Shift Left and Security-as-Code: Security on Kubernetes
summary
A concrete workflow for securing Kubernetes using NeuVector is presented: install NeuVector via its Helm chart, let it learn runtime behavior by deep-packet inspection of east–west traffic, export the automatically generated network policy as YAML, commit it to the cluster and redeploy. The exported manifest becomes a Kubernetes resource that, when run in protect mode, blocks and logs unauthorized network packets (including denied external calls); NeuVector is open-source, deploys as daemonsets/controllers to scale, and supports monitor and protect modes with generally low overhead though protect can affect high-throughput workloads.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:57Kubernetes security challenges
- 10:49Auto security by behavior
- 13:17Demo: New Vector & Rancher
- 21:54Security-as-Code benefits
- 24:53Q&A
- 33:37Closing
related talks
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector
31mSafeguarding Kubernetes: Pod Security Admission, NeuVector & Kyverno in the Ring
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
53mProtect against unknown security vulnerabilities
25mFoster Secure Innovation with Your Kubernetes Platform
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
41mCloud Native Security For The Rest Of Us