Kubernetes Cluster Security and Usability: Best Practices and Common Pitfalls

This talk examines common Kubernetes cluster misconfigurations and practical defensive measures for securing clusters as they grow. It covers authentication, access control, network isolation, admission control, and security challenges in multi-tenant deployments.

Syllabus

Intro
What is Kubernetes?
So, What is Core Kubernetes?
Why is this important?
Where does Usability Come in?
Exposed Clusters
Outdated Clusters
Solution - Clusters As Cattle Not Pets
Kubernetes Authentication
Solution - Enforced External AuthN
RBAC Complexity
Solution - Minimal Interactive Access
Flat Networks
Solution - Default Deny Networks
Breakout to underlying nod
Solution - Admission Control
Kubernetes and Multi-Tenan
Solution - Kubernetes Cluster API
A Secure Kubernetes Solution
Conclusion