
Explore Istio's role in regulatory compliance beyond mTLS, covering PCI DSS, FedRAMP, and GDPR. Learn how to implement controls and transition to identity-based security models.

Explore eBPF-based solution for securing GitHub Actions pipelines against supply chain attacks, featuring runtime security profiling and build verification techniques.

Strategies for maintaining Kubernetes clusters in air-gapped environments, addressing challenges like limited internet access, firewalls, and proxies. Practical solutions for container runtime, registry, and policy management.

Insights on integrating external secret management solutions with Kubernetes using External Secrets Operator, balancing security and productivity in regulated environments.

Explore the Kubernetes Security Response Committee's role, vulnerability lifecycle, and key findings from the 2022 security audit. Learn about reporting processes and community impact.

Explore innovative uses of Prometheus for defensive monitoring in Kubernetes, complementing traditional security tools. Learn practical examples and ready-to-use strategies for enhancing your cluster's security posture.

Explore Kubernetes security through hands-on scenarios in a vulnerable cluster environment. Learn about real-world vulnerabilities, CVEs, and security tools across infrastructure, supply chain, and runtime layers.

Explore security risks in Managed Cluster Middleware for cloud-based Kubernetes services. Learn about potential vulnerabilities, threat surfaces, and how to adjust your K8s threat model accordingly.

Learn how to rapidly recover from a production disaster using KOps, ArgoCD, and Velero. Discover real-world strategies, challenges, and lessons learned in rebuilding a cluster from scratch in under an hour.

Explore top Istio security risks and mitigation strategies for cloud native applications. Learn to prioritize efforts, protect against attacks, and address critical vulnerabilities in service mesh deployments.

Explore OpenTelemetry's role in securing cloud-native applications. Learn how to detect vulnerabilities in microservices architectures through a practical Kubernetes example and Jaeger visualization.

Explore Kubernetes SIG Security's community-driven approach to enhancing project and user security. Learn about recent updates, upcoming initiatives, and opportunities to contribute.

Discover Falco: Cloud-Native Runtime Security for Kubernetes. Learn about recent developments, improved eBPF support, security enhancements, ecosystem integrations, and the project's roadmap from experienced contributors.

Learn how to implement a zero-downtime strategy for rotating cluster certificate authorities and downstream certificates in Kubernetes, ensuring secure and auditable access control.

Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.

Explore challenges and strategies for sustainable open-source project maintenance, focusing on Kubernetes releases and effective firefighting techniques for critical issues.

Deep dive into Kubernetes data protection efforts, exploring volume mode conversion, populators, change block tracking, backup repositories, and consistent group snapshots. Learn about ongoing developments and how to contribute.

Explore private PKI deployment using cert-manager for cloud-native environments. Learn best practices for safe implementation and rotation to avoid outages and enhance security.

Explore Kubernetes security implementation strategies and best practices with expert Zhang Jintao, gaining insights to enhance your cloud-native infrastructure protection.

Explore the integration of eBPF, WASM, and OPA in kernel space, showcasing innovative approaches to cloud-native technologies and their potential impact on system performance and security.

Explore best practices for securing GitOps and CI/CD pipelines, covering access control, communication, testing, secrets management, and monitoring. Learn from Red Hat's SRE experiences to enhance your pipeline security.