{"id":5048,"date":"2022-09-22T16:34:06","date_gmt":"2022-09-22T20:34:06","guid":{"rendered":"https:\/\/solutionsreview.com\/cloud-platforms\/?p=5048"},"modified":"2022-10-07T14:07:35","modified_gmt":"2022-10-07T18:07:35","slug":"kubernetes-zero-trust-model-overview-and-introduction","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/","title":{"rendered":"Kubernetes Zero Trust Model: Overview and Introduction"},"content":{"rendered":"

\"Kubernetes<\/p>\n

This is part of Solutions Review’s Premium Content Series, a collection of contributed columns written by industry experts in maturing software categories. In this submission, Kasten by Veeam<\/a>‘s VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model.<\/strong><\/em><\/p>\n

\"SRKubernetes is the premier open-source container orchestration system, with 86 percent<\/a> of the 6.5 million<\/a> cloud-native developers worldwide using it today. It\u2019s a powerful solution for delivering software efficiently and at scale. Unfortunately, the rapid adoption of Kubernetes has made it a target for cyber-attacks.<\/p>\n

According to IDC, 37 percent of global organizations<\/a> were victims of some form of ransomware in 2021, and 89 percent of organizations<\/a> say that ransomware attacks on Kubernetes environments are an issue. What\u2019s more, 55 percent of respondents in the U.S. that have deployed Kubernetes have already experienced ransomware attacks on their containerized environments.<\/p>\n

The outlook is bleak. Attackers are becoming much more volatile and their attacks more frequent, and built-in security packages are insufficient protection. For example, hackers are attacking storage units in cloud-native environments, targeting not just the clusters but the backups<\/a>, as well. Plus, Kubernetes applications encompass open-source code libraries. Bugs and misconfigured access permissions are common. Cloud-native apps consist of multiple microservices stored across different nodes, and Kubernetes objects contain networking configuration and data. In other words, it\u2019s a complex environment and there are many components to protect.<\/p>\n

Developers must craft full-fledged security strategies to protect their Kubernetes data and apps \u2013 and, increasingly, they\u2019re turning to Zero Trust models.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

What is Zero Trust?<\/strong><\/h3>\n

Rather than a specific tool or technology, Zero Trust is a framework that requires a combination of tools and processes, along with a culture shift within an organization, to be effective. Zero Trust upends perimeter-based security models that operate according to a \u201ctrust but verify\u201d approach, and instead apply the maxim, \u201cNever trust, always verify.\u201d<\/p>\n

In Zero Trust, every identity is considered malicious until proven legitimate. Zero Trust policies are designed to block access to any user or device until its identity is authorized and authenticated \u2013 not once, but on an ongoing basis. Users are granted least privileged access to resources based on \u201cjust-enough\u201d and \u201cjust-in-time\u201d requirements. Devices and users must complete multi-factor authentication to provide evidence of their identity.<\/p>\n

To implement Zero Trust in a Kubernetes environment, the CNCF recommends<\/a> taking into consideration service design and construction, service packaging and container image design, pod specification, platform-based pod policies, and network policy. Here are three best practices to apply:<\/p>\n

Build a Secure Network that is Prepared for the Most Hostile Attacks<\/strong><\/h3>\n

Kubernetes is a new playground for hackers, and no one can predict what types of sophisticated and malicious attacks we may have to ward off. As such, it\u2019s important to prepare for the worst. As you build your network, ensure that all hosts, containers, and serverless functions running across the public or private cloud are secured and continuously monitored to minimize the risk of misconfigurations and vulnerabilities. Network access between microservices should always be verified. Additionally, use micro-segmentation to designate various zones in a datacenter or cloud environment, to isolate workloads and limit traffic.<\/p>\n

Verify and Authenticate Users, Devices, and Incoming traffic <\/strong><\/h3>\n

Assume everything is suspicious. View users, devices, and incoming traffic with a watchful eye, configure access permissions into the software, and require anyone and everyone to verify their identity before gaining access. There are several available security solutions and plugins to choose from, such as client certificates, HTTP basic auth, and bearer tokens. Multi-Factor authentication is key to a strong security posture. It\u2019s also a good idea to limit software permissions and capabilities to only those which the software needs to function.<\/p>\n

Secure Kubernetes Resources with Reliable Backups<\/strong><\/h3>\n

Regardless of the location of your data, apps, and components, reliable and continuous backup of all company data and assets is essential. Your backup solution should be able to capture the entire application, as containerized applications consist of multiple microservices and artifacts. These must be backed up in a consistent manner, so they can be recovered and restored quickly.<\/p>\n

