Guardians of the Runtime - Leveraging Behavioral Analysis and Policies for Kubernetes Security
Explore innovative Kubernetes security using behavioral analysis in CI testing and native policies. Learn hands-on practices for implementation and enforcement to protect against latest threats.
Minikube: From CLI to GUI - Evolution and New Features
Explore Minikube's evolution from CLI to GUI, including the new minikube-gui project. Learn about its 7-year history and latest developments in Kubernetes local development.
Malicious Compliance: Reflections on Trusting Container Scanners
Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.
Practical Challenges with Pod Security Admission
Explore challenges in implementing Pod Security Admission, including handling privileged workloads and applying the principle of least privilege. Learn strategies for securing Kubernetes environments.
Hacking and Defending Kubernetes Clusters - Live Demonstration
Live demonstration of Kubernetes cluster attacks and defenses, exploring vulnerabilities, mitigation strategies, and practical security techniques for effective threat modeling and protection.
Securing the Container Supply Chain with Notary
Explore Notary v2's advanced capabilities for securing software supply chains, including core functionalities, enterprise scenarios, and ecosystem integrations.
Hardening Kubeflow Security for Enterprise Environments
Learn about Kubeflow security vulnerabilities, best practices, and improvements for enterprise environments. Gain insights on addressing unauthorized access, user impersonation, and data protection in MLOps platforms.
Cilium Networking for Multicloud Kubernetes - Simplifying Cross-Cloud Connectivity
Explore seamless connectivity for multi-cloud Kubernetes using Cilium and ClusterMesh. Learn to enable cross-cloud service communication, load balancing, and security with minimal configuration.
Designing and Securing a Multi-Tenant Runtime Environment at the New York Times
Explore the New York Times' journey in building multi-tenant Kubernetes clusters, focusing on networking choices, security considerations, and lessons learned from implementing Cilium for enhanced performance and visibility.
How to Make Your K8s Cluster Survive Without Internet Access - Airgap Solutions
Strategies for maintaining Kubernetes clusters in air-gapped environments, addressing challenges like limited internet access, firewalls, and proxies. Practical solutions for container runtime, registry, and policy management.
Life Without Sidecars - Is eBPF's Promise Too Good to Be True?
Explore eBPF's potential to revolutionize service mesh technology, examining its promises, limitations, and impact on cloud-native infrastructure security, resilience, and operational complexity.
Kubernetes Security Response Committee: Introduction and Deep Dive
Explore the Kubernetes Security Response Committee's role, vulnerability lifecycle, and key findings from the 2022 security audit. Learn about reporting processes and community impact.
Running Not Root Made Easy in Kubernetes
Explore challenges and solutions for running Kubernetes workloads without root privileges, focusing on KubeVirt's transition and broader applications for securing non-root applications.
Kubernetes Defensive Monitoring with Prometheus
Explore innovative uses of Prometheus for defensive monitoring in Kubernetes, complementing traditional security tools. Learn practical examples and ready-to-use strategies for enhancing your cluster's security posture.
Interactive Playground to Learn Kubernetes and Cloud Native Security
Explore Kubernetes security through hands-on scenarios in a vulnerable cluster environment. Learn about real-world vulnerabilities, CVEs, and security tools across infrastructure, supply chain, and runtime layers.
Cluster Grey Zone - Risks in Managed Cluster Middleware
Explore security risks in Managed Cluster Middleware for cloud-based Kubernetes services. Learn about potential vulnerabilities, threat surfaces, and how to adjust your K8s threat model accordingly.
Apiserver-Only Clusters for Fun and Profit
Explore lightweight Kubernetes control planes using apiserver-only clusters to host CRDs and Operators, enabling efficient service provision outside the cluster.
Future of Istio - Sidecar, Sidecarless or Both?
Explore Istio's future with maintainers, focusing on performance and security improvements through new deployment options like Ambient architecture. Learn about ongoing efforts and roadmap.
Prevent Embarrassing Cluster Takeovers - Detecting and Mitigating Configuration Risks
Discover how to secure Kubernetes clusters against common misconfigurations and vulnerabilities using Kubeaudit, an open-source scanner that detects and mitigates risks without hindering developer productivity.
Kubernetes Migration Journey - From Virtual Machines to Scalable Machine Learning Platform
Explore ING's 2+ year journey migrating their Machine Learning Platform to Kubernetes, overcoming challenges in a highly regulated banking environment and improving scalability for data scientists.
Surviving Day 2 - How to Troubleshoot Kubernetes Networking
Dive into Kubernetes networking troubleshooting, from DNS errors to Network Policy drops. Learn essential tools, preventive measures, and live demonstrations for efficient problem-solving.