Automating Zero-Trust for Cloud Native Applications
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2023 · on Wednesday, 2023-09-27· at 11:00· 3层 301明珠厅| 3F The Pearl Hall 301·
summary
Demonstrates building a Zero‑Trust pipeline using NeuVector and Fleet: profile container behavior in discovery → monitor → protect modes, export the generated YAML, and push via GitHub + Fleet to update dozens of downstream clusters. Shows deep packet inspection to block SQL injections and drop credit‑card data, and a live case where a broken config is mitigated by adding a web‑WAF rule that immediately blocks a malicious API call. CI/CD integration and cluster‑wide enforcement are proven and working.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:42Zero trust principles
- 4:14Automation for zero trust
- 8:31Deep packet inspection
- 10:14Behavior-based policies
- 13:46Privileged pods approach
- 17:16Security policy in learning mode
- 22:06Policy deployment with Fleet
- 25:14Updating policies for upgrades
- 30:23Mitigating zero-day with WAF
- 34:04Open source tools
related talks
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
27mTrue zero-trust runtime security in AKS
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector
53mProtect against unknown security vulnerabilities
01h 02mIntroduction to Zero Trust Security
38mToward Zero Trust with AI