Hardening in the enterprise: SUSE releases Rancher 2.6.5 and NeuVector 5.0
(2022/05/17)
- Reference: 1652796726
- News link: https://www.theregister.co.uk/2022/05/17/suse_rancher_neuvector/
- Source link:
Kubecon SUSE acquisition Rancher is growing up, with a decidedly enterprise-friendly 2.6.5 release and version 5.0 of NeuVector.
SUSE appears to be increasingly becoming the container company, and used this year's EU Kubecon event to make its [1]first release of NeuVector since it open-sourced the container security platform earlier this year.
Dubbed a "Full Lifecycle Container Security Platform", NeuVector turning up with Rancher is further evidence of an increased folding in of security and scanning into container solutions.
[2]
A SUSE insider described NeuVector is a "big deal" and noted Docker's exploits in the arena of container hardening. Greg Muscarella, general manager of enterprise container management at SUSE said the tool will "enable enterprises to strengthen their security against growing cyber threats in any location without compromising developer agility and innovation."
[3]
[4]
NeuVector's open-source project, Open Zero Trust (OZT), has also been contributed to the Cloud Native Computing Foundation (CNCF.)
It is, however, [5]Rancher 2.6.5 that is most interesting. NeuVector integration notwithstanding, the new release of the Kubernetes management platform features General Availability of RKE2 (SUSE's Kubernetes distribution) and the ability to isolate Prometheus metrics between projects. A graduated project at CNCF, Prometheus is a handy monitoring system and time series database.
[6]Those NitroTPMs Amazon teased now really are coming to AWS EC2
[7]Dockershim deprecated with release of Kubernetes 1.24
[8]Containers may be more effective than VMs for hybrid apps – Gartner
[9]Kasten by Veeam adds ransomware detection to K10 data management platform
RKE2 adds support for Windows, including Server 2022, and a vSphere driver to provision directly into a virtualized environment. "Alongside experimental GMSA [Group Managed Service Accounts] tooling, .NET applications can now maintain security best practices in container environments," according to SUSE.
Or, as a SUSE source put it: "With GMSA in tech preview, our Windows containers can do stuff on active directory that simply isn't supported .NET Core on Linux."
[10]
The release is a sign of Rancher maturing following [11]its acquisition by SUSE . While some of its founders have been absorbed into the SUSE machine (although we're rather fond of former CTO Darren Shepherd's LinkedIn description as "Container Has-Been" following his departure from SUSE earlier this year) others, such as Muscarella, have been brought in.
While enough of Rancher remains to qualify as a "nimble idea factory" as our SUSE source put it, today's release is a further indicator that the platform is eying increasingly complex enterprise workloads. ®
Get our [12]Tech Resources
[1] https://www.suse.com/c/suse-neuvector-5-0-delivers-a-powerful-open-source-security-platform/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.suse.com/c/rancher_blog/whats-new-in-rancher-2-6-5/
[6] https://www.theregister.com/2022/05/13/aws_tpm_smartnic/
[7] https://www.theregister.com/2022/05/04/kubernetes_docker_cncf/
[8] https://www.theregister.com/2022/03/22/containers_vs_vms_vs_serverless/
[9] https://www.theregister.com/2022/05/16/kasten_veeam_k10_v5/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2020/07/09/suse_acquires_rancher/
[12] https://whitepapers.theregister.com/
SUSE appears to be increasingly becoming the container company, and used this year's EU Kubecon event to make its [1]first release of NeuVector since it open-sourced the container security platform earlier this year.
Dubbed a "Full Lifecycle Container Security Platform", NeuVector turning up with Rancher is further evidence of an increased folding in of security and scanning into container solutions.
[2]
A SUSE insider described NeuVector is a "big deal" and noted Docker's exploits in the arena of container hardening. Greg Muscarella, general manager of enterprise container management at SUSE said the tool will "enable enterprises to strengthen their security against growing cyber threats in any location without compromising developer agility and innovation."
[3]
[4]
NeuVector's open-source project, Open Zero Trust (OZT), has also been contributed to the Cloud Native Computing Foundation (CNCF.)
It is, however, [5]Rancher 2.6.5 that is most interesting. NeuVector integration notwithstanding, the new release of the Kubernetes management platform features General Availability of RKE2 (SUSE's Kubernetes distribution) and the ability to isolate Prometheus metrics between projects. A graduated project at CNCF, Prometheus is a handy monitoring system and time series database.
[6]Those NitroTPMs Amazon teased now really are coming to AWS EC2
[7]Dockershim deprecated with release of Kubernetes 1.24
[8]Containers may be more effective than VMs for hybrid apps – Gartner
[9]Kasten by Veeam adds ransomware detection to K10 data management platform
RKE2 adds support for Windows, including Server 2022, and a vSphere driver to provision directly into a virtualized environment. "Alongside experimental GMSA [Group Managed Service Accounts] tooling, .NET applications can now maintain security best practices in container environments," according to SUSE.
Or, as a SUSE source put it: "With GMSA in tech preview, our Windows containers can do stuff on active directory that simply isn't supported .NET Core on Linux."
[10]
The release is a sign of Rancher maturing following [11]its acquisition by SUSE . While some of its founders have been absorbed into the SUSE machine (although we're rather fond of former CTO Darren Shepherd's LinkedIn description as "Container Has-Been" following his departure from SUSE earlier this year) others, such as Muscarella, have been brought in.
While enough of Rancher remains to qualify as a "nimble idea factory" as our SUSE source put it, today's release is a further indicator that the platform is eying increasingly complex enterprise workloads. ®
Get our [12]Tech Resources
[1] https://www.suse.com/c/suse-neuvector-5-0-delivers-a-powerful-open-source-security-platform/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.suse.com/c/rancher_blog/whats-new-in-rancher-2-6-5/
[6] https://www.theregister.com/2022/05/13/aws_tpm_smartnic/
[7] https://www.theregister.com/2022/05/04/kubernetes_docker_cncf/
[8] https://www.theregister.com/2022/03/22/containers_vs_vms_vs_serverless/
[9] https://www.theregister.com/2022/05/16/kasten_veeam_k10_v5/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoPGpdyC96ZZfp-OY6BpvwAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2020/07/09/suse_acquires_rancher/
[12] https://whitepapers.theregister.com/