Kubernetes Image Policy Webhook Explained

Image for post

This image was taken from the k8s docs

Introduction

In this article, we will explore how webhooks work in Kubernetes and, more specifically, about the ImagePolicyWebhook. The Kubernetes documentation about it is kind of vague, since there is no real example or implementation that you can get out of it, so here, we will break it down to the different alternatives. In a real-world scenario, I would prefer to rely on OPA Gatekeeper, but Iā€™m planning to make this trip worth it by adding a database and making the webhook allow or disallow images based on a vulnerability scan ā€” for example, allow only medium or lower vulnerabilities in your containers ā€” but that will be a post for another day. If you are interested, you can help in this repo. For more information in general, see here.

Hybrid Cloud: Balancing On-Premises and Cloud Service Providers

If you think multi-cloud applications are already very flexible, wait until you really explore the advantages offered by hybrid multi-cloud. Hybrid multi-cloud, or simply hybrid cloud, combines cloud computing resources with on-premises infrastructure. There are a lot of reasons why the hybrid cloud is highly beneficial.

When you have a lot of data to process, for instance, relying on a hybrid cloud environment provides the best balance between performance and flexibility. In specific applications such as vision AI, the hybrid cloud lets users benefit from real-time, on-premises processing while keeping the system open and flexible enough using the cloud.