The latest News and Information on Containers, Kubernetes, Docker and related technologies.
While auditing the Kubernetes source code, I recently discovered an issue (CVE-2020-8566) in Kubernetes that may cause sensitive data leakage. You would be affected by CVE-2020-8566 if you created a Kubernetes cluster using ceph cluster as storage class, with logging level set to four or above in kube-controller-manager. In that case, your ceph user credentials will be leaked in the cloud-controller-manager‘s log.
Welcome to another monthly update on what’s new from Sysdig! This month, our big announcement was around CloudTrail and Fargate scanning support. CloudTrail support gives Sysdig Secure the ability to ingest CloudTrail events. These get fed into the runtime security engine, where rules can be created using the Falco rules language.
Both containers and virtual machines are virtual environments that comprise a number of computing components and are independent in nature, thereby allowing developers to scale applications in isolated runtimes. Both of these concepts aim at providing independent sets of resources to individual computing environments to ensure quick and reliable application performance.
The GitHub Container Registry has just been announced by GitHub and is supported natively on Codefresh like any other Docker repository. Codefresh provides multiple options to connect to Docker Container Registries, one of which is GitHub Container Registries. Currently, GitHub plans to include the GitHub Container Registry within the pricing model of GitHub packages. In comparison, Docker Hub has added rate limits to free accounts.