What Is Kubernetes ????
Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation. Google open-sourced the Kubernetes project in 2014.
Why There Is Need To Use Kubernetes ??
Containers are a good way to bundle and run your applications. In a production environment, you need to manage the containers that run the applications and ensure that there is no downtime. Kubernetes provides you with a framework to run distributed systems resiliently. It takes care of scaling and failover for your application, provides deployment patterns, and more.
How IBM Takes Advantage Of Kubernetes:- For Building An Image Trust Service on Kubernetes
Problem:-
IBM cloud offers public, private & hybrid cloud functionality from it’s Function As A Service, managed kubernetes & Containers to cloud foundry platform as a service. power of the company’s enterprise technologies, such as MQ and DB2, its modern AI Watson, and data analytics services. Users of IBM Cloud can exploit capabilities from more than 170 different cloud native services in its catalog, including capabilities such as IBM’s Weather Company API and data services. IBM Cloud Container Registry team wanted to build out an image trust service.
How Kubernetes Helps:-
Portieris is a Kubernetes admission controller for enforcing content trust. Users can create image security policies for each Kubernetes namespace, or at the cluster level, and enforce different levels of trust for different images. Portieris is a key part of IBM’s trust story, since it makes it possible for users to consume the company’s Notary offering from within their IKS clusters. The offering is that Notary server runs in IBM’s cloud, and then Portieris runs inside the IKS cluster. This enables users to be able to have their IKS cluster verify that the image they’re loading containers from contains exactly what they expect it to, and Portieris is what allows an IKS cluster to apply that verification.
