Enhanced Security for Multi-Tenant Architectures: Key Components and Best Practices
Talkat Multi-TenancyCon North America 2023 · on Monday, 2023-11-06· at 15:50· W192ab, McCormick Place·
summary
Describes a Zero‑Trust pattern that grants access via Paralus by creating just-in-time service accounts, auditing kubectl sessions centrally, and tearing down accounts after inactivity while requiring only outbound 443 only from clusters. Covers runtime detection with Falco using an eBPF probe and a single precompiled kernel probe, a rule engine with ~80 system and ~40 audit rules, and an ecosystem bridge with 62 integrations to forward alerts and trigger automated remediation.
AI-written summary · about
chapters (5)
- 0:00Multi-tenant security intro
- 1:02Multi-tenant cluster challenges
- 3:50Access control with Paralis
- 8:46Runtime security with Falco
- 18:18Q&A
related talks
26mSecuring Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles
30mFrom Perimeter to Zero Trust: Securing Kubernetes with Paralus
21mWhat is zero trust security and how paralus implements these
25mSecuring Kubernetes Multi-Tenancy: Navigating Challenges Through DevSecOps Control and Visibility
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
28mClosing the Loop: Applying Least Privilege and Ensuring We Did It Well
01h 02mIntroduction to Zero Trust Security
24mOne stop talk for kubernetes security !!