Zero Trust Kubernetes
Wednesday, 1:30 PM EST - BEACH SALON
Out of the box (remember when software used to come in a box), Kubernetes was never meant to be secure. There is configuration work that must be applied to lockdown and shore up its various attack vectors. You can put up all the perimeters, regions, and safety zones you want but these do not ensure ZT security.
Implementation of Zero Trust (ZT) and Zero Trust Architecture (ZTA) is not a nice to have or something that should be addressed eventually. The January 2022 White House Memo M-22-09 requests that:
> This memorandum sets forth a Federal zero trust architecture (ZTA) strategy, requiring agencies to meet specific cybersecurity standards and objectives by the end of Fiscal Year (FY) 2024 in order to reinforce the Government’s defenses against increasingly sophisticated and persistent threat campaigns. Those campaigns target Federal technology infrastructure, threatening public safety and privacy, damaging the American economy, and weakening trust in Government.
Zero Trust is a necessity, not just from a government edict, but also from an imperative need for cloud computing security.
This session is for developers that would like to understand the tools and techniques that can be applied to help their teams prepare for ZT Kubernetes clusters.
About Jonathan Johnson
Jonathan Johnson is an independent software architect with a concentration on helping others unpack the riches in the cloud native and Kubernetes ecosystems.
For 30 years Jonathan has been designing useful software to move businesses forward. His career began creating laboratory instrument software and throughout the years, his focus has been moving with industry advances benefitting from Moore’s Law. He was enticed by the advent of object-oriented design and applied it to financial software. As banking moved to the internet, enterprise applications took off and Java exploded onto the scene. Since then, he has inhabited that ecosystem. After a few years, he returned to laboratory software and leveraged Java-based state machines and enterprise services to manage the terabytes of data flowing out of DNA sequencing instruments. As a hands-on architect, he applied the advantages of microservices, containers, and Kubernetes with a laboratory management platform.
Today he enjoys sharing his experience with peers. He provides perspective on ways to modernize application architectures while adhering to the fundamentals of modularity - high cohesion and low coupling.microservices, containers, and Kubernetes to their laboratory management platform.
More About Jonathan »