Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Security Considerations for Container Runtimes - Daniel Walsh, Red Hat

Explain/demonstrates using Kubernetes with different security features for your container environment General Concept - Run containers without root, period - Take advantage of all security features the host provides Configuring CRI-O: - Run containers with read-only images - Limit the Linux capabilities running within your container - Set up container storage to modify the storage options in a more secure manner - Configure alternative OCI Runtimes: Kata, Gvisord and Nabla to run locked down containers Building images with security in mind. - Limit packages/attack surface of container images - Build container images within a locked down kubernetes container Advances in User Namespaces - Demonstrate running each container with a different User Namespace - Configure system to take advantage of user namespace container separation, without taking a drastic speed hit And many more...

To learn more: [ Ссылка ]

свернуть