Container Security - Theory & Practice at Netflix

Explore container security theory and practice at Netflix in this 35-minute conference talk. Dive into the rapid growth of container usage, from improving developer experience to running critical workloads. Learn about the evolution of Netflix's container ecosystem security, covering architecture, practical considerations, and lessons learned. Discover key topics including Titus high-level architecture, cloud security, control plane security, identity management for people and services, authorization, SSH access, secret protection, runtime security, vulnerability management, and change management. Gain valuable insights and takeaways from Netflix's journey in securing their container infrastructure.

Intro
Context
Containers at Netflix
Titus: High Level Architecture
Newt
Rapid growth of container use cases
Container Ecosystem Security
Cloud Security
Control Plane Security
Identity for People
Metatron: Identity for Services
Gandalf: Authorization
SSH Access
Secret Protection
Runtime
Vulnerability Management
Change Management
Takeaways