Kubernetes Security for Developers.
summary
Builds a tiny Spring Boot greeting app, containerizes it and demonstrates a root vs rootless image, scans images with Trivy, and deploys to a managed GKE cluster with KMS-backed secret encryption enabled. Covers Linux namespaces, cgroups and capabilities, recommends OpenJDK 11+ and distroless/Google Jib images, shows how to drop capabilities and set resource limits, and explains PodSecurityPolicies / Open Policy Agent and Helm 3 migration. Practical demos run and reveal real CVEs to triage.
AI-written summary · about
chapters (21)
- 0:00Introduction to talk
- 1:08Speaker introduction
- 3:57Talk overview and agenda
- 6:50Typical container use cases
- 12:54Container security risks
- 20:03Application security basics
- 32:26Demo setup and sample app
- 40:30Application security demo
- 45:54Container security fundamentals
- 51:30Linux containers vs VMs
- 1:00:01Container isolation mechanisms
- 1:05:40Secure Dockerfile practices
- 1:16:42Linux capabilities explained
- 1:24:46Docker security anti-patterns
- 1:29:21Kubernetes security overview
- 1:39:37Kubernetes security best practices
- 1:47:10Rootless container demo
- 1:51:10Kubernetes complexity discussion
- 1:54:00Kubernetes basics recap
- 1:55:23Kubernetes secrets management
- 1:59:00Summary and book recommendations
related talks
33mKubernetes Security Jumpstart
02h 09mKubernetes Distilled - an in depth guide for the busy Java developer
45mKubernetes Runtime Security
43mKubernetes Security: Attacking and Defending Modern Infrastructure
21mKubernetes for the Spring Developer
28mKubernetes Security Low-Hanging Fruit
44mSpringing into Kubernetes
01h 06mHands-on Workshop: Batten Down the Hatches! A Cluster Security Journey