Exploring Container Security: A DevSecOps journey securing a fake shop - Jeremy Guerrand
summary
Demo of Kico Cloud using Azure CNI and Calico shows concrete steps: sign up for a 14‑day trial, connect clusters in 5–15 minutes, then create Calico policies, stage them, and run recommendations. The demo builds a zero‑trust stack with a default deny plus specific DNS and platform allow rules, uses the service graph and packet capture for troubleshooting, blocks an attacker pod (quarantine via label) and exports flows to Kibana; observed ~46 endpoints and working enforcement.
AI-written summary · about
chapters (15)
- 0:00Introduction to Calico Cloud
- 2:30Dashboard and cluster overview
- 4:43Policy tiers and team collaboration
- 7:11Endpoints and network inventory
- 9:00Service graph and flow analysis
- 13:20Demo setup and application security
- 18:47Implementing zero trust policies
- 21:24Simulating an attack scenario
- 25:45Quarantining compromised workloads
- 29:22Threat detection and image assurance
- 31:55Web application firewall and DPI
- 33:25Container threat detection features
- 35:16Anomaly detection and monitoring
- 36:42Connecting clusters to Calico Cloud
- 37:46Q&A and closing remarks
related talks
32mContainer and Kubernetes security policy design
52mImplementing holistic security for containers and Kubernetes
33mNavigating the Container Jungle
30mSecuring Kubernetes Multi-Tenancy
55mThe Hacker's Guide to Kubernetes
30mA secure journey on Kubernetes
46mContinuous Kubernetes Security
06mKeynote: Progress Toward Zero Trust Kubernetes Networks