Look for backup and recovery solutions that are native to Kubernetes and agnostic to the virtual or physical infrastructure. Additionally, your solution should be able to back up applications into object storage, as well as handle stateful workloads, which make up about half of the Kubernetes clusters today. Other requirements include the ability to integrate with block storage APIs, S3-compatible object storage, and other file storage formats.<\/p>\n

Finally, implementing Zero Trust into your Kubernetes environment requires educating your developers and other stakeholders in your organization about the importance of security, and ensuring they understand that security is a shared responsibility. Ample education and training about Zero Trust policies and procedures is a must to establish and maintain a culture of security that\u2019s strong enough to protect your organization\u00a0 \u2013 and its cloud-native data and applications \u2013 in an increasingly hostile cyber landscape.<\/p>\n

<\/div>\n
\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

This is part of Solutions Review’s Premium Content Series, a collection of contributed columns written by industry experts in maturing software categories. In this submission, Kasten by Veeam‘s VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model. Kubernetes is the premier open-source container orchestration system, with […]<\/p>\n","protected":false},"author":324,"featured_media":5053,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[],"acf":[],"yoast_head":"\nKubernetes Zero Trust Model: Overview and Introduction<\/title>\n<meta name=\"description\" content=\"Kasten by Veeam's VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gaurav Rishi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/\",\"name\":\"Kubernetes Zero Trust Model: Overview and Introduction\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg\",\"datePublished\":\"2022-09-22T20:34:06+00:00\",\"dateModified\":\"2022-10-07T18:07:35+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/646a580e450bdd7a46ff1a2935674564\"},\"description\":\"Kasten by Veeam's VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg\",\"width\":800,\"height\":400,\"caption\":\"Kubernetes Zero Trust Model: Overview and Introduction\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kubernetes Zero Trust Model: Overview and Introduction\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\",\"name\":\"Best Enterprise Cloud Strategy Tools, Vendors, Managed Service Providers, MSP and Solutions\",\"description\":\"Guides, Analysis and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/646a580e450bdd7a46ff1a2935674564\",\"name\":\"Gaurav Rishi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/58adb332be5d66fbc4cc78769cf7fa1b?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/58adb332be5d66fbc4cc78769cf7fa1b?s=96&d=blank&r=g\",\"caption\":\"Gaurav Rishi\"},\"description\":\"Gaurav Rishi is the VP of Product and Partnerships at Kasten by Veeam. He is at the forefront of several Kubernetes ecosystem partnershps and has been a frequent speaker and author on cloud native innovations. He previously led Strategy and Product Management for Cisco\u2019s Cloud Media Processing business.\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/author\/garishi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kubernetes Zero Trust Model: Overview and Introduction","description":"Kasten by Veeam's VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/","twitter_misc":{"Written by":"Gaurav Rishi","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/","url":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/","name":"Kubernetes Zero Trust Model: Overview and Introduction","isPartOf":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg","datePublished":"2022-09-22T20:34:06+00:00","dateModified":"2022-10-07T18:07:35+00:00","author":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/646a580e450bdd7a46ff1a2935674564"},"description":"Kasten by Veeam's VP or Product and Partnerships Gaurav Rishi offers an overview and introduction of the Kubernetes Zero Trust model.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#primaryimage","url":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg","contentUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2022\/09\/Kubernetes-Zero-Trust-Model.jpg","width":800,"height":400,"caption":"Kubernetes Zero Trust Model: Overview and Introduction"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/kubernetes-zero-trust-model-overview-and-introduction\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/cloud-platforms\/"},{"@type":"ListItem","position":2,"name":"Kubernetes Zero Trust Model: Overview and Introduction"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website","url":"https:\/\/solutionsreview.com\/cloud-platforms\/","name":"Best Enterprise Cloud Strategy Tools, Vendors, Managed Service Providers, MSP and Solutions","description":"Guides, Analysis and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/646a580e450bdd7a46ff1a2935674564","name":"Gaurav Rishi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/58adb332be5d66fbc4cc78769cf7fa1b?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/58adb332be5d66fbc4cc78769cf7fa1b?s=96&d=blank&r=g","caption":"Gaurav Rishi"},"description":"Gaurav Rishi is the VP of Product and Partnerships at Kasten by Veeam. He is at the forefront of several Kubernetes ecosystem partnershps and has been a frequent speaker and author on cloud native innovations. He previously led Strategy and Product Management for Cisco\u2019s Cloud Media Processing business.","url":"https:\/\/solutionsreview.com\/cloud-platforms\/author\/garishi\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/5048"}],"collection":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/users\/324"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/comments?post=5048"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/5048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media\/5053"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media?parent=5048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/categories?post=5048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/tags?post=5048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}