Kubernetes Hardening for Regulatory Compliance: A Practical Approach
summary
Steps to harden Kubernetes for PCI, SOC and HIPAA: validate node baselines with kube-bench, scan VM images with OpenSCAP, centralize access using a bastion host, and rotate secrets with a KMS. Map findings to MITRE ATT&CK, produce evidentiary Excel reports (e.g., PCI’s 12 requirements → ~365 sub-requirements), and prioritize concrete fixes such as audited images, tightened RBAC, and measurable reduction of exposed services using risk modeling.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 4:01Kubernetes hardening
- 11:52Threat models
- 22:28Hardening benefits
- 30:02Tools and takeaways
related talks
38mAn Intro to Kubernetes Hardening
26mMulti-layer hardening in Kubernetes
22mSecuring Kubernetes
38mBuilding for Trust: How to Secure Your Kubernetes Cluster
35mKubernetes Security - Challenge and Opportunity?
41mKubernetes Security Jumpstart
34mKubernetes Security 101: Best Practices to Secure Your Cluster
02h 42mSecuring Your On-Premise Kubernetes Cluster from Scratch