Kubernetes has become the de-facto standard for Container Orchestration. Its powerful open-source code has initially been deployed by Google and over time became one of the most popular repositories there is. With an ever growing number of users and contributors more and more tools and plugins are being developed, including security features.
Setting up a production ready Kubernetes cluster is not an easy task, nor is the maintenance. In this workshop Klesev Dimitrij and Nikolic Filip (both Certified Kubernetes Administrators) will explain relevant concepts and usual downfalls when it comes to security.
Participants will learn about security best-practices including features like AppArmor, SELinux and seccomp as well as different kinds of Policies such as PodSecurityPolicies, NetworkPolicies and RuntimePolicies. In addition to that, a solid alternative to the problematic Kubernetes secret management will be shown.