Securing Kubernetes: Best Practices for DevSecOps in the Cloud-Native Era
summary
Claims a roughly 44x increase in Kubernetes vulnerabilities since 2018 and notes over 60 ecosystem flaws in 2023 with seven in core, while a survey finds >90% of teams hit a critical vulnerability in the past year. A honeypot study shows new clusters see malicious hits within 3 hours. Defaults matter: API server basic auth, permissive RBAC, base64 secrets, no PSP/network policy or full audit by default. Mitigations: enforce RBAC and namespaces, third‑party auth, encrypt etcd, enable audit logging, admission controllers, secure supply chain and keep versions current; use CNCF security tools.
AI-written summary · about
chapters (6)
- 0:00Kubernetes security challenges
- 3:58Kubernetes vulnerability trends
- 7:17Kubernetes attack case study
- 14:30Mitigation strategies
- 18:46Supply chain security
- 21:19Conclusion
related talks
19mHow to Secure Your Kubernetes Clusters
11mSecuring the Kubernetes Ecosystem
22mSecuring Kubernetes
11mKeynote: Securing Kubernetes, the Upstream Way
34mKubernetes Security 101: Best Practices to Secure Your Cluster
45mKubernetes Security: Tackling Attacks & Best Practices
35mKubernetes Security - Challenge and Opportunity?
19mKubernetes Security: Navigating the Real-World Challenges