Name: Kubernetes security best practices
Start: 2023-02-03T00:52:00Z
End: 2023-02-03T00:53:00.000Z
Location: BrightTALK
Rating: 5

Spectro Cloud uniquely enables organizations to manage Kubernetes in production, at scale. Our Palette management platform gives effortless control of the full Kubernetes lifecycle, across clouds, data centers, bare metal and edge environments.

As a retailer, you know all too well the value edge computing promises for all kinds of use cases — many of which can now be supercharged with the addition of AI models right in the store or warehouse, built on the familiar foundation of Kubernetes and cloud-native development.

If your edge initiatives have kicked into high gear this year, you’ve probably already started planning for the many challenges you’ll face. Edge computing presents unique security risks, and requires a whole new approach to managing the hardware and software stack throughout its lifecycle. 

Join us for this webinar to hear the latest insights and best practices from edge computing veterans from CDW’s retail team and the edge Kubernetes ninjas at Spectro Cloud. We’ll cover:

- The most impactful use cases for AI-powered retail edge in 2024, from video monitoring to supply chain management
- Top operational considerations for your edge computing project, including how to minimize the cost of field engineering, assure availability, and protect your data and proprietary models
- Approaches to managing edge computing deployments in retail locations with limited connectivity or even in air gapped sites

You’ll take away real examples and hard-earned best practices that you can put to work immediately in your projects. And if you need a shortcut to edge success, we’ll also share how CDW’s services, plus Spectro Cloud’s Palette Edge management platform, can help you get started.

Retail edge computing: Unlocking value with Kubernetes and AI

Last year Broadcom’s acquisition of VMware created turmoil in the industry as Broadcom set about transforming VMware’s product portfolio, pricing, and even channel partnerships.

Enterprises are naturally wondering about the macro impact on virtualization as a computing paradigm — is it time to look for another vSphere, or to jump ship to new generations of containers and bare metal?

But many are also more critically looking for practical guidance about alternative solutions and strategies that they can investigate in the short and medium terms.  

In this webinar, Jeremy Oakey from Spectro Cloud will sit down with Jared Cheney from SoftwareONE to: 
- Recap the current state of play and what they’re hearing from customers and partners on one of the hottest topics in the industry. 
- Share perspectives on the impact the Broadcom acquisition is having on enterprises
- Explore how Kubernetes and cloud native come into the mix, using real, tangible stories from the “field”.

Whatever your level of commitment and investment to VMware, don’t miss this opportunity to consider the big picture and guide your strategy in the right direction.

After VMware… What’s next?

Broadcom’s takeover of VMware has caused chaos in the world of application infrastructure — but if (like many platform engineering teams) you’re already committed to being container-first and cloud native, the disruption is just validation that you already made the right decision.

Still, VM workloads aren’t going away, whether in the cloud and data center, or even at the edge. 

You know that you’re not looking for another vSphere to migrate to. But what if you could bring those VMs into Kubernetes and run and manage them with the same cloud-native patterns you use to manage your containers?

In this webinar we’ll show you the best way to make a new home for your VMs in Kubernetes.

We’ll explore:
* The different technology options available to you, from roll-your-own open source KubeVirt to megavendor stacks and HCI platforms
- The key features you need to look for to satisfy your use case, whether you’re using Kubernetes in the data center or in edge computing deployments
- A live tour of Spectro Cloud Palette’s Virtual Machine Orchestrator (VMO) capability, showing how you can model, deploy and manage VM workloads alongside containers in all your clusters and environments
- How to painlessly migrate your existing VMs, minimizing downtime and stress for you and the application teams you work with

The clock is ticking. Don’t miss this opportunity to learn about the best-in-class solutions for VMs on Kubernetes.

The new home for your VMs: Kubernetes

Infusing artificial intelligence (AI) and machine learning (ML) into data and applications at the edge has the potential to transform operations at Federal civilian agencies and in national defense. But edge environments can be challenging to manage at scale, and sensitive data and AI stacks are vulnerable to attack.

Join Spectro Cloud and Hitachi Vantara Federal in this webinar to discuss the keys to effective use of AI at the edge.

