Kubernetes-native Security with Starboard
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Thursday, 2020-11-19· at 14:55· Intrado Virtual Event Platform,·
summary
Starboard turns multiple security tools into Kubernetes CRDs so you can run scans with kubectl or view results in Octant; a demo runs kube-bench on a four-node kind cluster by spawning four scan jobs, writes node-scoped CIS reports and replica-set-scoped vulnerability reports, and the operator auto-creates and updates reports on rolling updates while cleaning jobs. Design choices include ownerReference cleanup to avoid historical storage and deterministic resource names to avoid duplicates. Extensibility uses a vulnerability scanner interface with pod template and log-parsing callbacks.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:42Motivation behind Starboard
- 2:00Demonstration of Starboard
- 4:25Demo
- 7:05Design Decisions
- 11:11Rolebased Access Control
- 15:51Viewing the Hierarchy
- 17:04Adding Security Tools
- 20:42Wrapup
related talks
36mContinuous Security Testing with OWASP secureCodeBox in Kubernetes
18mLiz Rice, Aqua Security | KubeCon + CloudNativeCon Europe 2020 - Virtual
30mA secure journey on Kubernetes
38mTutorial: Building Security into Kubernetes Deployment Pipelines
37mAchieving High Security at Scale with Microservices
33mKubernetes is Open by Default, Use Open Source to Secure
33mBringing Pod Security Admission to Your Kubernetes Distribution
35mKubernetes Security - Challenge and Opportunity?