Running containers requires a container management layer that thinks about and handles many moving parts. The architecture of that layer can't have cliffs, gaps, or rough edges: it has to be a reliable and complete platform. One critical piece of this is security - and in this talk, Laine and Josh will give their recommendations for Kubernetes security from container ingredients to how to look at application and platform boundaries, and they'll wrap it all in a framework that makes it easy to think about, understand, and explain.