Optimize benefits from Kubernetes container technology

DXC takes an end-to-end approach to application containerization, from application identification to deployment. We start with filtering the maximum possible applications for containerization by leveraging our Assessment Checklist — our guidelines for identifying the most probable applications. We follow this with an application assessment that collects the specifics about platform, application, configurations, security and current packaging mechanism. From there we are able to determine whether to take a manual or automated approach to containerization.

Figure 1 illustrates the factors that DXC considers critical to making the right choices:

Figure 1. The assessment process for containerization.

DXC handles this with capacity management — the process of validating that there are sufficient resources for the service to be scalable, efficient and reliable. Company and user-facing internal services must accommodate both expected and unexpected growth. DXC provides capacity reports on a monthly basis; these include Central Processing Unit [CPU] usage, memory usage and storage usage trends over the previous three months to make the best decisions about the capacity required at the container platform level.Additional information can be provided on request, to allow better understanding of the facts in the reports, including trend analysis. 

DXC applies a versatile adoption solution for a range of platforms. The DXC Application Containerization as a Service (aCaaS) is a 7-step process to containerize traditional applications and run them on Kubernetes or Docker. (See Figure 1.).

Figure 1. The 7-step aCaaS process

Container security works differently than security of servers and virtual machines (VMs) and requires specific tools. In some cases — for example, RedHat OpenShift with CoreOS — the underlying operating system (OS) is immutable, which prevents the installation of any endpoint detection and response (EDR) security agents. 

Managed Container Services supports Red Hat Advanced Cluster Security (ACM) and SuSe NeuVector (NEU). Note that the scope of security services provided by Managed Container Services is limited to "Technical Application Management" — that is, design, install, availability management, patch and update/upgrade of the tool itself.

Additionally, DXC provides end-of-support operating system isolation to increase your defense against security risks, as does embedded security in all services.