SE Radio 678: Chris Love on Kubernetes Security

SE Radio 678: Chris Love on Kubernetes Security

Author: team@se-radio.net (SE-Radio Team) July 23, 2025 Duration: 54:36

Chris Love, co-author of the book Core Kubernetes, joins host Robert Blumen for a conversation about kubernetes security. Chris identifies the node layer, secrets management, the network layer, contains, and pods as the most critical areas to be addressed.

The conversation explores a range of topics, including when to accept defaults and when to override; differences between self-managed clusters and cloud-service provider-managed clusters; and what can go wrong at each layer -- and how to address these issues. They further discuss managing the node layer; network security best practices; kubernetes secrets and integration with cloud-service provider secrets; container security; pod security, and Chris offers his views on policy-as-code frameworks and scanners.

Brought to you by IEEE Computer Society and IEEE Software magazine.


For developers who build the world's most critical systems, Software Engineering Radio offers deep, substantive conversations that move beyond the hype cycle. This isn't about quick tips or news flashes; it's a dedicated audio library for career engineers seeking to solidify their foundational knowledge and explore advanced concepts. Each episode is crafted as an enduring resource, featuring either a comprehensive tutorial breaking down a specific technology or methodology, or a detailed interview with a leading practitioner shaping the field. You'll hear focused discussions on everything from low-level systems architecture and programming language design to team dynamics and project management, all through the lens of professional software creation. The content is exclusively produced for this podcast, ensuring thoughtful, in-depth analysis you won't find simply repackaged from conference talks. If your work demands a rigorous understanding of the craft, this is the podcast for you.
Author: Language: en-us Episodes: 100

Software Engineering Radio - the podcast for professional software developers
Podcast Episodes
SE Radio 656: Ivett Ördög on Rewrite versus Refactor [not-audio_url] [/not-audio_url]

Duration: 49:43
Ivett Ördög speaks with host Sam Taggart about rewrite versus refactor -- a choice that many projects face as they grow. It's a topic that inspires a lot of dogmatic feelings. They discuss how companies and projects end…
SE Radio 654: Chris Patterson on MassTransit and Event-Driven Systems [not-audio_url] [/not-audio_url]

Duration: 1:09:06
Chris Patterson, founder and principal architect of MassTransit, joins host Jeff Doolittle to discuss MassTransit, a message bus framework for building distributed systems. The conversation begins with an exploration of…
SE Radio 653: Asanka Abeysinghe on Cell-Based Architecture [not-audio_url] [/not-audio_url]

Duration: 1:00:06
Asanka Abeysinghe, CTO at WSO2, joins host Giovanni Asproni to discuss cell-based architecture -- a style that's intended to combine application, deployment, and team architecture to help organizations respond quickly to…
SE Radio 652: Christian Mesh on OpenTofu [not-audio_url] [/not-audio_url]

Duration: 51:50
Christian Mesh, tech lead of the OpenTofu project, speaks with host Robert Blumen about OpenTofu. They start with the history of terraform, terraform providers, license changes to open source projects, the origin of Open…
SE Radio 651: Paul Frazee on Bluesky and the AT Protocol [not-audio_url] [/not-audio_url]

Duration: 1:08:24
Paul Frazee, CTO of Bluesky, speaks with SE Radio's Jeremy Jung about the Authenticated Transfer Protocol (ATProto) used by the Bluesky decentralized social network. They discuss why ATProto was created, as well as how i…
SE Radio 649: Lukas Gentele on Kubernetes vClusters [not-audio_url] [/not-audio_url]

Duration: 58:14
Lukas Gentele, CEO of Loft Labs, joins host Robert Blumen for a discussion of kubernetes vclusters (virtual clusters). A vcluster is a kubernetes cluster that runs kubernetes application on a host kubernetes cluster. The…
SE Radio 648: Matthew Adams on AI Threat Modeling and Stride GPT [not-audio_url] [/not-audio_url]

Duration: 46:56
Matthew Adams, Head of Security Enablement at Citi, joins SE Radio host Priyanka Raghavan to explore the use of large language models in threat modeling, with a special focus on Matthew's work, Stride GPT. The episode ki…
SE Radio 647: Praveen Gujar on Gen AI for Digital Ad Tech Platforms [not-audio_url] [/not-audio_url]

Duration: 52:01
Praveen Gujar, Director of Product at LinkedIn, joins SE Radio host Kanchan Shringi for a discussion on how generative AI (GenAI) is transforming digital advertising technology platforms. The conversation starts with a l…