Network Isolation and Security Policies for Kubernetes Bare-metal Nodes
Explore network isolation and security policies for Kubernetes bare-metal nodes using SDN, OVN, and OVS, with Smart NIC offloading for efficient multi-tenant cloud environments.
Handling Container Vulnerabilities with Open Policy Agent
Automate vulnerability handling in container security using Open Policy Agent. Learn to apply custom policies for efficient decision-making and streamline the process of addressing critical issues.
Enabling Multi-user Machine Learning Workflows for Kubeflow Pipelines
Explore multi-user workflows for Kubeflow Pipelines using Kubernetes-native solutions. Learn how to implement access control, authentication, and authorization for machine learning platforms.
Communication Is Key - Understanding Kubernetes Networking
Explore Kubernetes networking concepts through hands-on labs. Learn about DNS, iptables, routing, and more to gain a deeper understanding of cluster communication and troubleshooting techniques.
Five Great Ways to Lose Data on Kubernetes - And How to Avoid Them
Explore common data loss scenarios in Kubernetes and learn effective prevention strategies. Gain insights on high availability, disaster recovery, and cloud-native challenges for database management.
Hey, Did You Hear About This New CVE? - A Vulnerability Response Playbook
Develop a vulnerability response playbook for Kubernetes infrastructure, covering preparation, mitigation, and cleanup strategies for complex security issues using tools like audit logs and network policies.
Cloud Native Policy Deep Dive
Explore open source initiatives in cloud native policy, including formal verification, violation CRD, and runtime interfaces. Learn about key developments and future directions in policy management for cloud environments.
How This Innocent Image Had a Party in My Cluster
Explore sophisticated techniques used by malicious actors to evade container image scanning, and learn practical advice for detecting and mitigating these advanced attacks in Kubernetes clusters.
The Common Configuration Scoring System for Kubernetes Security
Explore KCCSS, an open-source framework for assessing Kubernetes workload risks. Learn how it calculates scores, its implementation in kube-scan, and best practices for securing K8s applications.
Deep Dive Into Building a Secure & Multi-tenant SaaS Solution with NATS
Explore building secure, multi-tenant SaaS solutions using NATS messaging. Learn to create globally available applications with Pub/Sub, focusing on a minimal chat app implementation in Go.
Uncharted Territories - Discovering Vulnerabilities in Public Helm Charts
Explore vulnerabilities in public Helm Charts, examining security considerations for both Helm as a tool and individual charts. Learn about CNCF's security investments and their impact on Kubernetes ecosystem.
Service Mesh Is Still Hard - The Things We All Did Wrong & Tales of Woe
Explore challenges and complexities of service mesh implementation, including tradeoffs, configuration issues, and best practices for cloud-native applications.
Kubernetes Attack and Defense - Inception-Style
Explore Kubernetes security through a multi-layered attack scenario, including update poisoning, service interception, and cloud API exploitation. Learn defensive strategies using OPA/Gatekeeper.
New Paradigms for the Next Era of Security - Cyber Defense Matrix
Explore new security paradigms for the 2020s, focusing on distributed, immutable, and ephemeral systems to combat irreversible attacks and enhance resilience in cloud-native environments.
Collection is not Detection - Sec Ops in a Cloud Native Environment
Optimizing cloud-native security operations: Strategies for efficient log collection, modern tooling, and rapid response in transitioning from on-premises to cloud environments.
Pod Security as an Afterthought
Explore tools for implementing Kubernetes security measures retrospectively, including kube-psp-advisor, Inspektor Gadget, and oci-seccomp-bpf-hook, to enhance pod security in existing deployments.
Deep Dive - Kubernetes SIG Storage
Explore Kubernetes SIG Storage's latest projects, updates, and future plans for efficient container storage management, including volume expansion, snapshots, capacity tracking, and more.
Build Image as a Service By Using Tekton
Learn how to implement a scalable, secure image building service using Tekton for enterprise-level applications, automating vulnerability fixes and streamlining the development process.
Deep Dive - Linkerd
Explore Linkerd's multi-cluster mTLS functionality for secure cross-cluster communication. Learn implementation details, best practices, and future roadmap from the lead engineer behind this feature.
BPF for Chaos and Tracing in Kubernetes
Explore BPF for analyzing kernel failures and simulating chaos in Kubernetes. Learn to develop BPF programs, conduct kernel chaos experiments, and achieve "Compile Once – Run Everywhere" on 5.x kernels.
Policy Management in Kubernetes - Moving to a Centralised Management Model
Explore centralized policy management for Kubernetes, covering current technologies like OPA and Gatekeeper, production applications, and future developments for enterprise-wide policy control.