We’ll cover:
- The use cases driving edge and AI together in public sector, and examples of the impact they are having on real mission outcomes today
- The challenges of deploying and managing edge computing in defense and federal environments, from security to connectivity, scale and interoperability
- Approaches to managing the lifecycle of edge devices and the data that they gather, both locally and centralized in the cloud, and why data provenance and lineage are so critical
- A best practice architecture for building edge AI deployments on open platforms like Kubernetes, plus Spectro Cloud Palette and Hitachi Vantara Pentaho

Don’t miss this opportunity to learn about the cutting edge of edge AI from the experts that are making it happen.

Advancing AI at the edge to transform missions

Organizations across the public sector and regulated industries are facing the challenge of rapidly transitioning to modern cloud-native infrastructure built around Kubernetes. 

In this webinar we’ll explore the key factors you need to consider to ensure success, and answer some of the most challenging questions you’ll face:

- Scaling with simplicity: how can you scale to hundreds of clusters across different environments, without creating a management and performance nightmare?
- Flexibility and openness: can you drive a modernization strategy that’s right for your organization, without being locked in to a costly opinionated platform?
- Securing the stack: from the software supply chain to cluster access controls, how can you protect your workloads and meet regulatory standards, without constraining agility?
- App and developer innovation: how can you support your application teams with the infrastructure they need to migrate legacy VMs and build new apps, without losing control?
- Protecting and managing the edge: can you embrace edge computing opportunities while enforcing compliance and protecting sensitive data?

We’ll share examples of real use cases we’ve encountered working on projects in the field, and illustrate solutions to these questions that you can implement today using our Palette VerteX Kubernetes management platform.

Kubernetes in government: 5 key requirements for your app modernization journey

Join us for a rundown of the top trends you need to know about as you head into 2024 and beyond.

We’ll explore:

- What’s next for platform engineering and IDPs as the devex challenge remains
- The next steps for optimizing Kubernetes costs beyond cloud spend to edge, power consumption, green IT and more
- AI on Kubernetes and how we move from buzzword to business-critical
- How Kubernetes and software supply chain security is evolving to keep pace with the threat landscape
- Strategies for modernizing the hidden iceberg of legacy applications in cloud-native environments

We’ll put these trends in the context of the broader evolution of the cloud-native ecosystem, as Kubernetes itself becomes the extensible meta-orchestrator.

You’ll take away best practices, trends to watch, and hot new projects to explore over the Christmas shutdown. Expect fierce debate and more than a little humour as we close out the year in style.

What's in store for 2024?

What does a “typical” Kubernetes environment look like? What’s the best way to give devs access to clusters? Is anyone really using Kubernetes at the edge?

The new 2023 State of Production Kubernetes report answers these questions and many more, drawing on a large-scale survey and in-depth interviews with enterprise IT professionals and executives.

Join us for a whistlestop tour of some key findings, including:

- Why multi-everything is the reality for today’s Kubernetes adopters
- The top pain points ops teams face — and what they plan to do to address them
- How organizations really feel about the role of app devs in managing K8s
- Where legacy VM workloads fit in the cloud-native landscape
- What the future holds for Kubernetes at the edge

Whether you’re looking to benchmark your own Kubernetes adoption, gather data to support budget requests for 2024, or just want fresh data to catch up on the frontiers of the cloud-native landscape, this webinar is for you.

To be the first to get your hands on the full report when it launches, sign up for updates from Spectro Cloud right here - https://info.spectrocloud.com/subscribe

New frontiers: 5 key insights from the 2023 State of Production Kubernetes

Edge clouds are one of the main building blocks of modern telecom infrastructure, bringing performance and cost-efficiency to telecom systems, and better user experience in network services. By deploying cloud computing capabilities closer to where users and end-devices are located, a telco operator can run its services more effectively, benefiting from reduced latency in delivering services to consumer devices and business systems. Furthermore, edge computing capabilities enabled at an edge cloud bring a plethora of business applications to users and devices running on cloud-native environments as micro services.

