categories
Kubernetes
Browse Pomerium articles in the Kubernetes category.
Topic archive
Resources Categorized: Kubernetes
.png.Y_SOL6mu.webp)
Top Ingress NGINX Controller Migration Pain Points
Summary of the top pain points we've heard from customers performing ingress-nginx migrations and how Pomerium can help.
From NGINX to Pomerium: A Practical Migration Guide for Internal Kubernetes Applications
Migrating from NGINX Ingress to Pomerium does not require a disruptive rewrite. Most teams adopt Pomerium incrementally, starting with internal services where the security and operational gains are immediate. An initial objective can be to decouple routing from access control for internal services.
10 Kubernetes Security Tools DevOps Teams Should Be Using in 2026
Kubernetes clusters are dynamic, distributed, and often ephemeral—which makes them difficult to secure with traditional tools. Firewalls and network segmentation protect the perimeter , but they cannot see inside the cluster or answer whether a request is authorized.
.png.C3SYIPl6.webp)
Why Kubernetes Ingress Needs an Identity Layer
Kubernetes ingress controllers are excellent at one thing: moving encrypted traffic to the right service. But encryption alone does not equal security.
Replacing Ingress-NGINX: A Modern Approach to Secure Kubernetes Access
For years, NGINX Ingress has been the default answer to a simple question: How do I get traffic into my Kubernetes cluster? It excels at Layer-7 routing, TLS termination, and traffic shaping, and for many workloads it remains a solid choice. But as Kubernetes has moved beyond hosting public-facing services and into powering internal platforms , the limitations of traditional ingress have become increasingly apparent.
Introducing Pomerium Ingress Controller for Kubernetes
UPDATED Dec 2025: Looking for options to replace NGINX? We've written a short tutorial on how to migrate from NGINX to Pomerium's ingress control by adding a few lines to you config. Check it out here .
.png.DzRDCi6b.webp)
Migrating from Ingress NGINX to Pomerium Ingress Controller
The Kubernetes community announced that Ingress NGINX will be retired in March 2026 . After that, there won't be any more updates, bugfixes, or security patches. While your existing deployments will keep working, running without security updates is risky and there will be no further feature developments.
.png.CDKHY92n.webp)
Designing Smarter Health Checks for Pomerium
Why traditional health checks fail and how Pomerium built smarter, stack-aware probes for Kubernetes, Docker, and systemd.
Smarter Health Checks for Zero-Downtime Deployments
The latest Pomerium release introduces fine-grained and context-aware health checks for Kubernetes, AWS ECS, and systemd . These checks confirm that your routing and policy-enforcement layers are fully ready before handling traffic, giving operators reliable zero-downtime upgrades.
7 Things to Know About Kubernetes Health Checks
At Pomerium, we help organizations run secure and resilient systems on Kubernetes. Health checks are a critical part of that work, yet they’re often difficult to configure effectively. As we expand our deployment and observability practices, we’ve been refining how we think about health checks, why they’re challenging, and the patterns that lead to reliability across different customer environments.
Zero Trust Without Lock-In: What We Heard at KubeCon EU 2025
We’re back from KubeCon EU 2025 in London, and one thing came through loud and clear: European teams want control . Not just for security or performance—but for regulatory peace of mind .
How To Achieve Zero Trust In Kubernetes With Pomerium
Modern Kubernetes environments don’t have a perimeter (a single, predictable network boundary). Apps span clouds. Teams work from anywhere. Legacy security models—built on assumptions of a trusted internal network—start to fall apart.
.png.BPatIN2E.webp)
8 Docker Image Scanning Tools: 2025 and Beyond
In the previous article, we explored the top 10 Docker container scanning tools . Now, we will shift our attention to Docker image scanning tools. While many tools offer both image and container scanning capabilities, this isn't always the case—some are specialized in just one area. In this article, we’ll dive into the top Docker image scanning tools and their unique features.
7 Best Ingress Controllers for Kubernetes for 2025
Some of the best ingress controllers for Kubernetes offer robust security features: Pomerium, NGINX, Traefik, HAProxy, Envoy, Istio Ingress Gateway, and Contour.
7 Best Kubernetes Security Solutions and Vendors - 2025
Open-source Kubernetes security solutions like Pomerium, Falco, and Kubescape offer great value for teams with limited budgets. Comprehensive vendors like Aqua Security, Twistlock, and Calico Enterprise provide robust features at a higher cost.
20 Best Kubernetes Management Tools for 2025
Here are 20 top Kubernetes management tools to improve your K8s experience. By leveraging the right combination of tools, you can ensure your Kubernetes environments are running smoothly.
Docker Container Scanning Tools: Open Source and Paid
Selecting the right Docker container scanning tools is essential for strengthening your organization’s security posture. However, with so many options available, the decision can feel overwhelming. To simplify this process, we have handpicked 10 popular Docker container security scanners.
Kubectl Cheat Sheet with Examples- 50 Quick Commands
Whether you're a seasoned DevOps engineer or just getting started with Kubernetes, having a quick reference guide can significantly boost your productivity and confidence. In this article, we've created an ultimate Kubectl cheat sheet with 50 essential commands and examples, covering everything from basic operations to advanced configurations. This guide is designed to be your go-to resource for navigating Kubernetes efficiently, helping you execute tasks faster and with greater accuracy.
Kubernetes Compliance: NIST, CIS & PCI- Actionable Guide
Achieving Kubernetes compliance requires a careful blend of technical controls, governance policies, and security best practices. To help you in this process, we have compiled an actionable guide for Kubernetes PCI compliance, NIST container security, and CIS Kubernetes benchmark. By leveraging these best practices and tools, organizations can confidently secure their Kubernetes environments and maintain regulatory compliance.
Kubernetes Reverse Proxy: Meaning and Solutions
This guide will walk you through the fundamentals of what is Kubernetes reverse proxy, how it works, its use cases, and how to set it up.
