Rico Komenda
Kubernetes Security Best Practices
#1about 1 minute
The prevalence and impact of Kubernetes security incidents
Most organizations have experienced a Kubernetes security incident in the last year, commonly caused by runtime issues or cluster misconfigurations.
#2about 2 minutes
Applying the 4 Cs model to cloud native security
The 4 Cs model provides a framework for securing the entire stack, from the cloud infrastructure and cluster to the container and code.
#3about 3 minutes
Securing container images against common vulnerabilities
Prevent container breakouts by scanning images for vulnerabilities, using trusted registries, and removing unnecessary dependencies.
#4about 4 minutes
Hardening pods with security contexts and standards
Enhance pod security by running containers as non-root users, disabling privilege escalation, and enforcing policies with Pod Security Standards.
#5about 3 minutes
Implementing the principle of least privilege with RBAC
Use Role-Based Access Control (RBAC) to grant users and service accounts only the specific permissions they need at the namespace level.
#6about 2 minutes
Isolating pod-to-pod traffic with network policies
Restrict communication between pods by default and define explicit allow rules using network policies and CNI plugins like Calico.
#7about 2 minutes
Protecting the critical ETCD datastore from unauthorized access
Secure the cluster's central datastore, etcd, by enforcing TLS communication with the API server and using a separate certificate authority.
#8about 1 minute
Automating policy enforcement with admission controllers
Use tools like Kyverno, Kubewarden, or OPA Gatekeeper as admission controllers to automatically validate and enforce security policies at scale.
#9about 2 minutes
Key takeaways for hardening Kubernetes clusters
A summary of essential practices includes hardening images, using RBAC, isolating traffic, protecting etcd, and automating policy enforcement.
Related jobs
Jobs that call for the skills explored in this talk.
Technoly GmbH
Berlin, Germany
€50-60K
Intermediate
Network Security
Security Architecture
+2
Matching moments
01:32 MIN
Organizing a developer conference for 15,000 attendees
Cat Herding with Lions and Tigers - Christian Heilmann
03:17 MIN
Selecting strategic partners and essential event tools
Cat Herding with Lions and Tigers - Christian Heilmann
04:49 MIN
Using content channels to build an event community
Cat Herding with Lions and Tigers - Christian Heilmann
02:39 MIN
Establishing a single source of truth for all data
Cat Herding with Lions and Tigers - Christian Heilmann
04:57 MIN
Increasing the value of talk recordings post-event
Cat Herding with Lions and Tigers - Christian Heilmann
03:38 MIN
Balancing the trade-off between efficiency and resilience
What 2025 Taught Us: A Year-End Special with Hung Lee
04:57 MIN
Developing resilience by expanding your capacity for failure
What 2025 Taught Us: A Year-End Special with Hung Lee
03:39 MIN
Breaking down silos between HR, tech, and business
What 2025 Taught Us: A Year-End Special with Hung Lee
Featured Partners
Related Videos
42:45Kubernetes Security - Challenge and Opportunity
Marc Nimmerrichter
46:36Hacking Kubernetes: Live Demo Marathon
Andrew Martin
44:00Enhancing Workload Security in Kubernetes
Dimitrij Klesev & Andreas Zeissner
28:47Turning Container security up to 11 with Capabilities
Mathias Tausig
27:52Chaos in Containers - Unleashing Resilience
Maish Saidel-Keesing
24:47Supply Chain Security and the Real World: Lessons From Incidents
Adrian Mouat
57:095 steps for running a Kubernetes environment at scale
Stijn Polfliet
57:24Mastering Kubernetes – Beginner Edition
Hannes Norbert Göring
Related Articles
View all articles
From learning to earning
Jobs that call for the skills explored in this talk.
SVA System Vertrieb Alexander GmbH
Azure
Openshift
Kubernetes
Google Cloud Platform
Amazon Web Services (AWS)
inovex GmbH
Karlsruhe, Germany
€60-75K
Azure
Kubernetes
Google Cloud Platform
Amazon Web Services (AWS)
Form3
Municipality of Madrid, Spain
Remote
Go
Azure
Terraform
Kubernetes
+3
Broster Buchanan
Charing Cross, United Kingdom
Remote
£85-120K
Senior
Go
Azure
Terraform
+4
Sólo para miembros registrados
Barcelona, Spain
€55-75K
Senior
Bash
Azure
Linux
Kafka
+10
Sólo para miembros registrados
Barcelona, Spain
€50-75K
Senior
Bash
Azure
Linux
DevOps
+7
AllatNet Recruiting GmbH & Co. KG
GIT
Azure
Linux
DevOps
Docker
+8