Strengthening Kubernetes Security
summary
Claims that about 60% of Kubernetes incidents come from misconfiguration and 70% of container images contain vulnerabilities, with under 30% of clusters meeting CIS benchmarks. Describes m9sweeper as an open source, Helm-installable dashboard that integrates Trivy Gatekeeper Kube-bench Kube-hunter Falco KubeSec, runs scheduled scans across clusters, shows CVE-linked image findings, policy results and Falco alerts, and generates consolidated reports. Demo shows the UI and scans working; install is one Helm command and the project is free on GitHub.
AI-written summary · about
chapters (15)
- 0:00Kubernetes security intro
- 1:13Speaker and agenda
- 3:59Why security matters
- 7:07Common cluster risks
- 9:15Six essential tools
- 10:01Gatekeeper for admission
- 11:46Cubescan for image scans
- 13:35Cube Hunter for cluster checks
- 14:38Cube bench for CIS checks
- 15:42Falco for runtime monitoring
- 17:08Trivy for image health
- 19:16Tools summary
- 20:00Minesweeper solution
- 23:52Live Minesweeper demo
- 29:19Recommendations and closing
related talks
23mSecuring Kubernetes with m9sweeper
47mM9sweeper, the Open Source Kubernetes Security Platform
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
19mKubernetes Security: Navigating the Real-World Challenges
30mA secure journey on Kubernetes
22mSecuring Kubernetes
26mMulti-layer hardening in Kubernetes
19mHow to Secure Your Kubernetes Clusters