Showing posts from October 20, 2015

Compute User Accounts in Google Cloud Platform.

Complex identity tasks are not tolerated in our cloud and data-driven age where security is a game-changer. For those who are not familiar, recalls that, managing administrators' SSH access to VMs is a complex identity task that could be hard to make secure.

Henceforth, on Google Cloud Platform with the launch of Compute User Accounts (in beta); you can use the setup steps to enable the Cloud User Accounts API and create VMs.

That means that you can inter alia: Create VM accounts and groups just once to be used on all the VMsGrant users SSH access and the ability to rotate keys without providing full project editor/owner rightsView at a glance the VM accounts and keys in your projectBe sure that all accounts on VMs will be disabled when the Google ID owning them is deleted or disabled. This means when an employee leaves the company, they'll no longer be able to SSH into your VMs.

Security Enhanced Linux (SELinux) in our container technologies age.

We are still at the early stage when it comes to streamline the security around containers. But it is important to recall that, Containers ease the deployment and management of applications and their dependencies.
One can then observe that, this isolation can prevent code within a container from interacting with code in other containers, resulting in an increase in security compared to running multiple non-containerized applications on the same system. 
However, various bugs have allowed applications to escape from this environment of isolation and interfere with other containers. 
Technologies such as seccomp (a “secure computing” mechanism) reduce the number of system calls available to containerized applications and thus make it more difficult for exploitation of these bugs.
Security Enhanced Linux (SELinux) is a Linux kernel feature that allows for restrictions to be applied to application permissions. Each process has an associated context, and, a set of rules defines the interaction…

Install Kubernetes on AWS (Amazon Web Service) and automating your cluster deployment.

Streamlined and secure experiences around and inside container technologies including inter alia: Kubernetes on AWS are recommended by, in our digital age where the container industry transform how developers and enterprises build, run, scale and monitor apps in real-time and anywhere.
CoreOs has released an official CloudFormation for launching Kubernetes on AWS, as well as kube-aws, a tool that assists in automating your cluster deployment and can make it easy to configure end-user tools like kubectl. salutes this momentum that is officially supported via Tectonic. You can see official CoreOS documentation for full detailsHere!