Multi-Layer Hardening in Kubernetes - DevSecOps Practices and Tools

Explore multi-layer hardening techniques for Kubernetes in this 26-minute conference talk by Kavya Rengaraj from the Cloud Native Computing Foundation (CNCF). Gain insights into DevSecOps practices for securing Kubernetes environments, understanding the attack surface, and addressing security aspects of Kubernetes components. Learn about industry standards and essential toolsets such as KubeScore, KubeScape, Kubebench, KubeLinter, and Falco to enhance your organization's overall security posture. Discover how to implement a DevSecOps pipeline with a unified view of toolchains, incorporating shift-left and shift-right security practices to mitigate risks associated with misconfigurations and potential attacks in complex Kubernetes architectures.