Kubernetes systems provide modern cloud-native execution environments for software applications, and are getting increasingly more popular in the telco sector in recent years, thanks to their self-healing and container orchestration capabilities. The flexibility and scalability of kubernetes makes it ideal for micro-services based 5G mobile networks, and multi-access edge computing (MEC) applications. 

In this webinar, Canonical and Spectro Cloud will explain how their combined telco edge cloud solution provides automation, scalability, and flexibility to operate edge clouds with Kubernetes on bare metal for the best application performance. 

Join us to find out how you can address common challenges, such as:

Bare metal automation at scale to reduce operational costs and deployments times
Meeting security compliance requirements such as timely security patches, confined execution spaces, and tenant isolation 
A repeatable pattern in deployments and centralised management

Speakers:
Serdar Vural, Telco Product Manager at Canonical 
Pedro Oliveira, Senior Solutions Architect at Spectro Cloud.

Telco edge cloud automation at scale

AI and edge computing are the new killer apps for business transformation in many industries. 
 
Many organizations are experimenting with edge AI stacks on Kubernetes to unlock new customer experiences and streamline operational processes.

But in such a fast-moving space as AI, it can be hard to separate fact from fiction and work out not just what’s actually possible, but the best way to make it happen.

In this webinar, technology fellow, Cornelia Davis and CTO, Saad Malik will walk you through:

- What edge AI means, and how it relates to terms like AIops and MLops
- Why the edge is the natural home for critical AI inferencing workloads
- The top challenges for edge computing — and why adding AI models and engines to the mix exacerbates these problems
- Key requirements for successful AI deployments in edge environments, from security to lifecycle management
- Which tools and projects you need to know, from Kubeflow to LocalAI

We’ll also introduce you to Palette EdgeAI, a new enhancement to Spectro Cloud Palette that simplifies the deployment and management of AI stacks in your Kubernetes-based edge computing environments.

You’ll walk away with a deeper understanding of edge AI and a clear direction for your edge computing projects.

Edge AI: from hype to reality

Living with Kubernetes can be tough enough without having to deal with the rapid release schedule of K8s itself and all the projects you deploy into your clusters. 

How can you promptly update to take advantage of new features and patches without compromising application availability — or working yet another weekend?

We can help.

This webinar will cover some simple strategies you can follow to streamline how you manage Kubernetes deployments and versioning in your production environment. We’ll explore: 

- Considerations when you upgrade the cluster in different environments, from public cloud managed Kubernetes services like EKS, to small form-factor bare metal edge computing devices
- How rolling upgrades can help ensure availability throughout the update process
- Key steps to successful upgrade processes, including using SBOM scans to inventory your software and using rollbacks to correct errors

We’ll do a live demo of updating a multicluster environment, using our Palette enterprise Kubernetes management platform to trigger an upgrade based on a change to a declarative blueprint called a ‘Cluster Profile’ to ensure desired state.

This presentation will leave you feeling more confident with your deployment strategy the next time you need to perform an upgrade to the latest version… however soon that may be!

Deploying and upgrading Kubernetes in the real world

Run VMs on Kubernetes with Palette Virtual Machine Orchestrator

Containers are the future. But that doesn’t mean VMs are going away. So the question is: what’s the best way to manage both type of workloads?

With the new Virtual Machine Orchestrator (VMO) feature in Spectro Cloud Palette 4.0, you can bring your VMs into your Kubernetes clusters and manage them as first-class citizens alongside your containers.

In this webinar, we’ll explore:
- Why VMs still have a role to play in your infrastructure — whether for legacy apps or new hybrid workloads
- What options are available to you for running VMs and containers today, including the open-source project KubeVirt
- The most common challenges when running KubeVirt in production at scale, and how Palette’s VMO addresses those challenges

We’ll take you on a live and technical hands-on tour of VMO in action. If you want to optimize and consolidate your VMs and container platforms, this webinar will help you make the right decisions and explore new options.

In the meantime, check out our website (www.spectrocloud.com) and docs pages (https://docs.spectrocloud.com/vm-management/) for more information about running VMs on Kubernetes.

About the presenter
Romain Decker is a Principal Product Manager at Spectro Cloud, and is responsible for the VMO product. He has 18+ years of experience in architecture, consulting, and technical product management, including nearly a decade at VMware — so he knows a thing or two about VMs!

