Secret Management in Kubernetes - Using Secret Store CSI Driver
Explore robust secret management in Kubernetes using Secret Store CSI Driver. Learn about secure storage, credential provider integration, and best practices for protecting sensitive data in cloud-native applications.
Kubernetes SIG Auth Deep Dive
Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.
Least Privilege Containers: Keeping a Bad Day from Getting Worse
Explore strategies for reducing container privileges, enhancing security through unprivileged users and minimal images, and implementing design changes to segment permissions and prevent future vulnerabilities.
Using Cert-Manager for Safer Private PKI
Explore private PKI deployment using cert-manager for cloud-native environments. Learn best practices for safe implementation and rotation to avoid outages and enhance security.
Kubernetes Security Implementation Landscape
Explore Kubernetes security implementation strategies and best practices with expert Zhang Jintao, gaining insights to enhance your cloud-native infrastructure protection.
Unpacking Open Source Security in Public Repositories and Registries
Explore security risks in popular open-source projects and public registries. Learn about common misconfigurations, vulnerabilities, and best practices to safeguard your systems when using public resources.
Kubernetes to Cloud Attack Vectors: Demos of Cross-Environment Vulnerabilities
Explore attack vectors between managed Kubernetes clusters and cloud environments. Learn best practices for securing EKS, AKS, and GKE against lateral movement and compromise.
Improving Secure Pod-to-Pod Communication Within Kubernetes Using Trust Bundles
Explore advanced techniques for enhancing secure pod-to-pod communication in Kubernetes using trust bundles, leveraging cert-manager, SPIFFE, and KEP-3257 for automated TLS certificate creation and mTLS patterns.
Good Fences Make Good Neighbors - Making Cross-Namespace References More Secure with ReferenceGrant
Explore secure cross-namespace communication in Kubernetes using ReferenceGrant. Learn how this resource ensures mutual agreement for safer interactions between namespaces in Gateway API.
Securing Kubernetes
Explore Kubernetes security strategies and best practices to protect your containerized applications and infrastructure in this informative session.
Writing Polaris Policies for Cloud Native Applications
Learn to create custom Polaris policies for Kubernetes security and best practices enforcement, enhancing cluster management and compliance.
Kubescape Roadmap - Future Developments in Kubernetes Security
Explore the future of Kubernetes security with Kubescape's development plans and upcoming features in this informative CNCF presentation.
Creating Security Policies and Controls for Kubernetes Using ChatGPT
Explore how to leverage ChatGPT for creating robust security policies and controls in Kubernetes environments, enhancing your cloud-native security practices.
Policy Matters - A Kubernetes Policy Working Group Introduction and Deep Dive
Explore Kubernetes policy implementations, architectures, and best practices. Learn about the Policy Report API for unified policy observability across security and automation areas.
Deploying Policy-as-Code with Readable Rego Policies and Open Policy Agent
Learn to implement Policy-as-Code using Open Policy Agent and Rego language. Explore deployment strategies, centralized management, and best practices for writing clear, effective policies in cloud-native environments.
Securing Kubernetes - Best Practices and Effective Strategies
Explore best practices for securing Kubernetes deployments, covering control plane protection, RBAC, network policies, security contexts, and container image security.
Using Docker Content Trust with Kubernetes Admission Controllers to Secure Runtime
Enhance container security by implementing image signing in CI/CD pipelines and restricting Kubernetes deployments to verified images using TUF/Notary and admission controllers.
Don't Have a Meltdown - Practical Steps for Defending Your Apps
Practical strategies to protect applications from security vulnerabilities like Meltdown, with actionable steps for robust defense and risk mitigation.
Skip the Anxiety Attack - Build Secure Apps with Docker and Kubernetes
Learn to build secure applications using Docker and Kubernetes, reducing anxiety and enhancing your development process with industry-leading containerization and orchestration technologies.
A Checklist for Security from Container to Kubernetes - An End-to-End Overview
Comprehensive overview of container and Kubernetes security, covering lifecycle, supply chain, infrastructure, features, and potential attacks. Practical insights for robust cloud-native security implementation.
Implementing Container Privilege Escalation Detection Using eBPF for Cloud Native Security
Explore eBPF-based techniques for detecting and preventing container privilege escalation in cloud environments, with practical implementation examples and real-world applications.