Applying Least Privileges through Kubernetes Admission Controllers - Benjy Portnoy, Aqua Security

Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018 ( http://bit.ly/KCCNCNA18) or in Shanghai, November 14-15 ( http://bit.ly/kccncchina18).

Applying Least Privileges through Kubernetes Admission Controllers - Benjy Portnoy, Aqua Security (Intermediate Skill Level)

An admission controller intercepts requests to the Kubernetes API server prior to persistence of the object. By applying proper admission controls in your Kubernetes cluster, it's possible to generate deployments that adhere to the least privilege model, limiting user and container activity based on their business usage needs.

In this session, we will review the latest and greatest Kubernetes 1.9 admission controller capabilities, we will demonstrate in a live demo a dynamic admission control webhook that can be customized to limit privileged user access.

About Benjy Portnoy
Benjy is a seasoned cyber security professional with over 15 years experience in consulting, designing, and implementing strategic information security projects for organizations across EMEA. He is currently the director of DevSecOps at Aqua Security, helping enterprises streamline security into their DevOps processes to help secure their containerized applications. Prior to joining Aqua Security, Benjy held senior security architect roles at CA, BlueCoat, and Symantec where he worked closely with CSO’s and security operations teams focusing on vulnerability management, datacenter security, and incident response. Benjy holds both CISA (Certified Information Systems Auditor) and CISSP (Certified Information Systems Security) certifications and is currently completing his master's degree in Information Security and Digital Forensics.
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21! Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.

Join us for KubeCon + CloudNativeCon in San Diego November 18 - 21. Learn more at https://bit.ly/2XTN3ho. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.

Applying Least Privileges through Kubernetes Admission Controllers - Benjy Portnoy, Aqua Security kube context
26 Likes	26 Dislikes
1,346 views views	32.6K followers
Science & Technology	Upload TimePublished on 11 May 2018

Related keywords

containerization definition,kubernetes configmap,developer experience conference,kubernetes tutorial,kubernetes docker,microservices with spring boot example,kubecon schedule,orchestration servicenow,developer experience best practices,developer experience survey,linux foundation 福安,cloud native architecture,kubernetes cronjob,kubeconfig token auth,containers docker,cloud native application bundle,containers vs vms,developer experience kpis,linux foundation open source summit,developer experience specialist digitalocean,developer experience definition,containerization history,cncf blog,orchestration service,kubernetes service,kubernetes dashboard,cncf slack,developer experience engineer,microservices شرح,modern architecture pdf,orchestration engine,linux foundation kubernetes,modern architecture paris,microservices node js,cloud native conference,orchestration music,linux foundation training,kubernetes architecture,cloud native landscape,microservices tutorial java,cncf membership,modern architecture styles,containerization cloud,cloud native devops with kubernetes pdf,containers to keep food warm,modern architecture house,microservices vs monolithic,cncf survey,cncf trail map,kubernetes ingress,orchestration meaning in hindi,microservices java,cncf github,developer experience tools,microservices ماهو,kubecon 2018 schedule,microservices patterns,kubecon discount code 2019,containerization in logistics,cloud native apps,cloud native montreal,linux foundation ai,linux foundation projects,linux foundation 資格,kubernetes the hard way,containers with windows,orchestration in tagalog,containers storage,microservices in .net,linux foundation login,orchestration platform,modern architecture houses,linux foundation edge,cncf istio,kubecon 2018,kubernetes hpa,cloud native computing foundation,modern architecture contracting co,linux foundation wiki,cloud native development,microservices interview questions,modern architecture examples,modern architecture characteristics,kubeconfig format,cloud native platform,kubernetes pod,cloud native database,cloud native principles,kubecon cfp,modern architecture ppt,cncf wiki,microservices design patterns,kubeconfig eks,containers for slime,orchestration synonym,orchestration meaning in urdu,developer experience product manager,kubecon cfp 2019,containers on wheels,cncf conference,kubeconfig,containerization software,kubernetes github,containerstore locations,linux foundation 横浜,linux foundation networking,microservices example,containerization with lxc pdf,containers target,containers and packaging,developer experience specialist,orchestration tools,microservices wiki,cloud native day montreal,containers with lids,containers for cereal,containerization meaning,developer experience metrics,kubecon 2019 usa,developer experience levels,containerization benefits,containerstore,kubeconfig certificate-authority-data,cncf reference architecture,orchestration system,cloud native java,linux foundation 2.0 root hub,containerization vs virtualization,modern architecture history,kubernetes rbac,microservices vs soa,developer experience design,developer experience jobs,cloud native day,modern architecture since 1900,linux foundation member,developer experience team,kubernetes job,linux foundation hyperledger,orchestration definition,containerization and microservices,containerization benefit,kubecon nyc,orchestration online,kubernetes load balancer,cncf members,modern architecture a critical history,fnbforyou,kubecon 2020,cncf prometheus,linux foundation onos,containers walmart,kubernetes deployment,linux foundation id,containerization docker,containerization technology list,kubecon china,modern architecture timeline,orchestration layer,cncf landscape,containerization app,orchestration meaning in telugu,microservices tutorial,containerization security,orchestration means,orchestration vs choreography,orchestration docker,containerization platforms,containers for food,microservices architecture java,modern architecture in india,microservices c#,orchestration meaning in tamil,containers for meal prep,kubernetes secret,containerization system,kubecon barcelona,kubernetes logo,kubeconfig file,developer experience resume,orchestration vs automation,containerization international,cloud native devops with kubernetes,cncf certification,containers for sale,linux foundation board,kubernetes operator,cncf cloud native definition,cloud native patterns,linux foundation 3.0 root hub,cloud native java pdf,modern architecture definition,cncf full form,modern architecture contracting co ltd,microservices vs api,containerization technology,cnc full form,modern architecture contracting company,kubeconfig proxy,containerstore coupon,modern architecture homes,microservices with spring boot,containerization kubernetes,developer experience letter,developer experience dx,modern architecture since 1900 pdf,modern architecture a critical history pdf,containers for clothes,cloud native technologies,linux foundation event,containers and microservices,microservices architecture,cncf projects,kubernetes aws,developer experience api,cloud native application platform,cncf training,kubeconfig token,