Together at last: VMs and containers running on your K8s clusters

In any large-scale Kubernetes deployment, it can be difficult to keep track of what's happening — making any outage or issue a real challenge to troubleshoot. That's where observability comes in. 
Observability is the practice of collecting, correlating and analyzing different streams of data from across your deployment stack so that you can maintain application performance, fix complex problems more quickly, and even predict issues before they affect operations.

In this webinar, we'll discuss best practices for Kubernetes observability. You’ll learn:

- What observability is and why it’s so important in Kubernetes environments
- The core elements of observability, including monitoring, logs, traces, visualizations and alerting
- Which tools and products (open source and commercial) you should consider when implementing observability, including Prometheus, Grafana and OpenTelemetry
- Key considerations when planning for observability, especially in multi-cluster environments or regulated industries
- Shortcuts you can take to get up and running quickly, including a demo of a prebuilt stack you can deploy across your clusters straight away.

Throughout the session, Melody will draw on years of experience implementing cloud-native observability solutions while working at Splunk/SignalFX, and share examples from real-life customer projects. Wherever you are in your observability journey, you’ll gain valuable insights you can apply immediately.

Want a primer on the topic? Check out this blog: https://www.spectrocloud.com/blog/best-practices-for-kubernetes-observability-at-scale

Kubernetes observability: best practices for success at scale

While Kubernetes enjoys widespread adoption, most deployments are still happening on virtual platforms. 

AWS, Azure, GCP, OpenStack and of course vSphere when it comes to private data centers… they’re all virtual platforms. 

But do you really need virtualization to run Kubernetes? 

Kubernetes is plenty capable of running enterprise workloads with high availability, and bare metal hardware is excellent for running them at scale and high performance. 

Just ask Super League Gaming, which runs thousands of Minecraft servers on our bare metal Kubernetes platform! 

But what about virtual machines? With the licensing costs of vSphere 8.0 rumored to quadruple, companies are naturally exploring alternatives. Kubernetes on bare metal, together with Kubevirt and some management tools, can be a great cost-effective solution to your vSphere license headache.

In this webinar you’ll learn:
- Exactly what bare metal Kubernetes is, and how to decide whether it’s right for you and your workloads (containerized and VMs)
- The challenges and pitfalls in adopting K8s on bare metal that you need to know about
- The state of the art in bare metal solutions like Metal as a Service (MAAS) from Canonical
- How to get started today

Whether you’re considering bare metal Kubernetes for the first time, or looking to see what’s new, this is the webinar for you. We’ll share insights learned deploying some of the largest bare metal Kubernetes projects in the world, and insider perspectives from our partners at Canonical.

Kubernetes on bare metal: ready for prime time!

Today’s new, rich applications span use cases from AI-enabled medical software at hospitals, smart shopping and hospitality, to drones maintaining power grids or inspecting crops. But the edge is not like the data center or the cloud, where conventional hardware and software security and control capabilities are enough. Beyond the complexity of Kubernetes and its ecosystem, today’s edge requires purpose-built solutions based on the tight coordination between hardware and software and all layers, with deep root security from the silicon to the app.

In this webinar, Intel’s Bryan Rodriguez, Principal Engineer & Edge Innovator, and Spectro Cloud’s Saad Malik, Co-founder and CTO, will be discussing what the new requirements for edge-native security are and how to address them, using the components and key principles from the Secure Edge-Native Architecture (SENA).

Secure Edge-Native Architecture: A new industry standard for edge-native apps

When you start to use Kubernetes in production, at scale, you're bound to run into one of these common "growing pains":

- Developer productivity. Too many teams needing clusters? Are delays slowing down their pipelines? Are tickets mounting up? It's a familiar story…
- Multicluster headaches. Mo' clusters, mo' problems. How do you maintain security and consistency without sprawling costs, too?
- The edge learning curve. Deploying to hundreds or thousands of remote bare metal devices, managing patches and upgrades... that's not a learning curve, it's a cliff.

