The Hitchhiker's Guide to Cloud Native Security on Kubernetes
summary
Practical guide mapping cloud‑native security requirements on Kubernetes to concrete tools and steps: use SBOMs and secure base images (Wolfi/curated registries), sign images with Cosign, enforce pipeline checks with Trivy and policies via Open Policy Agent or Kyverno, and harden registries. For runtime and cluster protection, use Falco for detection, consider runtime isolation (Kata, alternate CRIs), choose networking like Calico/Cilium/Istio, enable audit logging and secret stores (Vault/Conjur), apply cluster isolation and control‑plane hardening, and use a Permission Monitor for compliance.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 4:49Cloud-native security importance
- 9:52Talk goals
- 11:40Security areas
- 17:20Dependency & artifact management
- 23:02Secure pipeline & supply chain
- 25:52Runtime security in Kubernetes
- 31:13Network, identity & isolation
- 35:03Multitenancy & cluster isolation
- 37:29Infrastructure security
- 39:13Compliance & monitoring
- 40:18Summary & next steps
- 41:23Q&A
related talks
39mThe Art of (Cloud Native) Defense: Pillars of Kubernetes Security
35mCloud Native Security for the Rest of Us
23mCloud Native Security for the Rest of Us
41mCloud Native Security For The Rest Of Us
22mSecuring Kubernetes
32mNot-So-Spooky Security Strategies
53mFlying Above the Clouds: Securing Kubernetes
24mOne stop talk for kubernetes security !!