The Practice of Securing Kubernetes

Dive into Kubernetes security fundamentals in this 29-minute conference talk from Devoxx. Explore common security vulnerabilities in default Kubernetes setups and learn how to implement robust security measures across multiple layers. Discover best practices for securing the API server, Kubelet, and etcd components. Gain practical insights on authentication methods, authorization strategies, admission control, audit logging, and encryption. Learn about node bootstrapping and understand the limitations of certain security approaches. Walk away with actionable tips to enhance the security of your Kubernetes environments, suitable for both beginners and experienced practitioners.

Introduction
Authentication
Tokenbased Authentication
Authorization
Arbuck
Admission Control
Audit Logging
CD Encryption
Cubelet
CA Bundle File
Limitations
Node Bootstrapping