Kubernetes best practices
While KCNA is not a security-focused certification, you are expected to know a few basics and best practices about Kubernetes and Cloud Native, and now is the time to talk about those.
Kubernetes’ documentation suggests the 4Cs of Cloud Native security: Cloud, Clusters, Containers, and Code—an approach with four layers for in-depth defense:
Figure 8.4 – 4Cs of Cloud Native security
In this approach, the inner circle security builds upon the next outermost layers. This way, the Code layer is protected by the bases of the Container, Cluster, and Cloud layers, and you cannot safeguard against poor security standards and practices in the base layers by addressing the security on the level of Code, just as you cannot disregard the need to secure the innermost circle even when you have very strong security in the outer layers. Let’s see why in more detail and what each layer of the 4Cs means.
Starting...