Kubernetes Security

Operating Kubernetes Clusters and Applications Safely


Kubernetes Security
Kubernetes Security
Compliments of Aqua

Book Details

Authors Liz Rice, Michael Hausenblas
Publisher O'Reilly Media
Published 2018
Edition 1st
Paperback 85 pages
Language English
ISBN-13 9781492039075, 9781492039068
ISBN-10 1492039071, 1492039063
License Compliments of Aqua

Book Description

Kubernetes has fundamentally changed the way DevOps teams create, manage, and operate container-based applications, but as with any production process, you can never provide enough security. This practical ebook walks you through Kubernetes security features - including when to use what - and shows you how to augment those features with container image best practices and secure network communication.

Liz Rice from Aqua Security and Michael Hausenblas from Red Hat not only describe practical security techniques for Kubernetes but also maintain an accompanying website. Developers will learn how to build container images with security in mind, and ops folks will pick up techniques for configuring and operating a Kubernetes cluster more securely.

- Explore security concepts including defense in depth, least privilege, and limiting the attack surface
- Safeguard clusters by securing worker nodes and control plane components, such as the API server and the etcd key value store
- Learn how Kubernetes uses authentication and authorization to grant fine-grained access
- Secure container images against known vulnerabilities and abuse by third parties
- Examine security boundaries and policy enforcement features for running containers securely
- Learn about the options for handling secret information such as credentials
- Delve into advanced topics such as monitoring, alerting, and auditing, as well as sandboxing and runtime protection


This book is published as open-access, which means it is freely available to read, download, and share without restrictions.

If you enjoyed the book and would like to support the author, you can purchase a printed copy (hardcover or paperback) from official retailers.

Download and Read Links

Share this Book

[localhost]# find . -name "*Similar_Books*"


Taking Kubernetes from Test to Production

Kubernetes

With Kubernetes came many new concepts, particularly around networking and traffic management. Alongside these new concepts were entirely new classes of tools, designed for ephemeral, containerized, and distributed application deployments. In particular, Ingress controllers and service meshes did not exist prior to the Kubernetes era. Nor were Laye

Cloud Native DevOps with Kubernetes, 2nd Edition

DevOps Kubernetes Cloud

Kubernetes has become the operating system of today's cloud native world, providing a reliable and scalable platform for running containerized workloads. In this friendly, pragmatic book, cloud experts Justin Domingus and John Arundel show you what Kubernetes can do-and what you can do with it. This updated second edition guides you through the gro

Kubernetes Security and Observability

Kubernetes

Securing, observing, and troubleshooting containerized workloads on Kubernetes can be daunting. It requires a range of considerations, from infrastructure choices and cluster configuration to deployment controls and runtime and network security. With this practical book, you'll learn how to adopt a holistic security and observability strategy for b

Deep Learning for Coders with Fastai and PyTorch

Python

Deep learning is often viewed as the exclusive domain of math PhDs and big tech companies. But as this hands-on guide demonstrates, programmers comfortable with Python can achieve impressive results in deep learning with little math background, small amounts of data, and minimal code. How? With fastai, the first library to provide a consistent inte

Intel Galileo and Intel Galileo Gen 2

Arduino Linux Assembler C / C++ Java

Intel Galileo and Intel Galileo Gen 2: API Features and Arduino Projects for Linux Programmers provides detailed information about Intel Galileo and Intel Galileo Gen 2 boards for all software developers interested in Arduino and the Linux platform. The book covers the new Arduino APIs and is an introduction for developers on natively using Linux.

Managing Kubernetes

Kubernetes

While Kubernetes has greatly simplified the task of deploying containerized applications, managing this orchestration framework on a daily basis can still be a complex undertaking. With this practical book, site reliability and DevOps engineers will learn how to build, operate, manage, and upgrade a Kubernetes cluster - whether it resides on cloud