Kubernetes security: New tech, familiar attack vectors

Source:-enterprisersproject.com With Kubernetes, some old threat vectors may feel new again. Kubernetes security experts say misconfigured settings and privilege mistakes are examples that can open up risk. Mind these six items To call Kubernetes “new” is increasingly a misnomer: July 15, 2020, will mark the five-year anniversary of version 1.0 of the CNCF open source project. But it’s still plenty new to many teams and individual practitioners, with a corresponding learning curve about how to take appropriate measures to secure

Read more

4 Kubernetes security challenges and how to address them

Source:-techbeacon.com The widespread use of Kubernetes is testament to enterprises’ faith in their ability not just to handle the complexity of modern app development and modernization initiatives, but to do so at scale. According to a recent survey of 1,340 technical experts in companies of all sizes, conducted by the Cloud Native Computing Foundation (CNCF), 78% of respondents are using the open-source container orchestration tool in production. This is up from just 58% last year. But while Kubernetes is one

Read more

Couchbase goes cuckoo for Kubernetes with v2.0 release of Autonomous Operator

Source:-theregister.co.uk NoSQL or open source, databases cannot help but be drawn to Googly cloud container orchestration system The latest release from Couchbase finally includes support for Kubernetes, which is becoming something of a de facto standard among databases. Couchbase is a NoSQL database of the document-oriented kind, used by global players such as airline ticketing company Amadeus, American Express, Cisco and eBay. The Autonomous Operator for Kubernetes 2.0 is designed to allow developers and database managers to deploy Couchbase in

Read more

OPENSHIFT, KUBERNETES, AND THE HYBRID CLOUD

Source:-nextplatform.com For all the talk of cloud computing for the past decade and a half, for all the growth that the hyperscale public cloud providers like Amazon Web Services, Microsoft Azure and Google Cloud have undergone in recent years, these are still the early days of the cloud. The bulk of workloads still live in the on premises datacenters of tens of millions of enterprises worldwide. And for any number of reasons, ranging from ongoing security or compliance concerns or

Read more

Container security meets Kubernetes: What IT pros need to know

Source:-techrepublic.com Docker brought containers into the enterprise; static scanning makes sure they are secure when the images are created. Who watches them when they run? Docker made it possible to have an exact copy of the core elements of the operating system and the application code in a single, manageable file. BusyBox, the simplest production-ready Docker image, is only 2.1MB. That is small enough to check into version control and small enough to copy around on the network. It’s small

Read more

How and when to use operators in Kubernetes

Source:-techrepublic.com Operators simplify application in Kubernetes. Do you really need yet another layer of management, and should you write your own? Here are your options. In Kubernetes terms, an operator is a piece of software designed to run routine operations for specific pieces of software on a Kubernetes cluster. The name comes from human operators, which used to be an actual job. When I was graduating college, I interviewed for a position as a computer operator. While all positions in

Read more

Kong for Kubernetes 0.8 Ingress Controller Released

Source:-infoq.com Kong Inc. released Kong for Kubernetes version 0.8 – a Kubernetes Ingress controller that works with the Kong API Gateway. The release adds Knative integration, a new cluster level Custom Resource Definition, and annotations to minimize configuration. The Kong Gateway is an open source API gateway built on top of NGINX. The Kong for Kubernetes product is composed of two parts – “a Kubernetes controller, which manages the state of Kong for K8S ingress configuration, and the Kong Gateway,

Read more

Why Kubernetes Needs More Network Visibility And Protection

Source:-informationsecuritybuzz.com Kubernetes’ popularity has skyrocketed. In 2018, Forrester declared it the victor in the “war for container orchestration dominance”. However, a 2019 Gartner report highlights both the immaturity of the container ecosystem and a general lack of operational best practice. Another issue is that Kubernetes adoption can significantly increase both internal application and associated management-related traffic. This is because it is designed to use small detached chunks of an application that communicate using a company’s internal network (including internal cloud

Read more

NetApp Architects Application-Integrated Data Management for Kubernetes with Project Astra

Source:-martechseries.com NetApp introduces vision for enterprise-class data services for stateful, cloud-native applications with any Kubernetes distribution on any cloud NetApp, the leader in cloud data services, introduced Project Astra, a vision for a software-defined platform that is currently in development with the Kubernetes community. Project Astra will deliver the industry’s most robust, easy-to-consume, enterprise-class storage and data services platform for Kubernetes that enables both application and data portability for stateful applications. Marketing Technology News: IDC Publishes Future of Customers and

Read more

Alcide’s New sKan Command Line Tool Scans Kubernetes Deployment Files

Source:-infoq.com Alcide, a Kubernetes security platform, has announced the release of sKan, a command line tool that allows developers, DevOps and Kubernetes application builders access to the Alcide Security Platform. sKan enables developers to scan Kubernetes configuration and deployment files as part of their application development lifecycle including CI pipelines. Developers can scan their Kubernetes deployment files, Helm charts or Kustomized resources. Alcide is a Kubernetes-native AI-driven security platform for cross Kubernetes aspects such as configuration risks, visibility across clusters,

