OpsCanary
Learn/DevSecOps/Network Security
DevSecOps

Network Security

4 articles from official documentation

Practitioner4 articles
securitynetwork securityPractitioner

Mastering Network Policies in Kubernetes: Security Without Compromise

Network policies are crucial for securing your Kubernetes pods from unwanted traffic. Understanding how to implement them effectively can save you from potential security breaches. Dive into the specifics of Cilium and Kubernetes Network Policies to enhance your cluster's security posture.

  • Implement NetworkPolicies to control traffic flow to and from your pods.
  • Use CiliumNetworkPolicy for advanced Layer 3-7 security specifications.
5 min read·Cilium Docs
Read article
securitynetwork securityPractitioner

Mastering Multi-Tenancy in Kubernetes: Security and Isolation Strategies

Multi-tenancy in Kubernetes is crucial for securing workloads in shared environments. Understanding how namespaces and RBAC work together can make or break your security posture. Dive in to learn the specifics that matter in production.

  • Utilize namespaces for isolating API resources within a cluster.
  • Implement RBAC to enforce strict authorization for users and workloads.
5 min read·Kubernetes Docs
Read article
securitynetwork securityPractitioner

Implementing Istio Authorization Policies: Allowing HTTP Traffic with Precision

Securing your Istio mesh is critical for protecting workloads. This article breaks down how to set up an ALLOW action for HTTP traffic using Istio's AuthorizationPolicy. You'll learn how to incrementally grant access while maintaining a strong security posture.

  • Create a baseline security policy with an `allow-nothing` AuthorizationPolicy.
  • Gradually define ALLOW actions for specific workloads using the `spec.selector` and `spec.rules` fields.
5 min read·Official Docs
Read article
securitynetwork securityPractitioner

Mastering Access Control for the Kubernetes API

Securing the Kubernetes API is critical for protecting your cluster. Understanding the multi-layered approach—transport security, authentication, and authorization—can save you from major security pitfalls. Dive into the specifics of how to configure these layers effectively.

  • Secure the API server by configuring it to listen on port 6443 with TLS.
  • Authenticate requests using various modules to ensure they come from valid users.
5 min read·Kubernetes Docs
Read article
Linux FoundationSponsor

Industry-standard certifications built by the people behind Linux and Kubernetes. Earn the CKS — the advanced Kubernetes security specialist cert. OpsCanary readers get 30% off year-round with code OPSCANARY3.

Get CKS certified →

Get the daily digest

One email. 5 articles. Every morning.

No spam. Unsubscribe anytime.