Protect Clusters by Applying Guardrails to Kubernetes Pods to Prevent Container Breakouts
Pods are the atomic unit of scheduling in Kubernetes and are the “workloads” responsible for running one or multiple containers. Those containers are where the applications themselves are run.
Without proper pod security, attackers can leverage workload vulnerabilities and misconfigurations to escape the container and obtain access to sensitive data such as Secrets, enabling misuse.
Kubernetes Pod Security Standards are a collection of practices that see to the careful control and restriction of these privileges in profiles that cover these known fields of privilege escalation. Nirmata provides these Standards as pre-built, tested, and validated Kyverno Kubernetes pod security policies which can be dropped in and activated quickly and easily.
Business Benefits of Pod Security
Nirmata makes it easy to enforce Kubernetes pod security and monitor compliance on any cluster, including managed Kubernetes providers with a shared responsibility security model. Nirmata provides a holistic platform for managing the security of Kubernetes environments in which Kubernetes Pods form a central pillar, through the use of pod security policies. Migrating from PSPs to Nirmata is easy so new Kubernetes versions can be used confidently.
With Nirmata you can:
- Ensure compliance with the official Kubernetes Pod Security Policy Standards across clusters and on any cloud.
- Perform granular checks on specific resources and images.
- Audit or enforce policy rules in K8s clusters or CI/CD pipelines.
- View reports and assign violations to teams.
- Provide granular exclusions based on a variety of conditions.
- Test resources against Kubernetes Pod Security Standards before deployment.
- Conveniently deploy pod security policies in one click.
