Do’s and don’ts in building Cloud Native Platforms

Workload Isolation Multi-Tenancy Containers are not secure, isolated bunkers Critical is the integration between cluster and further services There are three levels of isolation: ● ● ● Linux Containers - simple and light but insecure Sandboxed Containers - not for every use case but simple, better security VM based Containers - resource hungry but great isolation your Security ❤ lives here ● ● ● Isolation is nothing without a proper IAM Most difficult: align the on cluster rights and roles with the e.g. cloud resources - requires often a poor 3rd party integration On K8s the OSS project Kiosk is very helpful Check out the Kubernetes Multi-Tenancy WG benchmark to see where you are standing: https://github.com/kubernetes-sigs/multi-tenancy/tree/master/benchmarks