A Checklist for Security from the Container to the Kubernetes: An Overview End to End
summary
Checklist covers source-to-cluster controls with concrete tools: SAST/DAST and SCA for code and dependencies, SBOM generation for build integrity, image signing with cosine or notary plus admission controllers to enforce signed artifacts, and runtime protections including network policies, RBAC and Pod security admissions. Calls out supply‑chain frameworks like salsa, shows that 60% of breaches stem from misconfiguration, and recommends using ebpf for low‑overhead network and runtime observability.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:36Container Security Lifecycle
- 4:09Supply Chain Security
- 7:03Container Signing
- 12:20Kubernetes Infrastructure
- 13:45Kubernetes Security Features
- 16:51Discovering a sophisticated attack from a packet capture (PCAP) in Kubernetes ??!
- 18:08Attacks against Kubernetes
- 20:14The 4C's of Cloud Native security
related talks
24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
33mKubernetes Security Jumpstart
35mThe 10 steps of Container Security: It's not that hard !
28mContainer Security: A Horror Story
34mKubernetes Security 101: Best Practices to Secure Your Cluster
43m6 Strategies to Bring Order to Kubernetes Security Disruptions
05mContainer Security Best Practices
22mSecuring Kubernetes