Security & Service Meshes

PodCTL - Enterprise Kubernetes

Show: 49
Show Overview: In a joint show between The Cloudcast and PodCTL, Brian and Tyler talk with John Morello (@morellonet, CTO at @TwistlockTeam) about how Service Mesh technologies, such as Istio, can be used for more advanced security of containerized applications and Kubernetes environments.
Show Notes:

• Twistlock Website
• Securing Istio and Kubernetes
• Making Istio Security Layer Easier to Monitor
• Service Mesh Tutorials

Topic 1 - Welcome to the show. Tell us about your background, and introduce us to Twistlock for anyone that isn’t familiar with the company.
Topic 2 - One of the most popular concepts in the world of containers and Kubernetes is “Service Mesh” (projects like Istio). Let’s talk about the basics of what a service mesh does.
Topic 3 - Service mesh provides routing capabilities, so let’s talk about where security comes into the picture.
Topic 4 - Service mesh introduces a concept in Kubernetes where you deploy multiple containers in a pod, one the application and one the service-mesh proxy. Does security introduce yet another container/agent into a pod?
Topic 5 - What sort of tools are available today for security professionals are service meshes are introduced into a container environment?

Feedback?

• Email: PodCTL at gmail dot com
• Twitter: @PodCTL
• Web: http://podctl.com