Kubernetes

Using App ID to secure Docker and Kubernetes applications

So, you have a server side Java application and you need to be able to authenticate your users without the hassle? Then App ID is for you. There's no easier way to create a scalable app than to use the nimble IBM WebSphere Liberty application server in a Docker image and run it with IBM Cloud Container Service.

Continue reading

Webinar: Monitoring and Logging Kubernetes Clusters

Watch a demo on how to leverage Sematext and IBM Cloud Container Service for faster, more efficient DevOps. Sematext offers the platform that eliminates the chasm between performance monitoring and logs while IBM Cloud Container Service builds on Kubernetes for advanced capabilities. This enables DevOps and modernizing traditional apps, as well as simplifying security, scale and infrastructure management. This demo will take you through the whole process […]

Continue reading

Kubernetes Container Security with NeuVector on IBM Cloud Container Service

In this blog post we discuss how NeuVector integrates with IBM Cloud Container Service to provide complete run-time container security for your production Kubernetes workloads. We are excited to partner together to demonstrate how quickly and easily users can deploy a Kubernetes cluster in IBM Cloud and then secure those workloads in this new and ever-changing container and microservice world.

Continue reading

Turn-key Kubernetes with data visualization and analytics

There are many reasons why you might choose Kubernetes as your platform for hosting your application(s). In Cloud Foundry, for each application, the platform provides the isolation, OS, runtime, networking and management capabilities. This opinionated environment is ideal for some use cases. Kubernetes provides similar capabilities but gives you the control of the OS, runtime, networking rules of each service, communication between services in your cluster and more.

Continue reading

Use IBM Cloud Certificate Manager with IBM Cloud Container Service to deploy custom domain TLS Certificates

We are excited to announce that IBM Cloud Container Service is now integrated with IBM Cloud Certificate Manager! This means that you can easily and securely deploy custom domain TLS certificates from Certificate Manager to your Kubernetes Cluster.

Continue reading

Supported Kubernetes versions in IBM Cloud Container Service

We are excited to announce the availability of Kubernetes v1.9.1 for your clusters that are running in IBM Cloud Container Service. With the container service, you can easily upgrade your clusters without the need for deep Kubernetes knowledge. When you deploy new clusters, the default Kubernetes version is now v1.8.6, or you can choose to immediately deploy v1.9.1.

Continue reading

Taking action to secure our IBM Cloud Container Service against recent Spectre and Meltdown security vulnerabilities

We’re taking action to secure our IBM Cloud Container Service against the recent Spectre and Meltdown security vulnerabilities. We’ve been working closely with our vendors and IBM Cloud Infrastructure teams concerning the security vulnerability announced on January 3, 2018. This vulnerability has the potential to allow those with malicious intent to gather sensitive data from computing devices. Intel believes these exploits do not have the potential to corrupt, modify, or delete data.

Continue reading

Connecting your Kubernetes cluster to on-premises resources

Writing microservices in containers and deploying them to a Kubernetes cluster running on IBM Cloud is a great way to create greenfield applications. Frequently you'll also have mountains of useful data hosted by on-premises systems. What if you can’t migrate this data to the cloud due to compliance reasons, but you still want to allow your new microservice application to leverage it?

Continue reading

Bring your own private IP addresses to the cloud using IBM Container Service

In our previous series on Kubernetes and the IBM Container Service, we learned how to deploy and secure container-based workloads on the IBM Cloud. Of course, not all applications and services are meant to be consumed by the public internet in general, so in this post, we will discuss how to expose these services to an on-premises network, accessible only through a VPN tunnel.

Continue reading