Issue 201: API security in Kubernetes, Corey Ball podcast, broken access controls for APIs, 200th issue prize giveaway
Brief
This week, we have an article from the NewStack on API security best practices in Kubernetes, a podcast with Corey Ball discussing API security best practices, an article on broken access control concerns in APIs, and 42Crunch’s eBook on API security. Most importantly, we have news of last week’s winner in the 200th-issue giveaway and news on this week’s giveaway.
Article: Best practices for API security in Kubernetes
First up this week is guidance from the team at Curity on best practices for API security in Kubernetes.
The article focuses on the role of the ingress controller in securing Kubernetes API-based implementations. The first recommendation is to provide a single point of entry to the pods in a cluster. While exposing pod ports via services is possible, this approach lacks flexibility and scalability.