True zero-trust runtime security in AKS
summary
Demo shows NeuVector on AKS deploying an example “AKS store” across Dev/Test → QA → Prod, using Discover/Monitor/Protect modes to learn behavior, dry-run violations, then enforce and kill a forbidden wget from a container. Policies export as YAML CRDs for GitOps or CI/CD (can export as CRD and push to GitHub), install via Helm or Azure Marketplace in ~1 minute, open source, runs as a Kubernetes workload and blocks unwanted container actions without external appliances.
AI-written summary · about
chapters (11)
- 0:00Introduction to security
- 1:16The zero trust model
- 3:10Introducing NeuVector
- 5:23Analyzing Kubernetes networks
- 7:21Workload deployment demo
- 9:32Discovery, monitor, and protect
- 12:21Behavioral baseline and testing
- 17:05Policy enforcement in practice
- 19:19Security as code
- 21:45Applying security policies
- 24:26Conclusion and resources
related talks
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector
35mAutomating Zero-Trust for Cloud Native Applications
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
43mSecuring container deployments on Azure Kubernetes Service with open-source tools
19m20 minutes + 8 security layers = secure Amazon EKS and Kubernetes
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
53mProtect against unknown security vulnerabilities