Building secure platforms with Kubernetes: Bridging the DevOps-Security Divide with John Dietz

The Security Repo

This week, we dive deep into the world of Kubernetes with John Dietz, co-founder of Kubefirst and a seasoned IT professional with over two decades of experience. John shares his extensive insights into the transformative power of Kubernetes and infrastructure as code (IaC) in modern cloud environments. Reflecting on his personal journey from skepticism about containerization to embracing Kubernetes. John discusses the critical role of governance and security in successfully deploying and managing cloud-native technologies. We also explore challenges and strategies for integrating security practices into DevOps, ensuring robust governance, and leveraging IaC for efficient and secure infrastructure management. Whether you're an IT veteran or new to the field, join us as we unpack the complexities of Kubernetes, security through governance, and the future of cloud-native platforms. Show Notes: Kubefirst: https://kubefirst.io/ Johns articles on The News Stack https://thenewstack.io/author/john-dietz/ John Dietz sociales X (Twitter): https://twitter.com/vitamindietz Linkedin: https://www.linkedin.com/in/jd-k8s/ Introduction: 0:00 Kubernetes skeptic to advocate: 1:09 Governance in Kubernetes & IaC: 8:30 Who owns security with IaC and K8: 24:36 Common K8 mistakes: 32:16 Why care about Kubernetes: 38:23 Best and worst: 47:15 Links and show notes: 54:22