Choose Your Own Adventure: The Struggle for Security
summary
Interactive, choose-your-path demo wires an app into an EKS cluster (Crossplane, Argo CD, Contour) and tests cluster, runtime, and pod-to-pod security choices. Participants pick Kyverno over OPA Gatekeeper and KubeWarden and the demo pushes policies like replicas >=3 and SQLClaim size ≠ small (deployment flakily applied). Runtime choice lands on Kubearmor (contrasted with Falco for detection), and network options compare Istio, Linkerd, and Cilium (Cilium noted as the cluster CNI). Several live demos fail or are only imagined rather than fully demonstrated.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:10Why clusterlevel policy
- 4:52The three tools
- 13:06Tools
- 15:55Cube Armour
- 17:49Securing Podt Communication
- 24:19Questions
related talks
32mChoose Your Own Adventure: The Struggle for Security
37mKubernetes to Cloud Attack Vectors: Demos Inside
06mProtecting Kubernetes Workloads from Attacks
01h 37mLines of Defence – Securing Your Kubernetes Clusters
18mKeynote: Choose Your Own Adventure: The Perilous Passage to Production
01h 24mTutorial: Attacking and Defending Kube...
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
39mExploring Container Security: A DevSecOps journey securing a fake shop - Jeremy Guerrand