Improving your applications’ security with Kubernetes
Applications running in containers offer many new different features. We can run multiple applications’ releases at a time in a host; they start and stop in seconds. We can scale components easily, and different applications can coexist without even interaction between them. An application’s resilience is also inherited from the container runtime features (exited containers autostarting).
However, we can also improve our applications by running them in Kubernetes. Each Kubernetes cluster is composed of multiple container runtimes running together and in coordination. Container runtimes isolate the hosts’ resources thanks to kernel namespaces and control groups (cgroups), but Kubernetes adds some interesting features:
- Namespaces: Namespaces are Kubernetes resources that group other resources and are designed to distribute Kubernetes resources between multiple users, grouped in teams or projects...
