Adopting Network Policies in Highly Secure Environments

May 01, 2023 33 min Free

Description

This talk focuses on strategies for adopting Kubernetes Network Policies in highly secure environments. It delves into the fundamentals of Cilium Network Policies, application-aware, and identity-based security. The presentation compares default-allow with default-deny policies, emphasizing a risk-based approach and exploring various exposure types and security strategies. It also showcases how observability tools like Cilium, Hubble, and Grafana can be leveraged to visualize network connections and configure Network Policies using a dedicated editor. Finally, it touches upon Network Policy Guardrails for maintaining control while enabling team self-service.