Author: Gary Duan
By:
April 7, 2021 10:35 am
1,109 viewsGoodbye Kubernetes Pod Security Policy. Hello stronger security!
Kubernetes' Pod Security Policy (PSP) is going to be deprecated in 1.21 and totally removed in 1.25. The PSP function determined how Kubernetes allowed users to define a set of criteria that a running pod had to meet. These criteria typically included the configurations and privilege of the pod. If the criteria could […]
Tags: container security, container security, Kubernetes, Kubernetes Security
Categories: Security, SUSE NeuVector
By:
July 30, 2020 11:58 am
1,726 viewsHow to Enforce Egress Container Security Policies in Kubernetes, OpenShift, and Istio
Prevent Data Breaches and Unauthorized External Connections from Container Clusters with Egress Control
By Gary Duan
While more and more applications are moving to a microservices and container-based architecture, there are legacy applications that cannot be containerized. External egress from a container cluster to these applications needs to be secured with egress container security policies […]
Categories: Uncategorized
By:
July 9, 2020 12:04 pm
894 viewsUse Cloud-Native Tools OPA and CRD to Protect Applications from Pipeline to Production
Application owners and IT administrators have been looking for tools that can help them secure their application pipeline, from the development stage to deployment and production. How to do this reliably and efficiently without slowing down development processes remains a big challenge. This is where Open Policy Agent (OPA) and Kubernetes Custom Resource Definitions (CRD) […]
Tags: cloud security, run-time, security automation, Vulnerabilities
Categories: SUSE NeuVector, SUSE NeuVector
Social Media
Run SAP
SUSE for Public Cloud
Security
