From Static Tokens to Attestation: The Evoluti... Ciprian H, Jack Francis M, Josephine P, & Justin B

This talk explores the evolution of secure node joining in Kubernetes, featuring panelists from Microsoft, Red Hat, and Google. The speakers discuss how current practices, such as Karpenter's rapid capacity deployment and the Cluster API's management of machine fleets, necessitate improved security measures beyond the traditional "if the kubelet connects, it’s in" approach. Topics covered include defining a root of trust, validating node identities through metadata and attestation, and implementing security controls like NodeRestriction and scoped RBAC to prevent privilege creep. This session aims to provide insights into the future of secure node joining, ensuring that only authorized nodes gain access to the cluster.