
Gatekeeper 3.1: Policy as Code Goes Production
Gatekeeper reaches production readiness with improved performance, policy library, and migration tools for replacing PodSecurityPolicy.

Gatekeeper reaches production readiness with improved performance, policy library, and migration tools for replacing PodSecurityPolicy.

AWS Bottlerocket 1.0 debuts a container-optimized operating system with transactional updates and API-driven configuration for Kubernetes nodes.

Trivy provides fast, comprehensive vulnerability scanning for container images, enabling teams to identify and remediate security issues before deployment.

Gatekeeper 3.1.0 adds mutation previews, constraint templates library, and audit scale improvements for Kubernetes policy enforcement.

AWS graduates Firecracker to 1.0 with snapshot/restore, jailer hardening, and performance improvements for serverless and container platforms.

Gatekeeper 1.0 alpha pairs Open Policy Agent with Kubernetes admission controls, enabling declarative guardrails enforced by CRDs.

AWS open sources Firecracker, the lightweight microVM technology behind Lambda and Fargate, designed for fast startup and strong isolation with minimal overhead.

Network Policies provide pod-level network segmentation in Kubernetes, enabling micro-segmentation and defense-in-depth security strategies.

Falco provides runtime security monitoring for Kubernetes, detecting anomalous behavior and security threats in real-time through system call monitoring.

Role-Based Access Control (RBAC) reaches General Availability in Kubernetes 1.8, providing fine-grained authorization for users and service accounts.