Kubernetes Security Essentials

Kubernetes is a popular container orchestration platform that is embraced by end users and public cloud providers alike.

Kubernetes provides abstractions (eg. deployment, services, configurations, etc) on top of a set of distributed resources (eg nodes, volumes, networks, etc); these abstractions provides a common and uniform way for developers, sysadmins, etc to view and manipulate them.

Security is one of theses abstractions. Kubernetes approach to security is the 4Cs - code, container, cluster and cloud. Each defines a protection layer around provisioned resources.

In this demo oriented workshop, you will learn about the following aspects of Kubernetes security:

• Pod/Container security
• Role based access control via service account and users
• Network policy
• Managing secrets

The workshop assumes participants are familiar with basic Kubernetes concepts like Pods, Services, networking in Kubernetes, etc.