Kubernetes Security Jumpstart

on YouTube ↗33m

" summary

Clear, actionable checklist: avoid image tags like latest and use digest SHA for reproducible images, run dockle and trivy in CI to catch CVEs and bad Dockerfile patterns, build containers that run as non‑root and have resource requests/limits so the scheduler and quotas can kill runaway pods. Enforce RBAC and namespace network policies, apply mutating/validating admission webhooks (add quotas or reject privileged containers), encrypt etcd at rest, use Falco/SELinux/AppArmor for runtime alerts, and consider service mesh mTLS.

AI-written summary · about

" chapters (27)

1. 0:00Welcome and talk overview
2. 3:08Security is a spectrum not a binary state
3. 4:31Kubernetes security key aspects
4. 5:13Application security best practices
5. 6:15Container security and base images
6. 8:43Image security and non-root users
7. 9:43Infrastructure security fundamentals
8. 12:07Network segmentation and policies
9. 13:09Role-based access control in Kubernetes
10. 14:32Resource quotas and security limits
11. 16:17Monitoring logs and runtime security
12. 17:20Admission controllers and webhooks
13. 18:43Encrypting Kubernetes data at rest
14. 19:47Security tools for Kubernetes ecosystem
15. 20:08Image scanning and vulnerability analysis
16. 22:13Runtime security monitoring tools
17. 23:16Network security overlays and policies
18. 23:58Secrets management alternatives
19. 24:41Secure image distribution practices
20. 25:23Kubernetes security auditing tools
21. 26:46Demo of security audit with kubectl audit
22. 27:48Demo of security audit with kubesec
23. 28:49Commercial end-to-end security products
24. 30:15Service mesh security and mTLS
25. 31:38Computers are less secure than real life
26. 32:19Security as layered protection analogy
27. 32:39Closing remarks and Q&A invitation

" related talks

• 41mKubernetes Security JumpstartMofizur Raman · DevOpsDays Geneva 2020
• 28mKubernetes Security Low-Hanging FruitLuke Bond · Container Camp AU 2019
• 24mA Checklist for Security from the Container to the Kubernetes: An Overview End to EndCarol Valencia · Open Source Summit Latin America 2022
• 43m6 Strategies to Bring Order to Kubernetes Security DisruptionsLoris Degioanni · All Things Open 2020
• 24mA Checklist for Security from the Container to the Kubernetes: An Overview End to EndCarol Valencia · CloudOpen @ OSS LATAM 2022
• 38mAn Intro to Kubernetes HardeningAyesha Kaleem · NDC Oslo 2025
• 35mKubernetes Security - Challenge and Opportunity?Marc Nimmerrichter · KCD Austria 2023
• 22mSecuring KubernetesNilesh Jayanandana · KCD Sri Lanka 2022