Chapter 1. Security and Observability Strategy
In this chapter, we will cover a high-level overview of how you can build a security and observability strategy for your Kubernetes implementation. Subsequent chapters will cover each of these concepts in more detail. You need to think about a security strategy when you are in the pilot/pre-production phase of your Kubernetes journey, so if you are part of the security team, this chapter is very important. If you are part of the network, platform, or application team, this chapter shows how you can be a part of the security strategy and discuss the importance of collaboration between the security, platform, and application teams.
We will cover the following concepts that will guide you with your security and observability strategy:
How securing Kubernetes is different from traditional security methods
The life cycle of deploying applications (workloads) in a Kubernetes cluster and best practices for each stage
How you should implement observability to help with security
Well-known security frameworks and how to use them in your security strategy
Security for Kubernetes: A New and Different World
In this section we’ll highlight how Kubernetes is different and why traditional security methods do not work in a Kubernetes implementation.
As workloads move to the cloud, Kubernetes is the most common orchestrator for managing them. The reason Kubernetes is popular is its declarative nature: It abstracts infrastructure details and allows ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access