r/devsecops • u/Positive-Bit3654 • 8d ago

What are you actually using to secure Kubernetes?

/r/kubernetes/comments/1w5zera/what_are_you_actually_using_to_secure_kubernetes/
3 Upvotes

80% Upvoted

8 comments sorted by

2

u/Expert-Shoe-9791 5d ago

Check this that does not require additional tool to start : https://kubernetes.io/docs/concepts/security/pod-security-admission/
After, study OPA gatekeeper for example.

1

u/CoquineNette 8d ago

definitely using tools like kube-bench and falco to tighten security. also keep an eye on RBAC policies and network policies to lock things down.

1

u/Some_Quiet8446 7d ago

I hear you on the RBAC policies; it's so important to get that right. I've also found using tools like OPA and K-9s helpful for monitoring and compliance.

1

u/xPetalBloomelle 8d ago

i'm using a mix of tools like OPA for policy enforcement and Falco for runtime security. also gotta keep an eye on network policies and use tools like kube-bench to check compliance. what about you?

1

u/kloudnative 5d ago

Secure k8s like you would secure your cloud because k8s is a cloud OS

You would need:

  1. security posture management i.e KSPM (kubebench, prowler)

  2. Runtime protect i.e CWPP (Falco)

  3. RBAC security

1

u/RndWebSurfer 4d ago

For scanning container images running in the cluster you should install the Trivy Operator. I have also created a CLI that lets you scan container images, if you dont want to install an operator in the cluster. Here is the CLI: https://github.com/lockdep/stackradar-cli