{"id":35248,"date":"2019-02-19T17:03:08","date_gmt":"2019-02-19T15:03:08","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/?p=35248"},"modified":"2019-02-19T17:03:15","modified_gmt":"2019-02-19T15:03:15","slug":"docker-and-kubernetes-in-high-security-environments","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2019\/02\/19\/docker-and-kubernetes-in-high-security-environments\/","title":{"rendered":"Docker and Kubernetes in high security environments"},"content":{"rendered":"\n\n

“Docker and Kubernetes in high security environments<\/a>” is an interesting case-study from the Swedish Police Authority, on how to setup and maintain a high security configuration of Docker and Kubernetes.<\/p>\n\n\n\n

Not something that you’d think of on a daily basis, but a very handy guide for a weekend reading, or for a priority target scenario.<\/p>\n\n","protected":false},"excerpt":{"rendered":"\n

“Docker and Kubernetes in high security environments” is an interesting case-study from the Swedish Police Authority, on how to setup and maintain a high security configuration of Docker and Kubernetes. Not something that you’d think of on a daily basis, but a very handy guide for a weekend reading, or for a priority target scenario.<\/p>\n\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Docker and Kubernetes in high security environments #hosting #security #Docker #Kubernetes #containers","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_links_to":"","_links_to_target":""},"categories":[1,6,133,62,1334],"tags":[3420,3573,200,3104,2289],"keyring_services":[],"class_list":["post-35248","post","type-post","status-publish","format-standard","hentry","category-general","category-linux","category-sysadmin","category-technology","category-web-work","tag-docker","tag-kubernetes","tag-security","tag-virtualization","tag-web-hosting"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":35955,"url":"https:\/\/mamchenkov.net\/wordpress\/2019\/02\/24\/introduction-to-microservices-docker-and-kubernetes\/","url_meta":{"origin":35248,"position":0},"title":"Introduction to Microservices, Docker, and Kubernetes","author":"Leonid Mamchenkov","date":"February 24, 2019","format":false,"excerpt":"There is plenty of documentation, tutorials, and guides online, explaining Docker containers, Kubernetes container orchestration, and microservices. Here are a few that I found useful for the quick and simple introduction into these technologies and how to tie them together. Firstly, some basic 101s: Docker 101: Fundamentals & The DockerfileKubernetes\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/1xo-0gCVhTU\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":35245,"url":"https:\/\/mamchenkov.net\/wordpress\/2019\/02\/19\/kubernetes-kubeadm-and-the-aws-cloud-provider\/","url_meta":{"origin":35248,"position":1},"title":"Kubernetes, Kubeadm, and the AWS Cloud Provider","author":"Leonid Mamchenkov","date":"February 19, 2019","format":false,"excerpt":"Scott Lowe shares an updated setup of Kubernets on the Amazon AWS. This blog post covers some of the bits in Kubeadm, which have been updated and improved, since his previous post on the subject some time last year. If you are working with Amazon AWS, Kubernetes, Docker, VMWare, or\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":42635,"url":"https:\/\/mamchenkov.net\/wordpress\/2019\/05\/20\/container-misconceptions\/","url_meta":{"origin":35248,"position":2},"title":"Container misconceptions","author":"Leonid Mamchenkov","date":"May 20, 2019","format":false,"excerpt":"Ricard Bejarano points out a few container misconceptions. I particular like the bit about Swarm as a better option than Kubernetes for individual projects and small setups (1-2 nodes): Swarm\u00a0is Docker, Inc.'s orchestrator. It started development five years ago. It's built into the Docker Engine, which makes it the same\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":36991,"url":"https:\/\/mamchenkov.net\/wordpress\/2019\/03\/04\/how-to-bootstrap-kubernetes-the-hard-way\/","url_meta":{"origin":35248,"position":3},"title":"How to Bootstrap Kubernetes the hard way!","author":"Leonid Mamchenkov","date":"March 4, 2019","format":false,"excerpt":"In the \"How to Bootstrap Kubernetes the hard way!\" Yair Etziony shows how to setup a local Kubernetes cluster without using the tools like Minikube or Google Kubernetes Engine. He says it's probably somewhat more difficult in the beginning, but eventually provides better understanding and knowledge, especially so for those\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":36993,"url":"https:\/\/mamchenkov.net\/wordpress\/2019\/03\/04\/on-the-future-of-docker-containers-and-serverless\/","url_meta":{"origin":35248,"position":4},"title":"On the future of Docker, containers, and serverless","author":"Leonid Mamchenkov","date":"March 4, 2019","format":false,"excerpt":"I came across this blog post - \"Goodbye Docker and Thanks for all the Fish\" - which talks about the not-so-eminent, but very predictable death of Docker as both the technology, and the company. The gist of it is that container orchestration kicked in, and made Docker very replaceable with\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2019\/03\/Cloud-Has-Come-Of-Age.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2019\/03\/Cloud-Has-Come-Of-Age.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2019\/03\/Cloud-Has-Come-Of-Age.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2019\/03\/Cloud-Has-Come-Of-Age.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2019\/03\/Cloud-Has-Come-Of-Age.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":26677,"url":"https:\/\/mamchenkov.net\/wordpress\/2016\/09\/10\/stackoverflow-docker-vs-vagrant-with-project-authors-comments\/","url_meta":{"origin":35248,"position":5},"title":"StackOverflow: Docker vs. Vagrant, with project authors’ comments","author":"Leonid Mamchenkov","date":"September 10, 2016","format":false,"excerpt":"There is this discussion over at StackOverflow:\u00a0Should I use Vagrant or Docker for creating an isolated environment?\u00a0It attracted the attention of the authors of both projects (as well as many other smart people). \u00a0Read the whole thing for interesting insights into what's there now and what's coming. \u00a0If you'd rather\u2026","rel":"","context":"In "All"","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/35248","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/comments?post=35248"}],"version-history":[{"count":0,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/35248\/revisions"}],"wp:attachment":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/media?parent=35248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/categories?post=35248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/tags?post=35248"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/keyring_services?post=35248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}