Mastering K8s Security
summary
Lists concrete procedures and tools: how to enable RBAC via kube-apiserver authorization-mode=RBAC, how to wire OIDC with OCTA and kubectl login for SSO, options for secrets (step‑by‑step use of sealed‑secrets vs External Secrets Operator vs Secret Store CSI driver), commands to check cluster state (kubectl cluster-info dump), steps to restrict kubelet/SSH and node access, recommendations to enable audit logs and monitoring with Prometheus and Grafana, and exact resource‑quota, NetworkPolicy and PodSecurityAdmission settings.
AI-written summary · about
chapters (14)
- 0:00Introduction and Speaker Background
- 0:27Understanding Kubernetes Security Layers
- 1:56Implementing RBAC for Secure Access Control
- 3:49Using OpenID Connect for Authentication
- 6:13Managing Kubernetes Secrets Securely
- 13:40Keeping Kubernetes Version Up to Date
- 14:29Restricting Admin and Node Access
- 15:21Controlling Traffic Between Pods and Clusters
- 16:31Isolating Workloads with Namespaces
- 17:09Limiting Resource Usage
- 17:54Monitoring and Audit Logging
- 18:37Securing the Infrastructure
- 19:40Best Practices for Container Security
- 24:13Conclusion and Final Thoughts
related talks
24mOne stop talk for kubernetes security !!
31mKubernetes RBAC Security: A Practical Overview
29mKubernetes Security Best Practices
34mKubernetes Security 101: Best Practices to Secure Your Cluster
29mKubernetes Security Best Practices - Ian Lewis, Google
33mHow the Basics Of Kubernetes Auth Scale For Organizations
35mRBAC to the Future: Untangling Authorization in Kubernetes
33mBeyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions