GitOps Security with k8s-security-configwatch
the k8s-security-configwatch GitHub Action, an open source tool from Sysdig, secures your GitOps workloads by detecting changes on your Kubernetes security configuration.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on Containers, Kubernetes, Docker and related technologies.
Enhancing Kubernetes Security with Pod Security Policies, Part 1
Kubernetes Pod Security Policies (PSPs) are a critical component of the Kubernetes security puzzle. Pod Security Policies are clusterwide resources that control security sensitive attributes of pod specification and are a mechanism to harden the security posture of your Kubernetes workloads. Kubernetes platform teams or cluster operators can leverage them to control pod creation and limit the capabilities available to specific users, groups or applications.
March 2020 Online Meetup: Automating K3s Cluster Upgrades
While developing K3s to run at the edge we had to change our assumptions about how to manage these clusters at scale. A key assumption in a data center is that you have stable network connectivity, but this may not be true at the edge. You may have unreliable cellular service or limited time during the day in which you can connect. In these environments, operations such as upgrading Kubernetes or patching an operating system require a different paradigm.
Kubernetes on AWS: EKS vs Kops
There are three popular methods for running Kubernetes on AWS: manually set up everything on EC2 instances, use Kops to manage your cluster, or use Amazon EKS to manage your cluster. Managing a Kubernetes cluster on AWS without any tooling is a complicated process that is not recommended for most administrators, so we will focus on using EKS or Kops. In this blog post, we compare cluster setup, management, and security features for both Kops and EKS to determine which solution you should use.
Kubernetes Master Class: How to implement Network Policy to secure your cluster
By default, pods are non-isolated; they accept traffic from any source. The Kubernetes solution to this security concern is Network Policy that lets developers control network access to their services. Rancher comes configured with Network Policy using Project Calico which can be used to secure your clusters. This class will describe a few use cases for network policy and a live demo implementing each use case.
Qovery permet de simplifier l'utilisation du Cloud pour les développeurs
Ce lundi 2 mars 2020, Manon Gazzotti, analyste chez X Ange, Clara Audry, Associée chez Cap Horn, Romaric Philogène, CEO & Co-fondateur de Qovery, et Pascal Ghoson, Co-fondateur de Findrive, se sont penchés sur les spécificités de Qovery et de Findrive dans l'émission Tech
Extend Fortinet FortiGate to Kubernetes with Calico Enterprise 2.7
We are excited to announce the general availability of Calico Enterprise 2.7. With this release, Fortinet’s 400,000 customers can use FortiGate to enforce network security policies into and out of the Kubernetes cluster as well as traffic between pods within the cluster.
Introduction to Helm 3 the Package Manager for Kubernetes
Helm is the package manager for Kubernetes (like yum, apt and home brew ) that allows easily package, configure, and deploy applications onto Kubernetes clusters. Helm charts are packages (like debs and rpms) It contains pre-configured kubernetes resources such as ConfigMaps, Deployments ,StatefulSet manifests, PersistentVolumes and editable settings for them.
Kubernetes Master Class: Find Security Vulnerabilities in your Kubernetes Cluster
Security is one of the most talked-about topics for Kubernetes users. Google “Kubernetes security” and you'll find a huge number of articles, blogs and more. The reason is simple: you need to align your container and Kubernetes security with your organization’s existing security profile.
The GitOps Kubernetes Connection
In the first article in this series, we talked about making Kubernetes essential to your DevOps pipeline. We reviewed CI/CD and DevOps and why their relationship with Kubernetes is so powerful. In this article, I’m going to dive into another term in the application development and management mix: GitOps. We’ll cover what GitOps is, how it affects an organization and how it aligns with Kubernetes.