Container Engine for Kubernetes

Serverless Kubernetes with virtual nodes

Virtual nodes provide a serverless Kubernetes experience to run containerized applications at scale without spending additional resources on managing, scaling, upgrading, and troubleshooting the infrastructure of your clusters.

Virtual nodes provide the abstraction of regular nodes to Kubernetes, delivering granular pod elasticity with per-pod pricing. You can scale your deployments without taking into consideration the cluster's capacity, simplifying the execution of scalable workloads, such as high-traffic web applications and data-processing jobs.

Highly available Kubernetes with autoscaling

Increase the availability of applications using clusters that span multiple availability domains (data centers) in any commercial region or in Oracle Cloud Infrastructure (OCI) Dedicated Region. Scale pods horizontally and vertically and scale clusters too.

Automatic Kubernetes upgrades

Trigger an upgrade of your Kubernetes version with one click. Virtual nodes automatically deliver seamless, on-the-fly updates and security patches of your worker nodes and underlying infrastructure, while respecting the availability of your applications.

Cluster observability

Monitor and secure these applications with tools from Oracle Cloud Infrastructure, Datadog, Aqua Security, and other partners.

Self-healing cluster nodes

When it detects node failures, Container Engine for Kubernetes automatically provisions new worker nodes to maintain cluster availability.

Safe node delete

Safely delete your worker nodes without disrupting your applications with automated cordon and drain options.

Encryption

Encrypt Kubernetes secrets at-rest using the Key Management service.

Oracle always encrypts block volumes, boot volumes, and volume backups at rest using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption. You can also manage the lifecycle of your own encryption keys using Oracle Cloud Infrastructure Vault.

Compliance

OCI Container Engine for Kubernetes complies with regulatory frameworks, such as HIPAA, PCI, and SOC 2.

Private Kubernetes clusters and Bastion

With private clusters, you can restrict access to the Kubernetes API endpoint to your on-premises network or a Bastion host, improving your security posture. To easily access fully private clusters, you can now use Oracle Cloud Infrastructure (OCI) Bastion.

Network security groups for your Kubernetes clusters

Container Engine for Kubernetes supports network security groups (NSGs) for all cluster components. An NSG consists of a set of ingress and egress security rules that apply to virtual network interface cards (VNICs) in your virtual cloud network (VCN). With NSG, you can separate your virtual cloud network architecture from your cluster components’ security requirements.

Authentication and authorization

Control access and permissions using native Oracle Cloud Infrastructure (OCI) Identity and Access Management, Oracle Identity Cloud Service, and Kubernetes role-based access control (RBAC). You can also configure OCI IAM multi-factor authentication (MFA)..

Container image scanning, signing, and verification

OKE supports container image scanning, signing, and verification so you can ensure that your application images are free of serious security vulnerabilities and that the integrity of the container images is preserved when deployed by enforcing image signing.

Audit the Kubernetes activity

All Kubernetes audit events are made available in the OCI Audit service.

Build apps that work across on-premises and other clouds

Container Engine for Kubernetes uses unmodified open source Kubernetes that complies with the Cloud Native Computing Foundation (CNCF) and Open Container Initiative (OCI) standards for application portability.

Flexibility to use any tool for cluster management

Bring your own tools, or take advantage of Oracle's partners for security, federation, observability, and build automation.

End-to-end container lifecycle management

Manage containers’ lifecycle from start to finish. Build and test images with OCI DevOps, deploy from Container Registry, integrate with Autonomous Database, and more.

Better price-performance than other providers

Compared to AWS, Oracle Cloud provides more than 3X better compute price-performance and 20X the IOPS for half the price.

• CERN: 75,000 users on Cloud Native services and Autonomous Database (1:31)

Better price-performance than other providers

When compared to AWS, Oracle Cloud provides more than 3X better compute price-performance and 20X the IOPS for half the price.

Tight integration with infrastructure, Autonomous Database, and Oracle WebLogic Server

Container Engine for Kubernetes easily integrates with Oracle Cloud Infrastructure services, Autonomous Database using the Service Broker, and WebLogic Server using the WebLogic Operator.

Encryption and compliance

Encrypt Kubernetes secrets at-rest using the Key Management service, and stay in compliance with HIPAA, PCI, and SOC 2.

Private Kubernetes clusters and security

Leverage private Kubernetes clusters. Control access and permissions using native Identity and Access Management, Identity Cloud Service and Kubernetes Role-Based Access Control (RBAC).

• Choose Oracle Cloud Infrastructure for performance
• Five best practices for Kubernetes security