Let's Learn Kubernetes Security
Source: YouTube · Kubesimplify · published Sep 26, 2020 · 1:22:19
The video focuses on Kubernetes security, explaining that Kubernetes is not secure by default and requires specific security measures 1:43-1:48. The hosts cover the "four C's of cloud native security" including cloud/infrastructure, cluster, container, and code security layers 9:23-9:55.
Key Takeaways:
• Kubernetes requires security measures across multiple layers: infrastructure, cluster, container, and code 9:23-9:55
• Attackers can target various components including API servers, etcd, kubelets, and exposed ports 15:00-16:10
• CIS Benchmarks provide security best practices for Kubernetes clusters 25:41-26:36
• Pod Security Policies can prevent privileged pods from being created 40:00-40:25
• Regular security scanning and vulnerability assessment tools are essential 42:49-43:19
The session includes practical demonstrations of securing clusters and implementing security controls.
Sources:
- 1:43-1:48 Discussion on Kubernetes not being secure by default
- 9:23-9:55 Explanation of the four C's of cloud native security
- 15:00-16:10 Potential attack surfaces in Kubernetes
- 25:41-26:36 Overview of CIS Benchmarks for Kubernetes
- 40:00-40:25 Pod Security Policies demonstration
- 42:49-43:19 Security scanning tools overview
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
okay it's time it's 9 30 isd and i hope you are able to see the screen you're able to hear me loud and clear and keep on coming in the chat and start uh saying hi hello and from where are you what are you doing how's life how things are going on how you're planning the weekend and then we'll get started and yes today today we have a lot of things planned and you can see in the slides that today's main topic is kubernetes security so i along with my special guest dan pop will be talking about kubernetes security whom i'll introduce shortly and make sure you subscribe to the youtube channels that you're seeing on the screen and this is very interesting uh that you are seeing right now uh which is uh hub station uh challenges so hacktoberfest is coming and everybody knows that this this whole…