From the course: Spring on Kubernetes: Deploying and Managing Cloud-Native Applications
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Security considerations - Spring Boot Tutorial
From the course: Spring on Kubernetes: Deploying and Managing Cloud-Native Applications
Security considerations
- [Presenter] I would be remiss if I didn't spend at least a little bit of time in this course talking about the security considerations that come with not only cloud-native computing, but the containers that we run those cloud-native apps on. Let's start our conversation with the containers themselves. I highly encourage you to secure the lifecycle of your containers. I already talked a little bit about the strategy that I use where I start with the base image and everything in my ecosystem extends from that base image. We do not allow external images in, and we do that on purpose. Again, if we have a security concern in the base image, we can address it in all of our images at once, so it's very important to secure that lifecycle. In the same vein, scan your images. The images you create, the images you install in your environment, all of them should be scanned. And constantly scan your cluster. Again, you only control the images that you create from a lifecycle perspective, but if…