CNCF Communities Book Club - Chapter 9: Building Multi-tenant Clusters with vcluster
In this session, book authors Mark and Scott joined to discuss Chapter 12 focusing on Node Security with Gatekeeper.
The conversation involves a discussion on Kubernetes security, specifically focusing on Gatekeeper and its role in policy enforcement. The speakers discuss the challenges of securing Kubernetes nodes, the differences between containers and virtual machines, and the complexities of implementing security measures like validating admission controllers and pod security policies. They also touch on the use of Gatekeeper for node security and the debate around using distroless containers. The conversation highlights the importance of balancing security with operational needs and the complexities of managing security in enterprise environments, especially when dealing with external vendors. The discussion concludes with the acknowledgment of the ongoing need to address security challenges in Kubernetes deployments.
Join us next week for Part 4 of our book club series! For questions and discussions, join us on Slack.
Note: This is part of the "Kubernetes Communities & Enterprise Guide" book club series.
#kubernetes #CNCF #multitenancy #vcluster #bookclub
Event Date 2024/11/01