DEVOPSdigest

Kasten announced that its K10 data management platform will provide support for Bottlerocket, a new open-source operating system purpose-built for hosting containers built by Amazon Web Services (AWS).

Security and operational scale are key enterprise concerns for container orchestration, and now Kasten provides critical capabilities for backup and recovery, disaster recovery (DR), and application mobility for containerized applications leveraging Kubernetes on Bottlerocket.

“Security and scale are some of the top priorities for customers running container-based workloads,” said Peder Ulander, Director, Open Source, AWS Marketing, Amazon Web Services, Inc. “Our latest collaboration with Kasten builds on our existing relationship to address these priorities for mutual customers. Kasten K10 for Kubernetes application backup and mobility features work on Bottlerocket’s OS to provide customers with a scalable foundation, and adding an additional layer of protection.”

Built by AWS, Bottlerocket is a free and open-source Linux-based OS focused on security and maintainability, providing a reliable, consistent, and safe platform for container-based workloads that can also be used with Amazon Elastic Kubernetes Service (Amazon EKS). K10’s integration with Bottlerocket enables enterprise operations teams to:

· Reduce attack surface: Further protection is added by a reduction in the amount of software included in the operating system. This eliminates components that can be used in executing or escalating an attack like a shell, interpreters like Python, and even SSH. K10’s deep integration with AWS services like Amazon Elastic Block Store (Amazon EBS), Amazon Relational Database Service (Amazon RDS), AWS Identity and Access Management (IAM), RBAC for secure operations, and end-to-end encryption also further enhances security posture.

· Increase operational ease: Bottlerocket uses an image-based update system instead of package-by-package updates to make the operating system more consistent and predictable. K10 provides policy driven automation that includes forward looking backup and DR policies. This allows the automatic protection of applications as they are introduced into the Kubernetes cluster.

· Limit development overhead: Bottlerocket uses containers as its container runtime, which is conformant with the Kubernetes CRI. Developers can take existing containers and run them on Bottlerocket without modification. K10 automatically discovers all the application components running on a cluster and treats the application as the unit of atomicity without requiring development changes. The application, including the state that spans across storage volumes, databases (NoSQL/Relational), and configuration data included in Kubernetes objects such as config maps and secrets, can be seamlessly protected with K10.

“Kasten’s K10 data management platform runs on AWS and is integrated with several AWS services including Amazon EBS, Amazon RDS, and IAM. Enterprises use K10 to perform critical functions like application-centric backup and granular recoveries of their Kubernetes applications running on AWS with Amazon EKS, as well as other Kubernetes distributions,” said Gaurav Rishi, Head of Product, Kasten. “With the added integration of Kasten K10 on Bottlerocket, customers using the new OS can now also take advantage of the added security and operational benefits like image-based updates.”