A Safari of Kubernetes and its Natural Habitat
Talkat KubeCon + CloudNativeCon North America 2021 · on Wednesday, 2021-10-13· at 11:55· Petree Hall C + Online·
summary
A lighthearted run-through of concrete failures and fixes: developers clone apps via Argo CD and Helm until node IPs exhaust, autoscaling adds nodes but hits address limits, Prometheus Alertmanager fires dozens of alerts and SREs impose quotas with OPA; an unprotected GitLab runner exposes kubeconfigs and allows a red team to fully compromise an on‑prem cluster that has no cloud elasticity; fixes include encrypted secrets, network segmentation, Falco for detection, and measurable CO2 cost concerns (~100M metric tons yearly).
AI-written summary · about
chapters (8)
- 0:00The wild kubernetes cluster
- 4:06Over-consumption and failure
- 6:59Implementing new controls
- 8:19Vulnerabilities in production
- 12:04Hardening the infrastructure
- 13:21Compliance and isolation
- 15:23The cloud native ecosystem
- 20:00Reflections and takeaways
related talks
30mA secure journey on Kubernetes
36mKubernetes Confessions: Real Mistakes We’ve All Made (and What They Teach Us)
33mKubernetes Security: Horror Stories to Help Secure Your Cluster
29mKubernetes Security: Attacking and Defending K8s Clusters
40mThe Good, the Bad, and the Ugly of Managing Production Systems with Kubernetes
02h 42mSecuring Your On-Premise Kubernetes Cluster from Scratch
01h 24mTutorial: Attacking and Defending Kube...
35mKubernetes Security - Challenge and Opportunity?