Story Tag: kubesec

Stories Tag: kubesec

Kubernetes CVE, Symlink Exchange: Identify Containers Running as Root | by Fairwinds | uptime 99 | Sep, 2021 | Medium

admin 4 weeks ago in

Symlink Exchange Can Allow Host Filesystem Access A high severity security issue (CVE-2021–25741) was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files and directories outside of the volume, including on the host filesystem. While this vulnerability is rated a High Severity, it requires pre-existing permissions and access to exploit. As stated in the…

An Overview of the NSA Kubernetes Hardening Guide | by Fairwinds | Aug, 2021 | Medium

admin 2 months ago in

Earlier this month, the NSA released a number of recommendations for hardening Kubernetes clusters. The guide outlines a really strong defense-in-depth approach to ensure that when an attacker compromises your cluster, the blast radius will be as small as possible. The NSA Kubernetes hardening guide includes the following recommendations: Kubernetes is not secure out-of-the-box. By default, everything you deploy to your cluster is able to…

Top 5 Questions About Running Kubernetes Securely and Efficiently | by Fairwinds | Aug, 2021 | Medium

admin 2 months ago in

Since Kubernetes is still relatively new, there’s often not a lot of expertise within organizations. That means in many organizations, there are a lot of questions about implementing, securing, and optimizing Kubernetes. Recently, we ran a webinar to discuss how to run K8s securely and efficiently, and we had some great questions that we answered at the end. Often, the questions we get in our…

Validating Container Security with Fairwinds Insights | by Fairwinds | Aug, 2021 | Medium

admin 2 months ago in

Container security protects the integrity of containers, including the applications within them and the infrastructure they rely on. Containers make it easy to build, package, and deploy applications and services to different environments and deployment targets. Docker is a popular containerization technology, so it’s important to understand that Docker images are one of the easiest ways for vulnerabilities to enter your cluster. Containers are composed…

Discover the Top 5 Kubernetes Security Mistakes You’re (Probably) Making | by Fairwinds | uptime 99 | Aug, 2021 |...

admin 2 months ago in

It’s not an exaggeration to state that cloud native technology is revolutionizing how organizations are developing and delivering applications. As organizations increasingly adopt microservices and containers, many are turning to Kubernetes for container orchestration. Kubernetes controls both resource allocation and traffic management for cloud applications and microservices, providing critical capabilities for running applications in a 24×7 world. K8s enables auto-scaling, auto-recovery, and more. While the…

K8s Clinic: How to Run Kubernetes Securely and Efficiently | by Fairwinds | uptime 99 | Aug, 2021 | Medium

admin 3 months ago in

With the adoption of containers, software packaging is increasingly shifting left, which means (depending on your organization) that developers are taking on responsibility for the containerization of applications. Developers may also be responsible for some parts of Kubernetes configuration. As that process shifts left, developers need support to make the right decisions for the organization in order to run Kubernetes securely and efficiently. Many companies…

Why VPEs Need to Care About Kubernetes Configuration Audits | by Fairwinds | Aug, 2021 | Medium

admin 3 months ago in

As a Vice President of Engineering (VPE), you have a big job. You’re responsible for realizing your company’s vision by developing and managing the engineering team, spending your time ensuring that the team is shipping products on time, executing the product roadmap, and optimizing internal processes. Depending on the size of your organization, you may also manage cross-functional teams, such as design, QA, and front…

Enable Cloud Native Service Ownership | by Fairwinds | Jun, 2021 | Medium

admin 5 months ago in

The importance of cloud native service ownership starts with the consumer and meeting their expectations that a service will just simply work. That means whatever service you are providing must be reliable, it must be fast, and if there is downtime, it must be minimal. With full-service ownership, teams can improve accountability, reliability, and make continuous improvements to applications and services because any sufficiently large…

Never Should You Ever In Kubernetes Part 2: Kubernetes Security Mistakes | by Fairwinds | Apr, 2021 | Medium

admin 6 months ago in

As we outlined in our first post in this series, there are some things that you should simply never, ever do in Kubernetes. Corey Quinn, founder of Screaming in the Cloud and Chief Cloud Economist at The Duckbill Group, spoke with Kendall Miller, President of Fairwinds, and Stevie Caldwell, Senior Site Reliability Engineer at Fairwinds about a few things that development and operations teams should…

Kubernetes How to: Ensure imagePullPolicy set to Always | by Fairwinds | Dec, 2020 | Medium

admin 10 months ago in

Relying on cached versions of a Docker image can become a security vulnerability. By default, an image will be pulled if it isn’t already cached on the node attempting to run it. This can result in variations in images that are running per node, or potentially provide a way to gain access to an image without having direct access to the ImagePullSecret. For example, you…