Cloud Native Security for the Rest of Us
Talkat CloudOpen @ Open Source Summit Europe 2022 · on Tuesday, 2022-09-13· at 09:55· Liffey Meeting Room 3 (Level 1), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Advice maps three concrete areas with tools and gotchas: secure the platform by using managed Kubernetes, restrict etcd and metadata access, enforce pod security standards, enable TLS and regular upgrades, and consider sandbox runtimes like gVisor Kata Firecracker for extra isolation; lock down auth with OIDC, service accounts, SPIFFE and RBAC, beware that list can expose secrets via cluster-wide Ingress controllers; harden the supply chain with signing and verification using sigstore / cosign, ephemeral hermetic builds, CVE scanning (Trivy/Clair) and policy enforcement (OPA/Gatekeeper).
AI-written summary · about
chapters (4)
related talks
23mCloud Native Security for the Rest of Us
41mCloud Native Security For The Rest Of Us
34mCloud Native Security 101: Building Blocks, Patterns and Best Practices
34mCloud Native Security: A New Paradigm for a New World
37mCloud Native Security 101 - Introduction, Workflows and Best practices
39mThe Art of (Cloud Native) Defense: Pillars of Kubernetes Security
24mOne stop talk for kubernetes security !!
22mSecuring Kubernetes