Read more

NetApp’s Project Astra Aims To Unite Persistent Storage, Kubernetes

Source:- Project Astra is targeted at what NetApp called a big drawback to increased adoption of Kubernetes, namely the lack of persistent storage as containerized applications and data are moved between devops through production or between clouds and on-prem. NetApp on Wednesday unveiled a new initiative aimed at bringing enterprise-class storage services to the Kubernetes container platform as a way to manage applications and data as they move between on-premises and multi-cloud environments. The initiative, named Project Astra, is not

Read more

Circonus Announces Availability of Spring 2020 Release with Kubernetes and Cloud Monitoring

Source:-dbta.com Circonus, provider of a machine data intelligence platform, has announced its Spring 2020 release. The release includes a Kubernetes monitoring solution that provides health-based alerting and horizontal pod auto-scaling, cloud monitoring, GCP Marketplace availability, performance improvements, and a more comprehensive Terraform integration. With these latest enhancements, Circonus says the solution can collect and analyze IT infrastructure, application, and container data at extreme scale across cloud, on-prem, and hybrid deployments in one platform. “Unlike traditional monitoring tools, the Circonus machine

Read more

Kubernetes 1.18 adds more power, addresses shortcomings

Source:-theserverside.com Kubernetes is no doubt a powerful technology, but it has its shortcomings. For example, debugging under Kubernetes has always been a challenge. When it started out, Kubernetes was intended to run on Linux systems, and running Kubernetes under Windows has yet to achieve its full potential. Also, there are still troubles with how to manage unintended changes that that could corrupt an entire Kubernetes cluster. Kubernetes 1.18 promises to provide several features that will address these shortcomings. Let’s look

Read more

Go Beyond Default Kubernetes Configs for Greater Security

Source:-containerjournal.com Some organizations might be inclined to go with Kubernetes’ default configurations with the hope that these settings will provide a reasonable degree of security. But that wouldn’t be a good idea; on the contrary, organizations could actually put themselves at risk by implementing default settings in their Kubernetes environments, as these standard options don’t elevate security to where it needs to be. Fortunately, organizations can address these shortcomings by choosing some custom settings that provide them and their data

Read more

VMware Delivers More Tanzu Services for Kubernetes

Source:-containerjournal.com VMware has moved its effort to embrace Kubernetes forward by making elements of its Tanzu portfolio of services for building, deploying and managing applications in Kubernetes environments more broadly available. Tanzu Kubernetes Grid, which provides a service for managing any distribution of Kubernetes, is now generally available along with version 1.7 of Tanzu Kubernetes Grid Integrated Edition, formerly known as the VMware Enterprise PKS distribution of Kubernetes. Version 2.9 of Tanzu Application Service, a runtime environment for Java, .Net

Read more

Kubernetes architecture for beginners

Source:-enterprisersproject.com Getting started with Kubernetes? Check out this quick primer on Kubernetes architecture basics and key facts to know at the outset Kubernetes’ reputation as a powerful platform, especially for cloud-native applications, is deserved. It offers a rich, flexible set of capabilities. This reputation also includes a learning curve that can be steep for beginners, especially if you’re trying to go it your own way with the open source platform. “Kubernetes is deceptively simple to set up initially, but then

Read more

HOW TO MANAGE SECRETS IN KUBERNETES

Source:-analyticsindiamag.com Kubernetes is currently the de-facto standard for container orchestration. As organizations globally are adopting a Container first development approach, a large part of existing workloads is still running on virtual machines, be in the public cloud or a private data centre. Hence a lot of companies are now facing severe challenges in migrating from their old methods to Kubernetes. However, there are times when you want bake-in sensitive secret information into your Kubernetes cluster and share it across when

Read more

Identifying risk when executing your Kubernetes migration

Source:-armory.io Software continues to “eat the world”, and organizations are struggling to keep up. With the increasing pace of business and consumer expectations, enterprises in the Global 2000 are undertaking costly “digital transformations” to stay competitive. When speaking to bank executives, they’ll tell us, “We’re not a bank; we’re a software company that specializes in finance.” When speaking to retail executives, they’ll tell us, “We’re not a shoe company; we’re a software company that specializes in shoes.” Digital transformation is

Read more

Observability: Solving The Hidden Cost of Kubernetes Applications

Source: containerjournal.com Kubernetes, in many ways, has allowed software organizations to realize the benefits of microservices by providing a convenient and powerful abstraction for deploying, scaling and running distributed software systems. Those benefits, however, have come at a cost for traditional software operations. Indeed, as microservices have grown in complexity and scale, teams have often struggled to adapt to the hidden costs that these powerful new technologies have uncovered—spiraling monitoring costs, misunderstanding or not understanding service dependencies, the creation of

Read more

2020 Cloud Foundry Platform Certification Now Includes Option for Architecture To Bring Ease of Cloud Foundry Developer Experience to Kubernetes Users

Source:-aithority.com Cloud Foundry Foundation, home to open source projects simplifying the developer experience, announced that Atos, Cloud.gov, IBM, SAP, SUSE, Swisscom, and VMware have renewed their Cloud Foundry Platform Certification for 2020. The updated version of the Platform Certification now allows providers to choose either Diego, the more recently developed Kubernetes-based Eirini, or both, as the internal product architecture for the container orchestration layer. Cloud Foundry Platform Certification ensures consistency of the cloud application platform and portability across any cloud

Read more
1 2 3 4 5 6 14