Question 1

What is zero trust?

Accepted Answer

As you might expect, the zero trust model is fundamentally about trust. It is a way to answer one of the most important questions in network security: is X allowed to access Y?

Question 2

Why is zero trust important?

Accepted Answer

The reason zero trust has become so important is that it addresses some of the security challenges in modern cloud software. To see why, let's compare the "good ol' days" of running software with the modern, cloud way.

Question 3

What is identity?

Accepted Answer

In the perimeter model, your network location was effectively your identity. If you were inside the firewall, you were trusted; if you were outside it, you weren't trusted.

Question 4

What is policy?

Accepted Answer

Armed with our new model of identity, we also need a way of capturing the access each identity has. In the perimeter approach, it was common to grant full access to a sensitive resource to a range of IP addresses.

Question 5

What is zero trust for Kubernetes?

Accepted Answer

Kubernetes's gift to the world is a platform with an explicit scope, a well-defined security model, and clear mechanisms for extension, and this all makes the Kubernetes particularly fruitful for zero trust.

Request to join the MCP Early Access Program

Sign up for early access