Life of a Sigstore Signature - Understanding Code Signing for Container Images
Explore Sigstore's code signing process for Kubernetes images, including keyless signing, certificate authorities, and transparency logs. Learn to configure admission controllers for cluster security.
Untangling Your Service Mesh with Feature Gates
Simplify service mesh complexity using feature-gating techniques. Learn to narrow configuration options, control feature access, and optimize mesh environments for core use-cases using Kubernetes tools and GitOps.
Desktop to Deployment: Kubernetes Security with Checkov
Explore K8s security from desktop to deployment using Checkov. Learn about OS Top 10, CI monitoring, customization, and admission controllers for robust cloud-native security practices.
The Hitchhiker's Guide to Pod Security
Explore Pod Security admission in Kubernetes, its key concepts, and practical implementation. Learn how to enforce secure defaults for workloads using this new security-focused API.
Pod Security Policy is Dead, Long Live... - Exploring Kubernetes Security Alternatives
Explore alternatives to Pod Security Policy for Kubernetes security, addressing its deprecation and future-proofing your cluster's security measures.
Writing a Kubernetes Controller - Tutorial
Learn to build a custom Kubernetes controller for managing container images with semantic versioning. Explore admission controllers, webhooks, and practical implementation techniques.
Trust But Verify: Bringing Supply Chain Integrity to CD GitOps
Explore how to enhance CD GitOps with supply chain controls, ensuring integrity and tamper-proof deployments through keyless signing, transparency logs, and cluster enforcement of signatures and policies.
The Insider Threat: Third-Party Applications in Your Cluster
Explore vulnerabilities in third-party Kubernetes applications, their critical impact, and actionable steps to enhance cluster security. Learn from real-world examples and protect your infrastructure.
How to Build a Kubernetes Admission Controller from Scratch - Tutorial
Learn to build a Kubernetes admission controller from scratch, exploring fundamentals, installation, and Python implementation. Gain hands-on experience in enhancing cluster security and policy enforcement.
Extending Kubernetes Core with WebAssembly Modules - Admission Controllers
Explore extending Kubernetes core components with WebAssembly modules, focusing on Admission Controllers for improved flexibility, predictability, and resource efficiency in edge deployments.
Building a Kubernetes Operator for Automated Distributed Tracing
Learn to implement automated distributed tracing in Kubernetes using a custom operator. Explore advanced techniques for injecting OpenTelemetry, mutating webhooks, and resource management across multiple languages.
Using Docker Content Trust with Kubernetes Admission Controllers to Secure Runtime
Enhance container security by implementing image signing in CI/CD pipelines and restricting Kubernetes deployments to verified images using TUF/Notary and admission controllers.
Enforcing a Secure Supply Chain on Kubernetes
Explore implementing and enforcing a secure supply chain in Kubernetes using open-source projects, including Sigstore keyless workflow and signature verification policies.
Kubernetes Security After Pod Security Policies Removal
Explore Kubernetes security post-PSP removal, comparing Pod Security and external Admission Controllers for maintaining cluster security in the evolving landscape.
Continuous Kubernetes Security - Best Practices and Risk Mitigation
Explore Kubernetes security landscape, risks, and best practices. Learn to configure least-privilege access, isolate workloads, and maintain secure configurations across cluster rebuilds.
Secure Container Deployments - Time for Refresh
Explore modern container security practices, focusing on pod security, policy implementation, and admission controllers for enhanced protection in Kubernetes environments.
One Large Cluster or Lots of Small Ones - Pros, Cons and When to Apply Each Approach
Explore the pros and cons of using multiple small Kubernetes clusters versus a single large shared cluster, and learn about solutions to address their limitations for informed decision-making.
Safeguarding Clusters: Exploring the Benefits and Navigating the Dangers of Admission Controllers
Explore admission controllers in Kubernetes: their benefits, risks, and implementation. Learn to secure clusters using Common Expression Language and witness a live demo on fixing and mitigating potential vulnerabilities.
Deep Dive into Open Policy Agent, Conftest, and GateKeeper - Kubernetes Policy in Action
Explore Kubernetes policy enforcement using Open Policy Agent, Conftest, and GateKeeper. Learn implementation strategies and best practices for secure, compliant container orchestration.
Untangling Your Istio Mesh with Feature Gates
Learn to simplify Istio service mesh setup using feature gates, admission controllers, and GitOps. Discover criteria for selecting Istio capabilities and streamline your microservices management.
Beyond Platform Thinking - Building Unexpected Solutions with Kubernetes at Ritchie Brothers
Explore innovative uses of Kubernetes APIs for managing non-Kubernetes services, leveraging Open Telemetry and Honeycomb for enhanced observability across the entire developer journey.