April 6, 2021 By Lucas Palm 2 min read

Cluster image security enforcement is a new feature available today in our IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud offerings. 

Enabling image security enforcement in your cluster will provide you an easy way to ensure that the images running in your cluster meet specific security requirements set and controlled by you.

With image security enabled in your cluster, you can control where images are deployed from, enforce Vulnerability Advisor policies, ensure that content trust is properly applied to an image and more.

If an image does not meet your policy requirements, the pod is not deployed to your cluster or updated.

When you enable the image security feature in your cluster, you are getting a fully managed version of the open source Portieris project dedicated solely to your cluster.  This means that Portieris will receive the same high-availability benefits as your cluster masters do today. So, once enabled and configured to your liking, you can sit back and relax, knowing your cluster is protected at all times from undesirable images.

Availability

This feature is generally available today for the following cluster versions:

  • Kubernetes 1.18+
  • OpenShift 4.5+

Clusters at older versions will first need to upgrade to a supported version before you can enable image security.

Ready to get started?

Assuming your cluster is at a supported version level, enabling image security enforcement can be done in one easy step from the CLI or console. The installation documentation will walk you through this simple process.  

Once enabled, the next step would be to start creating image policies to control what images are allowed to run in your cluster. Image security policies define Portieris’ behavior in your cluster. You must configure your own policies in order for Portieris to enforce your required security posture.  

As an “out-of-the-box” bonus, the IBM-owned images we deploy into your cluster will already have the proper security enforcement applied to them, so all that is left for you to do is configure how you want your own images to behave.

Learn more about the IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud offerings.

More from Announcements

Success and recognition of IBM offerings in G2 Summer Reports  

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories.   This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.”  With over 90 million visitors each year and hosting more than 2.6…

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

3 min read - Security operations is getting more complex and inefficient with too many tools, too much data and simply too much to do. According to a study done by IBM, SOC team members are only able to handle half of the alerts that they should be reviewing in a typical workday. This potentially leads to missing the important alerts that are critical to an organization's security. Thus, choosing the right SIEM solution can be transformative for security teams, helping them manage alerts…

Reflecting on IBM’s legacy of environmental innovation and leadership

4 min read - Upholding a legacy of more than 50 years of environmental responsibility through our company’s actions and commitments, IBM continues to be a leader in driving sustainability for our business, our communities and our clients—including a 34-year history of annual, public environmental reporting, which we continue today. As a hybrid cloud and artificial intelligence (AI) company, we believe that leveraging technology is key to unlocking impact, and it will play a substantial role in how society addresses, adapts to, and overcomes…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters