One stop talk for kubernetes security !!
summary
Overview of concrete practices: encrypt etcd at rest and block public control-plane access, enable TLS and RBAC, and apply PodSecurityAdmission (replaces PSP in v1.21) with namespace or cluster defaults. Use policy engines—Gatekeeper for cross-resource Rego rules or Kyverno for native Kubernetes policies—and enforce network policy via Calico. Manage secrets with Bitnami Sealed Secrets stored safely in Git, sign images with Cosign/Sigstore, detect runtime anomalies with Falco, and run Kubescape to get risk scores and remediation steps.
AI-written summary · about
chapters (13)
- 0:00Start
- 4:09THE 4C'S OF CLOUD NATIVE SECURITY
- 5:04Cloud Security Infrastructure
- 7:49Cluster Security - Application, container, code
- 8:29Policy as Code
- 11:39Pod Security Admission - Namespace level
- 12:11Pod Security Admission-Cluster level
- 16:23Bitnami Sealed Secrets
- 17:38SLSA Framework
- 20:42Thread Detection - Faloo
- 21:32Falco Architecture
- 22:29Kubernetes Security Guidance Frameworks
- 23:15Security Framework Comparisons
related talks
46mContinuous Kubernetes Security
41mKubernetes Security Jumpstart
29mKubernetes Security Best Practices
53mFlying Above the Clouds: Securing Kubernetes
57mThe Kubernetes Sessions Security
34mKubernetes Security 101: Best Practices to Secure Your Cluster
38mAn Intro to Kubernetes Hardening
22mSecuring Kubernetes