HOW TO Stop Running Containers as Root
Running containers as root is a bad idea for security. This has been shown time and time again. Hackers find new ways of escaping out…
devops
Leveraging Kubernetes to Run Databases, Message Queues, and In-Memory Caches: How We Built a Truly Portable Platform
We increasingly meet CTOs and cloud architects in need of a secure platform that can run on multiple clouds or on-premise to meet customer requirements.…
Istio and OAuth2-Proxy in Kubernetes for Microservice Authentication
HOWTO use Istio and OAuth2-Proxy to secure all your micro-service endpoints in a centralized and easily managed way on Kubernetes.
How to Do Vulnerability Management via Image Scanning in Harbor
Container images are software time capsules. Intentionally immutable by design, they will not get security updates automatically. Doing this task that is crucial to security…
The Challenges of Availability Zone Outages
AWS recently had an outage of one of their availability zones in their US East region. The outage took down parts of popular services such…
Using Lens with Compliant Kubernetes
Get a graphical user interface with a great overview and discoverabilty by using Lens with your Elastisys Compliant Kubernetes clusters.
Access control via OpenID Connect (OIDC)
This blog post gets hands-on about access control, including everything from the difference between authentication and authorization, how this works in a couple of CNCF…
Enforcing Policy as Code using OPA and Gatekeeper in Kubernetes
Enforcing organizational policies on a Kubernetes cluster allows you to be in control of the resources being deployed. For example, you can prevent deploying non-vetted…