By Lucas Palm 2 min read
April 6, 2021

Cluster image security enforcement is a new feature available today in our IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud offerings. 

Enabling image security enforcement in your cluster will provide you an easy way to ensure that the images running in your cluster meet specific security requirements set and controlled by you.

With image security enabled in your cluster, you can control where images are deployed from, enforce Vulnerability Advisor policies, ensure that content trust is properly applied to an image and more.

If an image does not meet your policy requirements, the pod is not deployed to your cluster or updated.

When you enable the image security feature in your cluster, you are getting a fully managed version of the open source Portieris project dedicated solely to your cluster.  This means that Portieris will receive the same high-availability benefits as your cluster masters do today. So, once enabled and configured to your liking, you can sit back and relax, knowing your cluster is protected at all times from undesirable images.

Availability

This feature is generally available today for the following cluster versions:

  • Kubernetes 1.18+
  • OpenShift 4.5+

Clusters at older versions will first need to upgrade to a supported version before you can enable image security.

Ready to get started?

Assuming your cluster is at a supported version level, enabling image security enforcement can be done in one easy step from the CLI or console. The installation documentation will walk you through this simple process.  

Once enabled, the next step would be to start creating image policies to control what images are allowed to run in your cluster. Image security policies define Portieris’ behavior in your cluster. You must configure your own policies in order for Portieris to enforce your required security posture.  

As an “out-of-the-box” bonus, the IBM-owned images we deploy into your cluster will already have the proper security enforcement applied to them, so all that is left for you to do is configure how you want your own images to behave.

Learn more about the IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud offerings.

Categories

Announcements  |  Cloud  |  cyber-security  |  Security  | 
Lucas Palm
Software Engineer

More from Announcements
September 21, 2023

IBM TechXchange underscores the importance of AI skilling and partner innovation

3 min read - Generative AI and large language models are poised to impact how we all access and use information. But as organizations race to adopt these new technologies for business, it requires a global ecosystem of partners with industry expertise to identify the right enterprise use-cases for AI and the technical skills to implement the technology. During TechXchange, IBM's premier technical learning event in Las Vegas last week, IBM Partner Plus members including our Strategic Partners, resellers, software vendors, distributors and service…

August 29, 2023

Introducing Inspiring Voices, a podcast exploring the impactful journeys of great leaders

< 1 min read - Learning about other people's careers, life challenges, and successes is a true source of inspiration that can impact our own ambitions as well as life and business choices in great ways. Brought to you by the Executive Search and Integration team at IBM, the Inspiring Voices podcast will showcase great leaders, taking you inside their personal stories about life, career choices and how to make an impact. In this first episode, host David Jones, Executive Search Lead at IBM, brings…

August 18, 2023

IBM watsonx Assistant and NICE CXone combine capabilities for a new chapter in CCaaS

5 min read - In an age of instant everything, ensuring a positive customer experience has become a top priority for enterprises. When one third of customers (32%) say they will walk away from a brand they love after just one bad experience (source: PWC), organizations are now applying massive investments to this experience, particularly with their live agents and contact centers.  For many enterprises, that investment includes modernizing their call centers by moving to cloud-based Contact Center as a Service (CCaaS) platforms. CCaaS solutions…

August 2, 2023

See what’s new in SingleStoreDB with IBM 8.0

3 min read - Despite decades of progress in database systems, builders have compromised on at least one of the following: speed, reliability, or ease. They have two options: one, they could get a document database that is fast and easy, but can’t be relied on for mission-critical transactional applications. Or two, they could rely on a cloud data warehouse that is easy to set up, but only allows lagging analytics. Even then, each solution lacks something, forcing builders to deploy other databases for…