# KubeCon

Let's start with how modern container orchestrated workloads look like. We have application running inside containers across Nodes, orchestrated by Kubernetes.

For securing our workloads,
Talk about Current Security Landscape

Go through analogy

Cannot treat Containers as Black Box

So now we realise the containers have block inside them that need to have access control as well.

We cannot really restrict John and Jane to tell them what to do violating their human rights, but we can restrict our containers to tell them what to do.

Explan Detect, Prevent, Alert vs Detect, Alert, Prevent.

Go through Prevention Mechanisms.

Seccomp
LSMs

PodSecurityContext

Enter KubeArmor

How KubeArmor works

Demo

Thank You