// Topics / Containers

Containers

11 entries tagged “Containers”

Container Scanning Without the Security Theater July 11, 2022 · 4 min Most container scanning setups generate noise, not security. Here is how to build a pipeline that actually catches what matters. containers security ci-cd

Hardening Kubernetes: The Stuff That Actually Matters February 7, 2022 · 7 min Kubernetes defaults favor convenience over security. A layered hardening guide covering pods, RBAC, network policies, secrets, and the control plane. kubernetes security devops

Your Container Image Scan Passed. Now What? November 30, 2020 · 8 min Image scanning tells you what's in the box. Runtime security tells you what it's doing. How we lock down containers with seccomp, network policies, and Falco. containers security kubernetes

Serverless vs Containers: Where the Math Stops Working June 22, 2020 · 5 min Serverless is great until it isn't. A comparison of serverless and containers at different traffic scales, with actual numbers on where the economics flip. cloud containers architecture

Container Security in 2018: What Actually Changed August 20, 2018 · 3 min Eight months after my first container security post: what moved at the fintech startup and in the ecosystem — PodSecurityPolicy, image signing, scratch images. security containers kubernetes

Two Years of Kubernetes in Production — The Boring Parts Are the Hard Parts January 22, 2018 · 7 min Year two of Kubernetes at the fintech startup: networking, resource tuning, and the operational grunt work nobody blogs about. kubernetes containers devops

Your Containers Aren't Secure. Here's What to Actually Do About It. December 4, 2017 · 5 min Containers give you process isolation, not a security boundary. How we hardened images, locked down runtimes, and segmented networks at the fintech startup. containers kubernetes security

A Year Running Kubernetes in Production — What Actually Happened January 16, 2017 · 6 min After a year of Kubernetes in production: the wins are real, but the sharp edges drew blood first. What paid off, what bit us, and what I'd do differently. kubernetes containers devops

2016: The Year I Stopped Fighting Infrastructure December 28, 2016 · 5 min A personal look back at 2016 -- Docker going mainstream, Kubernetes momentum, Go adoption, and lessons from building at a mobility startup and a fintech startup. year-in-review trends engineering

Container Orchestration: Docker Swarm vs Kubernetes vs Mesos October 17, 2016 · 4 min Swarm, Kubernetes, and Mesos compared side by side after running all three at a mobility startup. Kubernetes is going to win, but the operational tax is real. containers kubernetes agents

Docker in Production: What We Learned Running Containers at Scale February 8, 2016 · 8 min Running Docker in production at a mobility startup forced us to get serious about image builds, networking, log aggregation, and security. What actually worked. containers devops infrastructure