Operations | Monitoring | ITSM | DevOps | Cloud

By default, pods are non-isolated; they accept traffic from any source. The Google GKE solution to this security concern is Network Security Policy that lets developers control network access to their services. Google GKE comes configured with Network Security Policy using Project Calico which can be used to secure your clusters. This class will describe a few use cases for network security policy and a live demo implementing each use case.

In this talk, we will explore how to meet common enterprise security control needs when running Kubernetes. We will look at a range of common enterprise security needs and how you can meet these with standard Kubernetes primitives and open source projects such as Calico, or take it a step further with the additional features of Calico Enterprise.

Rancher is a great way to deploy and manage Kubernetes clusters across a broad range of environments, abstracting away many of the differences between the environments, and using Canal for run-anywhere networking. But what if you want to up your networking game to squeeze the most out of your clusters? In this training session you'll learn about the various networking options available to you in Rancher, and considerations to take into account in order to select the best option for your environment.

Managing multiple Kubernetes clusters can become time consuming and complex. Calico Enterprise can help with built in multi-cluster management capabilities to simplify deployment and ongoing operations, including securing interactions between the clusters, and providing cross-cluster service discovery. In this training session, we'll focus on Calico Enterprise's multi-cluster visibility and troubleshooting capabilities.

Rancher is a great way to deploy and manage Kubernetes clusters across a broad range of environments, abstracting away many of the differences between the environments, and using Canal for run-anywhere networking. But what if you want to up your networking game to squeeze the most out of your clusters? In this training session you'll learn about the various networking options available to you in Rancher, and considerations to take into account in order to select the best option for your environment.

In an age where attackers are becoming more and more sophisticated, network security as a line of defense is more important than ever. Network Policy is the primary tool for securing a Kubernetes network. It allows you to easily restrict the network traffic in your cluster so only the traffic that you want to flow is allowed. In this training session, we will go over the core concepts in Kubernetes Network Policies and Calico Network Policies. Compare and contrast between the two models, and highlight when to use one versus the other.

Managing multiple Kubernetes clusters can become time consuming and complex. Calico Enterprise can help with built in multi-cluster management capabilities to simplify deployment and ongoing operations, including securing interactions between the clusters, and providing cross-cluster service discovery. In this training session, we'll focus on Calico Enterprise's multi-cluster visibility and troubleshooting capabilities.

What's the best way to troubleshoot an application made up of multiple microservices, distributed across multiple nodes and multiple pods? In this training session we will cover a variety of Kubernetes troubleshooting tips and tricks, and you'll learn how Calico Enterprise can help provide valuable visibility and reduce troubleshooting time in complex networks of microservices.

Companies are leveraging the power of Kubernetes to accelerate the delivery of resilient and scalable applications to meet the pace of business. These applications are highly dynamic, making it operationally challenging to securely connect to databases or other resources protected behind firewalls. Tigera and Fortinet have joined forces to solve this operational challenge. With the combination of FortiManager and Calico Enterprise, you gain access control and full visibility into the container environment along with centralized management.

Spinning up an AKS cluster is a great way to get started with Kubernetes on Azure. But if you are doing more than just playing, you'll want to understand the multiple networking options AKS provides for you to choose from, each with different scale and security implications. In this training session we will do a deep dive on AKS networking options.