Mutual TLS Adoption Made Simple, Safe and Secure
Explore innovations in Envoy for seamless mTLS adoption in service meshes, including TLS sniffing and endpoint labeling, to simplify and secure implementation.
A Hard Multi-tenancy Solution - Use Case, Challenges and Work
Explore hard multi-tenancy in Kubernetes: use cases, challenges, and solutions for strong isolation among untrusted tenants in shared clusters, with insights and a demo.
The Kubernetes Bug Bounty Program - What Researchers and Users Need to Know
Explore Kubernetes' Bug Bounty Program: its implementation, scope, rewards, and impact on cluster security. Learn how researchers can contribute and users can benefit from this initiative.
Sharing Clusters - Learnings From Building a Namespace On-Demand Platform
Explore multi-tenancy in Kubernetes, covering authentication, RBAC, admission control, namespace provisioning, network isolation, and resource management for shared cluster environments.
Introduction to Data Protection WG in Kubernetes
Explore Kubernetes Data Protection WG: its formation, charter, current state, future plans, and how to contribute. Learn about persistent volumes, snapshots, and upcoming features.
Deep Dive - CNI
Explore CNI's role in container networking, focusing on Tuning and Firewall plugins. Aimed at network plugin implementers and runtime users, with discussion and Q&A opportunities.
OpenID Connect as SSO Solution - Strengths and Weaknesses
Explore OpenID Connect for SSO: its workings, comparisons to SAML, integration examples, common issues, and solutions for non-OIDC applications using Nginx proxy authentication delegation.
Getting Started With Cloud Native Security
Comprehensive tutorial on Kubernetes security basics, covering threat modeling, attack vectors, and practical techniques for securing deployments using open-source tools and best practices.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
How Many CPU Cycles I Need to Invest in Cloud Native Security?
Explore TLS performance in cloud-native environments, comparing implementations, cryptographic suites, and deployment models to optimize security and efficiency in microservices communication.
Episode IV - A New Network Service Mesh
Explore Network Service Mesh: a revolutionary approach to Cloud Native networking that simplifies complexity, enables multi-cloud connectivity, and integrates with SPIFFE and OPA for enhanced identity and policy support.
Owned By Statistics - How Kubeflow & MLOps Can Help Secure Your ML Workloads
Explore MLOps and Kubeflow to secure machine learning workflows, mitigate risks, and enhance reproducibility, validation, and deployment in production environments.
CoreDNS for Hybrid and Multi-Cloud
Explore CoreDNS configurations for hybrid and multi-cloud environments, including cloud vendor integration, secure DNS protocols, and multi-cluster service discovery across clouds.
Taming Data - State Challenges for ML Applications and Kubeflow
Explore challenges and solutions for managing data and state in ML applications using Kubeflow, covering storage APIs, data security, and scalability for large-scale AI/ML environments.
Threat Modelling - Securing Kubernetes Infrastructure & Deployments
Explore secure Kubernetes architecture, threat modeling, and defense-in-depth strategies for regulated environments. Learn real-world examples, compliance standards, and advanced mitigations for multi-tenant security.
Notary v2 Introduction and Status Report
Explore Notary v2: enhancing container signing infrastructure, addressing usability issues, and enabling broad adoption. Learn about registry-native signatures and the project's roadmap.
Securing Your Healthcare Data with OPA
Explore OPA-driven security for healthcare data, focusing on policy-enabled apps, least-privilege access, and real-world examples of protecting sensitive information in microservice architectures.
How to Work in Cloud Native Security - Demystifying the Security Role
Explore cloud native security with Docker's Security Lead. Learn about transitioning from ops/dev to security, key skills, and why it's an exciting field. Gain insights on threat modeling and quality-focused security practices.
Seccomp Security Profiles and You - A Practical Guide
Explore tools for creating seccomp security profiles and understanding Linux Capabilities to harden applications. Learn about Dockersl.im and Inspektor Gadget for improved visibility into pod behavior.
From Alert Notification to Comparison of Good and Bad Requests in One Click
Explore efficient troubleshooting by linking metrics, traces, and alerts. Learn to compare problematic and normal traces automatically, reducing time-to-mitigation using open-source tools like Prometheus and Jaeger.
In a Container, Nobody Hears Your Screams - Next Generation Process Isolation
Explore next-gen process isolation techniques, comparing containers and micro VMs for secure workload execution. Learn about emerging technologies and their suitability for different applications.