AirGap_zusammen_neu.pdf

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

1
Air Gap - short intro and why it isn't
complicated at all!

2
Content
01
02
03
04
05
About us
Overview Standard Kubernetes Environment
Air Gap – what is it?
Short demonstration
Concl...

3
About us

4
Portfolio
www.kubeops.net
• Project support for installation of
Kubernetes
• Implementation of workshops
• Producer of a...

5
Presenter
Tobias Altmann
DevOps Engineer
Ralf Menti
Kubernetes Trainer
Vincent Mattes
Developer

6
Overview common
Kubernetes Enviroment

8
Kubernetes Standard Implementation
(Image Source)
Internet
Internet

9
Some facts about Kubernetes
Source: Canonical /Forbes
• 21.4% of respondents are managing more than 500 machines on a da...

10
• Vulnerable base image and dependencies
• Security features like TLS or RBAC deactivated by
default
Vulnerable
Image-S...

11
Where do base images or the chart itself come from?
• Questionable Supply chains
• Risk: containers used for attacks li...

12
• Enable Kubernetes Role-Based Access Control (RBAC)
Kubernetes Security
• Use Third-Party Authentication for API Serve...

13
• Secure following directories ! – Only access for Admin!
Kubernetes Security
• /etc/kubernetes/
• /var/lib/kubelet/
• ...

14
Example: Security concept whitelisting
Environment
Cluster
Node
Pod
Container

15
What is an Airgap Environment ?

16
Airgap Environment
• Restricted InternetConnection (e.g. by Firewall)
• Cluster can only connect to Software Hub/Regist...

17
Kubernetes Air Gap Implementation
Internet
Image: Faun.pub
Proxy /
Firewall
Controlled Cluster – no connection outside ...

18
Common Problems
• Missing sudo commands when installing kubernetes with yum
• Restriction of permissions for certain di...

19
Pro‘s and Con‘s
Pros Cons
Airgap prevents downloading malicious Data Airgap diminishes productivity
Airgap reduces chan...

20
Example: Deploying the ELK
Stack on Kubernetes

21
Example: Deploying ELK Stack on Kubernetes
Official Documentation:
https://logz.io/blog/deploying-the-elk-stack-on-kube...

22
Example: Deploying ELK Stack on Kubernetes
Non-Airgap Environment:
Airgap Environment:

23
Example: Deploying ELK Stack on Kubernetes
Non-Airgap Environment:
Airgap Environment:

24
Example: Deploying ELK Stack on Kubernetes
How to install helm in an Airgap Environment
1. Download helm binary to loca...

25
Example: Deploying ELK Stack on Kubernetes
How to deploy ELK Stack in an Airgap Environment
1. Download chartto local m...

26
Demonstration
Package through tool SINA

27
More Security in an Air Gap Area

28
Conclusion

29
Conclusion
• Kubernetes standard implementation can be fast installed
• But Kubernetes has open doors
• A safe security...

30
Questions? Let‘s connect!
www.kubeops.net
info@kubeops.ne
t

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 30 Ad

1 of 30 Ad