Protecting your deployed applications

Deprecated in GitLab 14.8, and planned for removal in GitLab 15.0.

caution
The Container Network Security and Container Host Security features are in their end-of-life processes. They’re deprecated in GitLab 14.8, and planned for removal in GitLab 15.0.

GitLab makes it straightforward to protect applications deployed in connected Kubernetes clusters. These protections are available in the Kubernetes network layer and in the container itself. At the network layer, the Container Network Security capabilities in GitLab provide basic firewall functionality by leveraging Cilium NetworkPolicies to filter traffic going in and out of the cluster and traffic between pods inside the cluster. Inside the container, Container Host Security provides Intrusion Detection and Prevention capabilities that can monitor and block activity inside the containers themselves.

Capabilities

The following capabilities are available to protect deployed applications in Kubernetes: