How To Secure Everything Without Making Everyone Suffer
Source: YouTube · DevOps & AI Toolkit · published Apr 3, 2023 · 26:52
The video presents Kubernetes as a secure control plane enabling productivity through abstraction, policies, and GitOps.
Key Takeaways:
• Create CRDs for high-level abstractions like "Application" to let users manage concepts while controllers handle implementation details 4:26-10:36
• Enforce configurations using tools like Kyverno to implement policies ensuring correct resource specifications regardless of who interacts with the system 11:19-12:41
• Utilize GitOps (e.g., ArgoCD) to manage access by having tools pull manifests from Git repositories, eliminating direct CLI access to clusters 15:39-20:03
Combining these K8s strategies builds secure environments supporting fast development without sacrificing productivity.
Sources:
- 0:36-1:45 Security access control challenges
- 4:26-10:36 CRDs and controllers for resource abstraction
- 11:19-12:41 Implementing policies with Kyverno
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
today is the day we talk about security are you safe no no wait wait don't answer the question I don't care about that right now the real question is whether your systems are safe whether they're secure no okay scratch that as well that's not today's topic here comes the real question how can we secure everything without making everyone suffer yeah that sounds about right [Music] the following questions need to be answered when talking about security one is the access to your system secure is it done in a way that prevents unauthorized access to humans and processes if that's the case what can those who do have access do second once you do have access to many specific types of resources what is required to ensure that you will follow good practices so that resources are created and managed…