Kubernetes Security 101: Best Practices to Secure Your Cluster
summary
Outlines Kubernetes control plane and node components, maps specific risks (etcd plain‑at‑rest, kubelet API exposure) and actionable defenses: image scanning, admission control (OPA/Kyverno), RBAC, network policies and file‑integrity checks from CIS Benchmarks. Shows how to enable audit logs, deploy runtime detection with Falco (eBPF), and restrict kube API access. Cites a real compromise pattern that infected roughly 50,000 compromised pods via unauthenticated kubelet APIs.
AI-written summary · about
chapters (8)
- 0:00Start
- 2:44What is K8s?
- 3:43Fun facts
- 6:51K8s architecture
- 16:53The Kube API Server
- 22:45The worker nodes
- 22:59The kubelet
- 25:05The audit logs
related talks
29mKubernetes Security Best Practices
22mSecuring Kubernetes
35mKubernetes Security - Challenge and Opportunity?
33mKubernetes Security: Horror Stories to Help Secure Your Cluster
53mFlying Above the Clouds: Securing Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
30mFortifying Kubernetes
45mKubernetes Security: Tackling Attacks & Best Practices