Kubernetes Security Enhancement for Public Services

This case study outlines the collaboration between ILZ and Puzzle ITC to enhance the security of Kubernetes infrastructure for critical public services. ILZ faced significant challenges due to high CVE exposure and vendor risks associated with open source software. To address these issues, ILZ aimed to transition to 0-CVE images for container-based deployments without disrupting existing workloads. The partnership with Puzzle ITC led to the evaluation of secure container image options, ultimately recommending Chainguard for its enterprise-grade SLAs and extensive catalog of hardened images. The implementation involved deploying Chainguard Containers across ILZ’s Kubernetes platform, which was executed smoothly, allowing for the replacement of over 20 container images within the first 24 hours. As a result, ILZ successfully reduced its container-related CVE count from over 10,000 to zero, ensuring compliance with public-sector security standards. This collaboration has resulted in a more secure and stable platform for ILZ, enabling them to focus on delivering essential services.