Layers of Isolation in Kubernetes

Explore the layers of isolation in Kubernetes in this informative conference talk by Tim Allclair from Google. Gain insights into the security architecture of Kubernetes clusters and learn how to effectively separate workloads based on different threat models. Discover the isolation capabilities between containers, pods, nodes, namespaces, and clusters. Understand which resources are isolated between containers in the same pod and how isolation changes as workloads are increasingly separated. Examine real-world attack examples and their mitigation strategies at various layers of the stack. By the end of this 29-minute presentation, acquire a comprehensive understanding of how to architect a secure system in Kubernetes and make informed decisions about workload separation for your specific security requirements.

Layers of Isolation in Kubernetes - Tim Allclair, Google