
Master Kubernetes policy enforcement using Common Expression Language (CEL), from basic integration to advanced security implementations. Learn practical applications through live demos and CEL Playground testing.

Dive into eBPF runtime security implementation, exploring the transition from observability to enforcement. Learn kernel-level security event collection, attack prevention strategies, and practical insights from the Tetragon team.

Explore the current landscape and future direction of data protection in Kubernetes, including missing functionalities, cross-SIG collaboration, and opportunities for various stakeholders to contribute to enhanced security measures.

Discover how to eliminate secrets in Kubernetes by leveraging cert-manager for secure authentication through short-lived certificates and proof of ownership, enhancing your application's security posture.

Master Kubernetes policy management with Kyverno through real-world insights from Robinhood's migration journey, covering validation, enforcement, lifecycle management, and performance optimization for large-scale deployments.

Discover SPIRE's architecture and upcoming forced rotation and revocation features for enhanced workload identity security, with insights into automated key compromise recovery mechanisms.

Discover critical security vulnerabilities in Kubernetes service mesh deployments and learn defensive strategies against unauthorized access, system compromises, and secret exposure.

Discover how Yelp manages container security at scale, from implementing vulnerability tracking to developing maturity models that guide thousands of engineers in maintaining robust Docker and Kubernetes deployments.

Master strategies for handling critical CVEs in open source packages, from patching container images with Copacetic to building projects from scratch, while learning best practices for software supply chain security.

Explore a detailed comparison of three leading eBPF-based Kubernetes security solutions, examining performance impacts, required privileges, and key features to make an informed choice for cluster protection.

Discover cutting-edge CRI-O and Kubernetes features, from sigstore signature support to Podman pod integration and OCI artifacts, designed for cluster admins seeking advanced container runtime capabilities.

Discover how to achieve zero-downtime Kubernetes cluster upgrades at scale, focusing on deployment methods, canary rollouts, and quick rollbacks while managing hundreds of clusters with 130+ services each.

Discover practical approaches to Kubernetes security that balance compliance requirements with operational efficiency, focusing on risk reduction and platform functionality rather than perfect security scores.

Discover how Kubernetes security teams collaborate on CVE management, dependency vulnerabilities, and release processes while exploring future improvements for enhanced security visibility across the platform.

Explore recent authorization advancements in Kubernetes, including CEL integration, selector-aware features, and potential RBAC enhancements for more dynamic runtime security controls.

Discover essential security enhancements for Kubernetes that prevent escalation attacks through node-specific restrictions, bounded service account tokens, and validating admission policies for robust infrastructure protection.

Discover how to leverage live traffic inspection for automatic authorization in Envoy, using CNCF Pixie to generate OPA policies and implement effective service-to-service access controls.

Explore container security hardening through Seccomp and eBPF, comparing their approaches to limiting Linux kernel access and implementing the principle of least privilege in Kubernetes environments.

Discover how to optimize Kubernetes scheduling by building custom plugins with WebAssembly and testing at scale using KWOK, focusing on performance metrics and efficient cluster management.

Discover how to protect cloud applications from quantum computing threats by implementing quantum-safe cryptography in Kubernetes environments, with practical steps for securing data against future quantum attacks.

Master FHIR Information Gateway's access control features to enhance healthcare data security, implement robust authorization mechanisms, and leverage SMART on FHIR scopes for digital health solutions.