Implementing holistic security for containers and Kubernetes
summary
Calico demonstrates production scale with 8M+ nodes, 1M+ clusters and 1.5B image pulls, offering WireGuard node-to-node encryption, an egress (egress) gateway with fixed IPs, DNS policies, network sets fed by threat feeds, and policy tiers plus a Calico Cloud UI (14‑day trial) for policy authoring and flow logs. NeuVector integrates with Rancher and Calico to run image scans in CI and registries, enforce via admission-control enforcement, learn runtime behavior then shift to runtime learning→monitor→protect modes to alert, quarantine or block anomalous processes and connections; demos show policies created, learned connections detected, and protect mode successfully blocking a spawned process.
AI-written summary · about
chapters (5)
- 0:00Introduction to holistic security
- 15:29Calico Cloud overview
- 22:48Rancher and Calico integration
- 36:20Vector container security demo
- 50:00Q&A and closing remarks
related talks
23mContainer and Kubernetes security policy design: 10 critical best practices
32mUsing Open-Source Software to Secure Cloud-Native Applications
33mNavigating the Container Jungle
32mContainer and Kubernetes security policy design
29mSecuring Data-in-Transit with Wireguard for Kubernetes Cluster- 29mSecuring Data-in-Transit with Wireguard for Kubernetes Cluster
39mExploring Container Security: A DevSecOps journey securing a fake shop - Jeremy Guerrand
06mKeynote: Progress Toward Zero Trust Kubernetes Networks