Security Reality Check

Security in general, and especially in Kubernetes, is an ironic thing. Everyone knows it’s important, yet it’s not held to the same necessity as, for example, developers. In fact, if you look at the ratio, there’s probably 1 security engineer to 100 developers. Environments aren’t secure out of the box, especially when it comes to access control, yet security is arguably one of the most overlooked pieces of Kubernetes. Because of the lack of security awareness around Kubernetes, this chapter is going to focus on a little bit of everything that you should be thinking about when securing a Kubernetes environment.

From a theoretical perspective, you’ll be learning how to think about security in Kubernetes. From a hands-on perspective, you’ll be learning not only how to implement security practices, but which tools and platforms to use.

When thinking about production, this chapter may very well be the most important...