Deploying Kubernetes Without Scaring Off Your Security Team
summary
Shows a practical path to get enterprise security buy-in by wiring familiar tools together: ansible playbooks provision bare metal or cloud hosts, apply ansible hardening profiles, run Inspec checks, and then deploy Kubernetes with kubespray, while a centralized cuddle bastion provides 2FA SSH, SSH-agent proxying and console recording. Demonstrations include idempotent playbook runs, automated compliance reports fed to ELK, and successful handoffs to security teams in multiple datacenters.
AI-written summary · about
chapters (10)
- 0:00Start
- 3:40Always Enable Linux Security Modules in Your Container Deployments
- 4:10Ansible
- 5:00Why We Love Ansible
- 6:19Ansible Playbook
- 7:37Deploy Cloud Instances
- 8:32Ansible Tower
- 9:16Ansible Hardening
- 13:49Site Controller
- 26:53How Do You Manage Ssh Key Configuration
related talks
09mKubernetes security: a team sport
26mBoost your security and resiliency in Kubernetes
19mHow to Secure Your Kubernetes Clusters
34mDeep Dive: Kubernetes/Kubespray (Cluster Lifecycle) SIG
02h 42mSecuring Your On-Premise Kubernetes Cluster from Scratch
43mKubernetes Security: Attacking and Defending Modern Infrastructure
22mSecuring Kubernetes
11mSecuring the Kubernetes Ecosystem