Open Source Security Tools for Kubernetes Applications
summary
Concrete claims and artifacts: container-image scanning with Clair, Anchore, Falco plus an Encore engine that enforces policies via admission controllers and Jenkins plugins; runtime anomaly detection uses a kernel tap producing syscalls and ~25 Falco rules to detect shells, writes to /bin, miner protocols and can auto kill pods or taint nodes via NATS subscribers; examples include Helm installs, CI integration, and a live demo that mostly enforces rules though one demo path exhibits a transient bug.
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:30Agenda
- 1:24Shift Left
- 3:17Runtime
- 4:33Challenges
- 9:39Security Policies
- 10:14Build Security
- 10:54Container Image Scanning
- 13:37Delivery Pipeline
- 14:36Encore
- 15:13Jenkins CI CD
- 15:36Jenkins CI Evaluation
- 15:59Admission Controllers
- 16:16Falco Integration
- 17:59Anomaly Detection
- 18:57Falco
- 21:22Examples
- 23:09Architecture
- 24:15Rules
- 24:39Rule Example
- 28:40Functions for Operations
- 31:14Demo
related talks
06mOpensource Container Security: A Brief Overview
50mRuntime Security for Containers
30mA secure journey on Kubernetes
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
33mKubernetes is Open by Default, Use Open Source to Secure
29mContainer Forensics for Kubernetes: Building an Evidence Pipeline With Open Source…
23mRuntime K8s Security: Threat Detection with Falcosidekick
37mAchieving High Security at Scale with Microservices