Is It Safe? Security Hardening for Databases Using Kubernetes Operators
Talkat Data on Kubernetes Day North America 2023 · on Monday, 2023-11-06· at 14:05· W471ab, McCormick Place·
summary
Operator-based deployment secures databases by shrinking configuration to a small YAML surface and automating credential and certificate provisioning; Altinity’s Altinity Kubernetes Operator for ClickHouse runs large clusters (one customer has a 550-server “Frankenstein” cluster) and auto-sets passwords, mounts Kubernetes secrets, injects TLS certs, and ties volumes to encrypted storage classes (e.g., EBS GP3). CI tooling uses Trivy and Docker Scout for image scanning, and GitOps with Argo CD is recommended for rapid, auditable remediation; a DOKC SIG operator checklist repo documents concrete checks.
AI-written summary · about
chapters (9)
- 0:00Database security on Kubernetes
- 3:57Three-part framework
- 7:52Security with operators
- 11:42Managing credentials
- 14:54Encrypting in-flight and at-rest
- 17:20Secure operator code
- 20:50Protecting backups
- 23:16Security hardening guide
- 24:38Q&A
related talks
41mData warehouse and Kubernetes: Lessons from ClickHouse Operator
38mBuilding for Trust: How to Secure Your Kubernetes Cluster
35mOrchestrating Resilient Data: Harnessing the Strength of Kubernetes with Operators
22mSecuring Kubernetes
34mDatabases on Kubernetes
01h 03mSecuring Legacy Applications and Container Microservices in Kubernetes
35mCloud Native Security for the Rest of Us
34mIntroduction to Kubernetes Operators for Databases