Linux to Kubernetes: Security in a two-distribution world

Before Cloud Native we worked in a world with a Linux Distribution, and a package manager. After Cloud Native, we work in a world with two distributions: Linux + Kubernetes. It looks like every major Linux distribution has its own Kubernetes distro as well. What are the security implications for operating in this new world? What do containers change about security? What does another layer of package management on Kubernetes do to that puzzle? CoreOS Fest 2017 Brendan Burns, Aparna Sinha, Alex Crawford, and Steven Vaughn