Continuous Delivery Summit NA 2019

Jenkins on Kubernetes is typically a multi-tenant service where security is very important. In addition to multi-tenancy, when running CD workloads on a platform like Kubernetes there are typically other workloads deployed and if any workload does not have proper security configured it can impact all of the workloads running on the cluster.

The combination of Pod Security Policies (PSPs) with Kubernetes RBAC, namespaces and workload specific node pools allows for the granular security you need to ensure there are adequate safeguards in place to reduce the risk of unintentional (and intentional) actions that put your cluster at risk. Combining Pod Security Policies with other Kubernetes best practices allows you to provide the flexibility needed by CI/CD users while providing adequate guard rails so they don’t negatively impact other important Kubernetes workloads.

This talk will provide details on how to most effectively enable and use Pod Security Policies for Jenkins on Kubernetes.