The 2024 Kubernetes Benchmark Report - Managing Workload Costs and Security

Explore key findings from the 2024 Kubernetes Benchmark Report in this conference talk from Conf42 DevOps 2024. Dive into an analysis of 330,000 workloads, examining trends in container right-sizing, CPU request management, and reliability issues. Learn about the importance of container health checks and the risks of deployments missing replicas. Investigate security improvements, including fewer containers running as root, while addressing ongoing challenges with image vulnerabilities. Discover insights on NSA hardening guidance for network policy coverage and explore potential solutions, including the use of guardrails to address business problems in Kubernetes environments. Gain valuable knowledge to optimize your Kubernetes deployments and enhance overall system reliability and security.

intro
preamble
about joe
330k workloads evaluated
example policies evaluated
how to read the report
container right-sizing is becoming a systemic issue
missing cpu requests are becoming more systemic
reliability - trends
container health check are keys to k8s reliability
deployments missing replicas
security
fewer containers are running as root
image vulnerabilities are an ongoing problme - but some signs of progress
nsa hardening guidance - network policy coverage
a path forward
fairwinds provides guardrails to solve business problems
summary