Understand and implement security at scale for your kubernetes workloads

Understand and implement security at scale for your kubernetes workloads

1. Reminder of the different attack surfaces
A. External network isolation
b. Endpoint Protection
vs. Expose Services Securely
d. Container behavior (kernel + network capabilities)
e. Internal network communication
F. Cloud Metadata
g. Cloud privilege escalation
h. SDLC. Offensive

2. Countermeasure with Anthos
A. Admission controller and mutation Policy
b. Network policies with cilium and dataplaneV2
vs. Gitops approach with Anthos configuration management
d. Anthos Service Mesh
e. Observability
F. Binary permission for ci/cd container
g. Other possible options (IAP, managed certificates, global load balancing
h. Ready for production