// Topics / Containers

Containers

11 entries tagged “Containers”

Container Image Scanning Without the Security Theater July 11, 2022 · 3 min Most container scanning setups produce hundreds of unread findings. Scan in CI, rescan the registry, gate admission, and triage by exploitability. containers security ci-cd

Kubernetes Security Hardening: Pods, RBAC, Network, Secrets February 7, 2022 · 7 min Kubernetes defaults favor convenience over security. A layered hardening guide covering pods, RBAC, network policies, secrets, and the control plane. kubernetes security devops

Container Runtime Security: Seccomp, Network Policy, Falco November 30, 2020 · 8 min Image scanning tells you what's in the box; runtime security tells you what it's doing. How we lock down containers with seccomp, network policy, Falco. containers security kubernetes

Serverless vs Containers: Where the Math Stops Working June 22, 2020 · 5 min Lambda vs Fargate at different traffic levels, with mid-2020 prices: where serverless wins, where containers win, and where the cost crossover sits. cloud containers architecture

Container Security in 2018: PSP, Distroless, Image Signing August 20, 2018 · 3 min Eight months after my first container security post: PodSecurityPolicy, distroless images, image signing, and Vault at a fintech startup. security containers kubernetes

Two Years of Kubernetes in Production: The Boring Parts January 22, 2018 · 6 min Year two of running Kubernetes in production: network policies, DNS, resource requests, PodDisruptionBudgets, upgrades, and RBAC. kubernetes containers devops

Container Security Beyond the Basics: What We Hardened December 4, 2017 · 5 min Containers share the host kernel, so they aren't a security boundary. How we hardened images, runtimes, network policies, and RBAC at a fintech startup. containers kubernetes security

Kubernetes in Production: What Paid Off and What Bit Us January 16, 2017 · 6 min Running Kubernetes in production: what paid off, what bit us (networking, secrets, YAML sprawl), and who should adopt it. kubernetes containers devops

2016 in Review: The Year I Stopped Fighting Infrastructure December 28, 2016 · 4 min My 2016 in review: Docker went mainstream, Kubernetes pulled ahead, Go earned its place, serverless lagged, and what a mobility startup taught me. year-in-review trends engineering

Container Orchestration: Docker Swarm vs Kubernetes vs Mesos October 17, 2016 · 4 min Docker Swarm, Kubernetes, and Mesos compared side by side at a mobility startup in late 2016. Kubernetes will win, but its operational tax is real. containers kubernetes agents

Docker in Production: Lessons from Running Containers February 8, 2016 · 8 min What running Docker in production at a mobility startup taught us about image builds, tagging, networking, logs, resource limits, and non-root security. containers devops infrastructure