Md Tahsin Rahman
Secure Kubernetes using eBPF & Open Policy Agent
Securing Kubernetes cluster is a multi-faceted task. Runtime security is one aspect of it. It ensures that the workloads deployed in the cluster doesn’t do any malicious behaviors. For runtime instrumentation, we wanted to use Extended Berkeley Packet Filter (eBPF), a core technology in the Linux kernel.
There are already many tools available in this space, but each project has its own custom components. We want to use a set of common set of tools and techniques for binding these different components.
bpa
falco
kubernetes
opa
open-policy-agent
security