Kyverno

Nirmata Blog Sachin KubeCon24

Namespace-as-a-service: Self-service Kubernetes Deployments via GitOps

Introduction  Organizations are increasingly adopting Kubernetes, and efficiently segregating resources, managing privileges, and ensuring isolation between teams or projects becomes critical. Multi-tenancy offers a solution by enabling multiple teams to share a single Kubernetes cluster, with each team or project receiving a dedicated namespace. This…

0
What is policy-as-code? Nirmata answers here.

What Is Policy-As-Code? Top 10 Reasons Why Policy-As-Code Is Essential for Cloud-Native Success

What is Policy-as-Code? Policy-as-Code is the practice of defining and managing policies through code rather than through traditional manual processes. These policies can cover a wide range of areas, including security, compliance, and operational best practices. Policy-as-code enables automated policy enforcement, integration with CI/CD pipelines,…

0
nick pampoukidis t UV1rZqPuY unsplash

Using Policy-as-Code and Kyverno to Strengthen Governance and Security in Financial Institutions

In today’s rapidly evolving financial landscape, large institutions face the challenge of maintaining robust governance and compliance processes while fostering developer productivity and agility. The implementation of policy-as-code provides an effective solution to streamline these processes, enhance security posture, and ensure compliance standards. In this…

0
2024 1 30 nirmata opentofu linkedin v2

Securing OpenTofu (Infrastructure-as-Code) with Nirmata Powered by Kyverno

As Infrastructure as Code (IaC) continues to gain popularity among DevOps practitioners for its efficiency and scalability, the recent Terraform license ambiguity has prompted the emergence of alternative solutions. OpenTofu, marking its first stable release, enters the scene as a robust Infrastructure-as-Code tool, providing users…

0
Mitigating Kubernetes CVE 2024 7646 with Kyverno and Nirmata Policy Manager

Addressing the Latest Kubernetes NGINX Ingress Controller CVE-2024-7646 Vulnerability

A new Kubernetes vulnerability, CVE-2024-7646, has recently been identified and demands urgent attention from security professionals and DevOps teams. This vulnerability severely threatens the security of systems using the widely adopted ingress-nginx controller, potentially allowing attackers to bypass annotation validation and gain unauthorized access to…

0
Copy of Nirmata Blog Image Template Do Not Edit.pptx

Kubernetes Policy Driven Resource Optimization with Kyverno

Introduction As organizations increasingly turn to Kubernetes to deploy and manage containerized applications, they face unique challenges in efficiently allocating resources. The dynamic nature of Kubernetes often leads to inefficient defaults, underperforming applications, and inflated cloud bills. While Kubernetes and the CNCF ecosystem provide many…

0
HCS Blog Image 2

SecOps Automation in Openshift Clusters using Kyverno

Guest Contributors: Benoit Schipper (HCS), Marcel Booms (HCS) OpenShift’s Built-In Security Features OpenShift is renowned for its robust out-of-the-box security features, including Role-Based Access Control (RBAC), built-in network policies, and default admission controllers. These features collectively establish a secure default state for OpenShift clusters. However,…

0