At the end of last year (2021), and after a couple of years of
Kubernetes production hands-on, I found that it was time to dive more
into Kubernetes security, and after a lot of reading and practising, I
got my CKS certificate. Also, for the last 3 quarters, security was one
of the focus areas in my team, and I was taking care of it.
For that reason, I decided to consolidate that into a session which
is a combination of Kubernetes Security Best Practices and tips for the
Certified Kubernetes Security Specialist (CKS) exam to share the
knowledge in my team as well across teams.
The session is just 15 Min in total. The first 6 Min are for everyone
and the rest for Kubernetes specialists or anyone who wants to dive more
into Kubernetes security topics. If you are just interested in the
tools, then jump to section #5 Kubernetes Security Starter
Kit. If you are just interested in the CKS exam tips, then jump
to section #6 CKS Exam Overview and Tips.
Agenda:
- Introduction
- Shift-left and DevSecOps
- General Security Concepts
- The 4C's of Cloud Native Security
- Kubernetes Security Starter Kit
- CKS Exam Overview and Tips
Note: If you want more details about CKS, checkout
my previous post for more info Now
I'm a Certified Kubernetes Security Specialist + exam tips.
The recording of Kubernetes Security Best Practices session
Overview:
A dive into Kubernetes Security Best Practices and tips for the
Certified Kubernetes Security Specialist (CKS) exam.
The 1-3 sections are for everyone and will cover the container era's
security. So it doesn't matter your title or background; they are a good
start for anyone.
The 4-6 sections will dive more into Kubernetes security, so DevOps
engineers and SREs will probably find that more interesting. But in
general, anyone interested in Kubernetes security is more than
welcome.
That's it, enjoy :-)
