An introduction to GitOps and Argo
Guest post originally published on the InfluxData blog by Charles Mahler In an ideal world, developers would be able to release new products and features from development environments into production extremely fast while also not having…
Project post originally published on the Flux Blog by Priyanka Ravi and Daniel Holbach This is the first blog post in a series where we want to shine a light on projects in the Flux Ecosystem. This…
10 ways to make your software pipeline more observable
Guest post originally published on the Cloudsmith blog by Ciara Carey Ciara lists 10 ways to make your software pipelines more transparent and observable to gain insights, identify unusual behavior and possibly prevent a software supply…
An open source policy engine that automates remediation: Polaris
Guest post by Robert Brennan, VP of product development, Fairwinds Polaris is an open source policy engine that runs dozens of checks to ensure that your Kubernetes pods and controllers are configured using best practices in…
Protect the pipe! Secure CI/CD pipelines with a policy-based approach using Tekton and Kyverno
Guest post originally published on the Nirmata blog by Jim Bugwadia of Nirmata and Shripad Nadgowda a Cloud Architect at Intel Rise of software supply chain attacks In the last few years there has been a…
Flux August 2022 project update
Project post originally published on the Flux blog by Daniel Holbach As the Flux family of projects and its communities are growing, we strive to inform you each month about what has already landed, new possibilities…
Securing Kubernetes cluster using Kubescape and kube-bench
Guest post originally published on InfraCloud’s blog by Amar Chand With businesses adopting cloud native technology, Kubernetes has emerged as a primary tool of choice for container orchestration. Deploying and managing applications has never been easier….
What can Confidential Computing do for the Kubernetes community?
Guest post originally published on the Edgeless Systems blog by Fabian Kammel, Senior Security Engineer This is a summary of the talk I gave at the Kubernetes Community Days (KCD) Berlin 2022. Both, the slides and a recording…
Project post by KubeEdge maintainers The security of cloud native edge computing has been of concern to many users. It was difficult for users to perform effective security hardening on their edge systems due to no…
2022 Argo external security audit: Lessons learned
Project post cross-posted from the Argo Blog by Michael Crenshaw In early 2022, the Argo team and CNCF began work with Ada Logics to perform a security audit on the four Argo projects. Ada Logics discovered…