Security Q&A

[tvansteenburgh]

12:01 hi team, quick question about K8s and security. A customer is specifically asking "Do you have some detailed information about the security measure from canonical side regarding kubernetes and maas environments and also the possibilties we have to tune our security?". I cannot find anything documented. Any ideas?

12:07 ivanhitos: We have multiple layers of security. Kernel: livepatch. OS: unattendend upgrades and CIS hardening. Kubernetes infra: CIS hardened configuration. Kubernetes workloads: Network policy via Calico; Declarative pod security policy; Secure container runtime (Kata Containers). All of the Kubernetes-level security options are configurable.