct: While it went into force in 2018, the EU’s General Data Protection Regulation (GDPR) remains firmly top of mind as organizations use the cloud for processing of sensitive data. Providers like Google Cloud are often asked derivatives of the question “how can we be sure you’re taking appropriate measures to safeguard data under the GDPR.” We now have a definitive answer. The EU GDPR Cloud Code of Conduct(CoC) is a mechanism for cloud providers to demonstrate how they offer sufficient guarantees to implement appropriate technical and organizational measures as data processors under the GDPR. The Belgian Data Protection Authority, based on a positive opinion by the European Data Protection Board (EDPB), last month approved the CoC, a product of years of constructive collaboration between the cloud computing community, the European Commission, and European data protection authorities. This is the first European code approved under the GDPR; it is excellent news for the industry to have a new transparency and accountability tool that helps promote trust in the cloud. We are proud to say that Google Cloud Platform and  Google Workspace already adhere to these provisions.Spotlight on the Administration’s Executive Order on Cybersecurity The Presidential Administration’s recent moves in the Executive Order to shore up our nation’s cyber defenses is an important milestone for both public and private sector organizations. At Google, we are deeply committed to advancing cybersecurity issues and believe that government officials shouldn’t have to tackle these issues on their own. Importantly, the EO makes critical strides to help modernize government technology and advance security innovation as well as improve standards for secure software development. We’ve already shared our perspective with the government and will continue to advocate on these issues in the coming months. Modernization and security innovation: One of the most promising aspects of the government’s approach is to set agencies and departments on a path to modernize security practices and strengthen cyber defenses across the federal government. For too long, the public sector has tried to solve security challenges by spending more on security products, but as recent events have proved, spending billions of dollars on cybersecurity on an unmodernized IT platform is like building on sand. We strongly support this push towards modernization and agree with the government’s focus on making security simple and scalable, by default. Modernizing can not only build cybersecurity at a foundational level but also gives the federal government the opportunity to diversify their vendors, which can lead to improved resilience.Secure software development: Earlier this month Google participated in the NIST workshops and submitted position papers for how the industry can enhance software supply chain security. We believe that the government’s call to action on secure software development practices could bring about the most significant progress on cybersecurity in a decade and will likely have the biggest impact on the government’s risk posture in the long term. To further the adoption of supply chain integrity best practices, Google in collaboration with the OpenSSF has proposed Supply-chain Levels for Software Artifacts (SLSA) to formalize criteria around software supply chain integrity. We look forward to continuing to collaborate and engage with the Administration on this important work.Google Cloud Security highlights Google Cloud Named a Leader in Forrester Wave™: Unstructured Data Security Platforms: Providing effective controls to protect sensitive data in the cloud is a core part of our Google Cloud product strategy and unstructured data in particular can be challenging to secure. Given the importance of these capabilities to our customers, we were happy to see that Forrester Research named Google Cloud a Leader in The Forrester Wave™: Unstructured Data Security Platforms, Q2 2021 report. The report evaluated the 11 most significant providers with platform solutions to secure and protect unstructured data, spanning cloud providers to data security-focused vendors. Google Cloud rated highest in the current offering category among all the providers evaluated and received the highest possible score in sixteen criteria. A copy of the full report can be viewed here.Security benefits of a Data Cloud: Last month, we held our first Data Cloud Summit where we announced three new services as part of our database and data analytics portfolio to provide organizations with a unified data platform: Dataplex, Analytics HubandDatastream. Security professionals often default to using only security branded tools, but some of the best tools for security teams might be to use data and analytics products that are key to other business functions within the organization. Digital technologies like AI, ML and data can be used to power innovation, especially for security efforts. At Google, security is the cornerstone of our product strategy and our customers can take advantage of the same secure-by-design infrastructure, built-in data protection, and global network that we use to ensure compliance, redundancy and reliability.New features to secure your Cloud Run environments:  Cloud Run makes developing and deploying containerized applications easier for developers. We announced several new ways to help make Cloud Run environments more secure based on enhanced integrations with Secret Manager, Binary Authorization, Cloud KMS, and Recommendation Hub.Advanced counter-abuse and threat analysis features in Google Workspace:We continue to add controls and capabilities for Workspace admins to protect their users and organizations against threats and abuse. We recently added features that enrich security alerts with VirusTotal threat context and reputation data, enable blocking of abusive users and bulk removal content they’ve shared in Drive, and programmatic blocking third-party API access.That wraps up another month of thoughts and highlights. If you’d like to have this Cloud CISO Perspectives post delivered every month to your inbox, click here to sign-up.Next month, we’ll be busy hosting our first digital Security Summit where you can hear from industry leaders and engage in interactive sessions that can help you solve your most critical security challenges. Be sure to register and tune in to the great event we have planned!Related ArticleCloud CISO Perspectives: May 2021Google Cloud CISO Phil Venables shares his perspective on industry news as RSA 2021 approaches.Read Article
Quelle: Google Cloud Platform