News for hackers. Stuff that matters.

A comment on Instant dev environments for cloud-native apps.

Re:Instant dev environments for cloud-native apps by maxmcd on Thursday May 07, 2020 @03:50PM (#23107390)
Are kubernetes namespaces this well isolated? I wasn't aware it was at the point where you could put untrusted tenants next to each other in the same cluster.
[ Parent | on HN ]
Re:Instant dev environments for cloud-native apps by pchico83 on Thursday May 07, 2020 @04:16PM (#23107727)
You can achieve good isolation with a combination of RBAC, network policies, OPA rules and runtimes like gvisor. We also monitor suspicious activity with Falco. For deeper security, we offer Okteto Teams, which runs on a dedicated cluster, and Okteto Enterprise, which runs on your own cluster.
[ Parent | on HN ]