From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
Storage and security wrap-up
From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Storage and security wrap-up
All right. And last but certainly not least, there is storage. Okay. Now, storage is like a hard drive. And in Kubernetes, those 'hard drives' are volumes. Now, the biggest thing from a storage perspective in Kubernetes is that you want to ensure that the storage is backed up and there's nothing malicious saved to that storage. So no one wants a zero-day or a fully-encrypted volume that you have to pay to get unencrypted, right? Ensure that you backup volumes and you test recovery, which is the same thing with any type of data and storage in the tech world, right? Now, throughout this section, we've went through each component and how to secure it. And now that we've done that, we want to kind of think about overall cluster security. That should be done for every cluster as a whole. Now, if we just take a look here and we see everything that we've talked about from pods to kube-proxy to etcd to the scheduler, to every single component in the worker node and the control plane, we want…