Kubernetes Security

Kubernetes is a complex system with many security-relevant configuration points.

Security Areas

• Cluster security - API server authentication, RBAC, network policies
• Pod security - Security contexts, pod security policies/standards
• Secret management - Using external secret managers
• Network security - Network policies, service mesh
• Supply chain - Image verification, admission controllers