Securing Containers, First Steps in Docker and Kubernetes

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course. https://learn.bretfisher.com/waitlist🍾Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.Streamed live on YouTube on July 7, 2022.Unedited live recording of this show on YouTube (Ep #177).★Topics★Bret's Container Security AMADocker Security DocsDocker Buys AtomistSlim.ai website: Auto-slimming imagesDocker Slim toolKubescape websiteKubernetes Security ContextSeccomp by defaultLint all files with super-linterDatree K8s file scanKubernetes BenchmarkMy GitHub Actions examples: Automate your builds, CVE scans, and moreVideo on building a more secure base imageSnyk security tools websiteTrivy CVE and K8s scansFalco for watching servers for bad behavior★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - Intro (00:52) - Mid-Roll Intro (00:53) - Bret's Intro (03:23) - Main show (04:22) - What should I worry about first? The Basics! (05:24) - Start with images (06:05) - Bret.show/SecurityFirst (06:41) - CVE scanning (07:13) - Dependency scanning (08:05) - Bret's Github with Dependabot (09:02) - OS dependencies with Trivy and Snyk (11:00) - Bret's Talks (11:54) - Alpine is not always good (13:04) - All hands on automation (13:51) - Don't run as root inside the image (15:41) - Question (16:57) - Making slimmer images (17:29) - Atomist (18:56) - DockerSlim (22:25) - Question (23:58) - Question (25:46) - Question (26:13) - Question (26:22) - Question (26:52) - Securing Docker (27:24) - Docker host scanner (28:05) - Falco (28:32) - Just use Docker (30:05) - Question about Windows Containers (31:56) - Maintain your servers (32:49) - Docker in the cloud (34:06) - Always stay on the latest Kubernetes release (35:10) - Kube-bench (35:59) - Tree.io (36:41) - Pod specs (37:45) - Sec comp (39:10) - Security context (40:34) - Privilege escalation (41:27) - Superlinter (42:31) - Question about Fargate (44:12) - Network policies (46:15) - Kubernetes docs article on security context (46:53) - Question (49:20) - Third-party security monitoring (49:34) - Question about volumes (50:22) - Question about Docker subnets (51:07) - Question about secrets (51:54) - Question about subnets 2 (52:25) - Question (54:40) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

There are no comments yet.

Please log in to write the first comment.