Practical Kubernetes Security at Scale

Over the past few years Kubernetes (k8s) has been adopted widely across Schibsted. Currently Schibsted manages about 100 k8s clusters centrally and that number is growing as more as Schibsted brands adopt k8s.

In this talk we will present what to consider and the trade-offs we made to improve security in those clusters. While most of the takeaways should be generally applicable, the examples will be from EKS clusters in AWS.

We will look at k8s and EKS hardening as well as open source and commercial security tools. Security in k8s is a large topic and our goal is to focus on the most important best practices, while keeping the user experience in mind.