Is It Safe to Run Internet-Facing and Database Pods on the Same Kubernetes Node?
Suppose an entire application stack runs on Kubernetes, with the database in one Pod and the web server in another Pod on the same node. The web server…
network policies
Is it insecure to run an internet-facing web Pod on the same node as the database?
Suppose an entire application stack runs on Kubernetes, with the database in one Pod and the web server in another Pod scheduled on the same node. The web…
What would you do differently when rebuilding a Kubernetes platform?
I've started a new role where our team is re-platforming the cloud infrastructure after inheriting some unusual design decisions, including separate VPCs for nearly every resource type and…
What Does It Actually Mean to Secure Kubernetes Pods?
I work in cloud infrastructure and often see customers place their clusters behind cloud-provider security services, vulnerability scanners, and network firewalls. I recently heard someone say that most…
How Can I Whitelist Client IPs with F5 Load Balancer and NodePort in Kubernetes?
I'm facing a networking issue in my Kubernetes cluster that hosts over 100 microservices, and I need some advice on how to handle client IP visibility and whitelisting.…
How should I use threat intelligence to update Kubernetes network policies without risking outages?
I'm working with real-time vulnerability feeds and considering automating the updates for my Kubernetes network policies or runtime security rules based on these alerts. What's the best way…
What are the best practices for securing multi-tenant Kubernetes clusters while using minimal images?
We're operating multiple tenants within the same Kubernetes cluster, and while using minimal images helps lessen vulnerabilities, I have concerns regarding how to ensure proper isolation between these…
How Can I Block Egress to the GCP Metadata IP for Most Pods in GKE?
I'm trying to figure out how to prevent the majority of my pods in a Google Kubernetes Engine (GKE) cluster from accessing the GCP metadata server's IP address…
How Can I Secure Pod-to-Pod Communication in a Kubernetes Setup?
I'm trying to figure out the best way to secure communication between pods in my Kubernetes setup. Do people usually set up truststores or keystores for each service…