Security Hardening Kubernetes

Thank you to my colleague Johan Tordsson for giving this talk. I think this is a very important topic, because Kubernetes is neither secure by itself nor (definitely!) by default.

Developers and operators in today’s digital world are facing an ever-increasing set of regulatory requirements, security challenges and privacy concerns. In addition to constant attacks on IT assets there is growing legal pressure to deliver and maintain regulatory guidelines in our networked world. Requirements such as PCI-DSS, HIPAA, GDPR or SOC2 are becoming the pre-requisite of any operation in various industries.

Modern cloud native architectures and Kubernetes provide tools to address these demands, but the knowledge of these tools and methods are not widely understood. Today what is needed most is guidance on what exists and how best to use the right resources to meet the security and compliance requirements while still benefiting from the speed and agility Cloud Native environments offer.

In this video Johan Tordsson, CTO of Elastisys, provides provide a deep dive on security development tools and open source Kubernetes services available to meet these growing needs.