Observability in ArgoCD and Rollouts Using Streaming ML for Reducing MTTR
Explore real-time anomaly detection in Kubernetes using streaming ML and DAG-based processing. Learn how Intuit reduces outage response time with AIOps and integrates observability into Argo CD.
Trust But Verify: Bringing Supply Chain Integrity to CD GitOps
Explore how to enhance CD GitOps with supply chain controls, ensuring integrity and tamper-proof deployments through keyless signing, transparency logs, and cluster enforcement of signatures and policies.
Kubernetes Policy, Governance, and Compliance - A Working Group Policy Update
Explore Kubernetes policy management for simplified multi-cluster operations, automated security, and continuous compliance. Learn about the Policy Working Group's projects and how to contribute.
A New Way to Roll - Supply Chain Choreography for Enterprise Grade Kubernetes
Explore enterprise-grade Kubernetes deployment using supply chain choreography. Learn DevSecOps practices, CI/CD pipeline integration, and secure software supply chain management for cloud-native applications.
CRI-O's Senior Year - Overview and New Developments
Explore CRI-O's journey towards CNCF graduation, including new developments like conmon-rs, sigstore integration, and Kubernetes alignment for enhanced container runtime stability and security.
Secure Multicluster Istio Configuration Using GitOps Patterns
Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.
Complete DR of Stateful Workloads, PVs and CSI Snapshots via Flux and Vault OSS
Explore GitOps strategies for disaster recovery of stateful workloads, focusing on CSI volumes, snapshots, and PV management using Flux and Vault OSS. Learn effective approaches to secure and recover critical data in Kubernetes environments.
Flawed ML Security: Mitigating Security Vulnerabilities in Data and Machine Learning Infrastructure with MLSecOps
Explore security vulnerabilities in machine learning infrastructure and learn practical strategies for mitigating risks using MLSecOps. Gain insights on RBAC, encryption, and best practices for robust ML systems.
Introducing the OWASP Top Ten for Kubernetes
Explore OWASP's Top Ten Kubernetes risks, learn about common security issues, and discover strategies to enhance your containerized infrastructure's protection.
Pwning the CI with GitHub Action Workflows - Security Challenges and Exploits
Explore GitHub Actions vulnerabilities and CI security risks. Learn to identify and mitigate potential exploits in workflows and configurations to safeguard your development pipeline.
The Eye of Falco: Detecting Container Escape Techniques with Linux Capabilities
Explore container security vulnerabilities and learn how Falco can detect and respond to container escape techniques based on Linux capabilities, with real-world CVE examples.
Policy-Based Governance for End-to-End Integrity Control of Policies
Explore policy-based governance for end-to-end integrity control in Open Cluster Management, focusing on manifest signing, secure secret delivery, and admission control for enhanced Kubernetes security.
Who's Verifying Your Signatures? Approaching Private Container Image Signing
Explore container image signing for private use, comparing open-source and internal challenges. Learn about leading frameworks and their scalability for secure software delivery.
Sigstore - How We Learned to Stop Trusting Registries and Love Signatures
Explore InfluxData's journey in implementing container image signing for their SaaS offering, covering the process, challenges, and technical details from DevOps and security perspectives.
B'Envoy-age to Pre-Quantum Encryption
Explore quantum-resistant cryptography for cloud-native stacks, focusing on Envoy and Istio implementations to address potential threats from quantum computing advancements.
The Insider Threat: Third-Party Applications in Your Cluster
Explore vulnerabilities in third-party Kubernetes applications, their critical impact, and actionable steps to enhance cluster security. Learn from real-world examples and protect your infrastructure.
Understanding the Future of Ingress-nginx
Explore Ingress-nginx's future through community survey results, ongoing stabilization efforts, and discussions on prioritizing features, security enhancements, and addressing long-standing issues.
Reducing the Sticker Price of Kubernetes Security
Hands-on techniques and open-source tools for enhancing Kubernetes security, including image verification, Pod Security Standards, and SecComp profiles to prevent vulnerability exploits.
Kubernetes Networking - Introduction and Deep Dive
Explore Kubernetes networking fundamentals and recent developments with experts from Google and Red Hat. Gain insights into basic concepts and dive deep into advanced networking topics.
From Security Testing to Deployment in a Single Pull Request
Automating cloud native app development with integrated security testing, from building and scanning to packaging and deployment, all within a single pull request for consistency and efficiency.
Secure Multicluster Istio Configuration Using GitOps Patterns
Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.