Implementing a Continuous & Proactive Security Mechanism to Protect K8s
summary
A Mirantis pipeline for continuous, proactive Kubernetes security: Trivy scans pods, nodes and manifests for CVEs and misconfigurations; Falco streams runtime events to detect suspicious pod and OS interactions; OPA/PolicyManager enforce access policies and flag violations. Lens Autopilot automates deployment and updates so the same scanning and policy rules are applied across clusters, addressing long remediation times and large numbers of exposed vulnerabilities reported in surveys.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:12Beginning
- 0:35The adoption of cubernity
- 1:17New attack patterns
- 2:29Cluster complexity
- 3:12Human error
- 3:27Open source tools
- 6:00Conclusion
related talks
34mContainer Vulnerability Management in Kubernetes
32mStrengthening Kubernetes Security
16mContinuous CVE Scanning with Trivy Operator
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
11mSecuring the Kubernetes Ecosystem
37mAchieving High Security at Scale with Microservices
31mSafeguarding Kubernetes: Pod Security Admission, NeuVector & Kyverno in the Ring
34mIntegrating Cloud Native Security into the SRE culture