With live demos and real best practices, we'll show you some ways to sidestep these pitfalls and achieve your K8s goals.

Three common Kubernetes growing pains — and how to solve them

A software bill of materials (SBOM) is one of the most important concepts you need to know to manage the security of your software supply chain.

An SBOM gives you visibility into all the components that make up your application, revealing dependencies and cataloguing known vulnerabilities that could otherwise expose your systems. 

The more complex and interconnected your application landscape, the more you need SBOMs — so if you’re adopting Kubernetes, you need to watch this webinar.

Join us to explore:

- What SBOMs are and why they matter in the world of cloud-native applications
- The best open-source tools and formats for creating SBOMs in Kubernetes environments
- How to incorporate SBOMs into your application lifecycles and K8s operations practices
- The new SBOM scan capability in Spectro Cloud Palette, and how to use it to manage your security attack surface

By the end of the webinar, you'll better understand how SBOM scans can help your organization stay secure and compliant, along with practical tips for getting started.

The power of SBOM: get the K8s security visibility you need, automatically

If you’re adopting GitOps patterns to accelerate software delivery, you’re probably also choosing Kubernetes, lured by its flexibility and power.

But you’ll quickly discover that standing up K8s clusters across multiple clouds can be challenging… for everyone involved.

Application developers find they need to be Kubernetes experts just to test and deploy their code.
And platform teams are soon burning hours on provisioning and managing clusters and the whole stack of observability, security and other supporting components.

In this session, we’ll show you a better way.

We’ll explore how platform teams can benefit from GitOps, providing self-service clusters across any cloud while using the patterns their developers have become accustomed to.

We’ll get hands-on with two tools — Spectro Cloud Palette and Hashicorp Terraform — demoing how they work together to simplify Kubernetes cluster provisioning and operations while giving developers the tools they need to ship faster.

Presented with CDW’s Digital Velocity team, we will explore how CDW offers the foundation for these platforms, tools and patterns, so organizations rapidly achieve the desired results.

Use GitOps patterns to provide self-service Kubernetes clusters in any cloud

This webinar is perfect for platform engineers, devops engineers and operations teams, whether you’re looking to start running Kubernetes in production, or are struggling with your current tooling as your clusters grow.

In just one hour, we’ll give you a lightning tour of Spectro Cloud Palette and show you how it makes Kubernetes simple: even if you’re running hundreds of clusters, across cloud, data center and edge.

You’ll learn how to:

- Easily model the full stack of all your Kubernetes clusters with Palette’s unique Cluster Profiles, including your choice of pre-validated software integrations, operating systems and K8s distributions.
- Deploy your clusters with a click to clouds, virtualized and bare metal data centers, and even to the edge.
- Scale to thousands of clusters and consistently enforce the desired state with our unique decentralized architecture.
- Manage the full lifecycle of all your clusters from one place — and even import existing ‘brownfield’ clusters.
- Automate day 2 operations including monitoring and observability, self-healing, patching, upgrades, security scans, backup & restore and cost controls.

Maintain enterprise-grade control with granular RBAC, zero trust, policies and quotas.
You'll have the opportunity to ask questions and engage with our team during the live webinar. If you're unable to attend, the recording will be available for later viewing. Don't miss this chance to take control of your Kubernetes clusters. Register now!

Discover Palette, the easy way to manage your Kubernetes clusters

You know that securing your Kubernetes clusters is critically important. But where do you start?

Join this webinar to hear Dmitry Shevrin, a senior solutions architect and Certified Kubernetes Security professional, share key best practices you can act on immediately to reduce your exposure.

In this webinar, we'll cover areas such as:

- Vulnerability scanning
- Access controls
- Patching and configuration management
- Secrets management
- Architecting for workload isolation

We'll talk you through design principles and the impact on your people and processes, as well as demoing some quick wins you can make using Spectro Cloud Palette to manage your clusters.
Of course, you'll have plenty of time for questions, and you're welcome to follow along using our Palette Free Tier. Sign up here for the free tier, no credit card required.

Kubernetes security best practices

Kuberentes Security

Clusters

Best Practices

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Kubernetes security best practices

Presented by

About this talk

More from this channel