Securing workloads and apps

Kubernetes provides different built-in and third-party solutions to ensure that your production workloads are running securely. We will explore what we regard as a must-have for your cluster before going to production, such as workload isolation techniques, pod security policies, network policies, and monitoring workload runtime security.

Isolating critical workloads

Kubernetes, by design, has a single control plane for each cluster, which makes sharing a single cluster among tenants and workloads challenging, and requires the cluster owners to have a clear strategy about cluster multi-tenancy and resource sharing.

There are different use cases where it is critical to address tenant and workload isolation:

• In many organizations, there are multiple teams, products, or environments that share a cluster.
• There are cases where you provide Kubernetes as a service for your own organization or external organizations.
• Also, there is a...