Securing Your On-Premise Kubernetes Cluster from Scratch
summary
A practical on‑prem Kubernetes hardening walkthrough covering automated configuration auditing with kube-bench (failing rules plus remediation commands), application checks using Popeye, attack surface discovery with kube-hunter, policy enforcement via Open Policy Agent (Rego policies and CI preflight), runtime detection with Falco (detects container shells and triggers quarantine through Argo Events and NetworkPolicy), and CI‑integrated image scanning with Clair. The demos run end‑to‑end and show the identified issues being fixed.
AI-written summary · about
related talks
38mAn Intro to Kubernetes Hardening
30mA secure journey on Kubernetes
34mKubernetes Security 101: Best Practices to Secure Your Cluster
25mSecuring and Hardening Your Kubernetes Cluster
22mSecuring Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
35mKubernetes Security - Challenge and Opportunity?
29mKubernetes Security: Attacking and Defending K8s Clusters