A Checklist for Security from the Container to the Kubernetes: An Overview End to End
summary
Ends with a concrete end-to-end checklist: generate an SBOM and run SCA/SAST early, sign images with Cosign or Notary, enforce signed artifacts via Kubernetes admission controllers, scan images for vulnerabilities and minimize image size, drop root and capabilities in Dockerfile, apply PodSecurity admission and NetworkPolicy, encrypt etcd and use TLS between components, enable API auditing, and add runtime detection with eBPF for syscall and network visibility. Cites SLSA/CIS Benchmarks and a claim that ~60% of breaches trace to misconfiguration.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:36Container Security Lifecycle
- 4:09Supply Chain Security
- 7:03Container Signing
- 12:20Kubernetes Infrastructure
- 13:45Kubernetes Security Features
- 16:51Discovering a sophisticated attack from a packet capture (PCAP) in Kubernetes ??!
- 18:08Attacks against Kubernetes
- 20:14The 4C's of Cloud Native security
related talks
24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
33mKubernetes Security Jumpstart
35mThe 10 steps of Container Security: It's not that hard !
43m6 Strategies to Bring Order to Kubernetes Security Disruptions
28mContainer Security: A Horror Story
05mContainer Security Best Practices
24mDon’t be a fail whale, secure your containers
46mContinuous Kubernetes Security