A secure journey on Kubernetes

The container orchestration Kubernetes is like an onion: It has many layers. Each layer has its own set of vulnerabilities, and it is important to learn how to mitigate them.

This workshop will teach the attendees how to analyze, scan, and fix their vulnerabilities in Kubernetes, starting from the infrastructure and moving all the way up to the application runtime. We will explore benchmark tooling (kube-bench) to scan your installation and figure out where security can be increased. We will deploy a Docker registry (Harbor) and check if your docker images have vulnerabilities. Furthermore, we will deploy some rules via Open Policy Agent to validate what is deployed on your clusters.

At the end, you will be able to secure your own installation and clusters by yourself and make your security department happy.

Vorkenntnisse

* Basic understanding of Kubernetes.

Lernziele

* The workshop will enable attendees to go back to their work with a set of tools and a security checklist that they can leverage in their own projects.
* All tools presented in the workshop are Open Source.