Kubernetes networking still relies heavily on implicit trust. Once a workload is inside the cluster, it can often talk to anything else — a dangerous assumption in today’s cloud-native world.

Zero Trust changes this model by denying all traffic by default and allowing only explicitly defined connections based on identity, not IP addresses. Cilium, powered by eBPF, enables this approach natively on Azure Kubernetes Service (AKS).

Join Rolf Schutten, Cloud Evangelist, Microsoft Azure MVP, and Director Technology & Services at Conclusion Enablement, as he explains how Zero Trust networking works in Kubernetes and demonstrates how to implement default-deny and explicit allow policies using Cilium on AKS.