Evolution of security strategies in K8s environments - Jose Manuel Ortega

This talk explores the evolution of security strategies in Kubernetes, focusing on user and developer access policies to the cluster. The speaker discusses key concepts such as security contexts that simplify access control and privileges for pods and containers. Furthermore, the session examines the Pod Security Policy (PSP), which allows cluster administrators to set policies while developers adhere to them, as well as the Open Policy Agent (OPA) for managing authorization policies and user permissions. The discussion covers the introduction to security strategies, the comparison of Pod Security Admission (PSA) and OPA, the integration of various security strategies, and the implications for accessing resources in both privileged and non-privileged modes.