Securing a Kubernetes Cluster on Google Cloud Platform

Abstract

The goal of this thesis was to investigate possible security problems when creating cloud infrastructure with a small budget that was set. Optimizing the cost of creating the cloud environment was also looked into. Infrastructures made in the cloud environment can be vulnerable if not made properly.

The thesis was commissioned by a DevOps-oriented software company called Eficode Oy. Eficode is currently active in six countries and employs over 300 workers. The work was done as a consulting job for a customer who will be referred to as Customer x in this thesis.

The thesis investigates the relationship between the budget and security in a cloud environment and whether one has a significant effect on the other. The study is based on a literature review and other academic papers. The opinions presented in different research papers varied between the two options. This study and some papers however argue that security does not need to be expensive. Most of the cloud hosting platforms provide a best practices guide on how to secure and cost optimize the platform, which had a high impact on the outcome of this study.

The goal that was set was reached and the defined budget was satisfied.