Attestation and Identity Provisioning to Intel SGX Workloads
Explore workload attestation for identity provisioning in multi-cloud environments, focusing on Intel SGX technology and its benefits for enhancing application security and seamless integration.
Passport App - The Role of SPIFFE and SPIRE in a Return to Work Solution
Explore SPIFFE/SPIRE-enabled solution for managing return-to-work strategies, with insights on implementation and future possibilities in workplace management.
SPIFFE and SPIRE - Architecture Deep Dive
Explore SPIFFE and SPIRE architectures for secure service identity in cloud-native environments. Learn key concepts, implementation strategies, and best practices from industry experts.
Introduction to SPIFFE
Explore SPIFFE and SPIRE through live demos, learning how to leverage these tools in your applications for enhanced security and identity management.
Securing Kafka with SPIFFE at TransferWise
Explore how TransferWise implemented secure, scalable Kafka communication using SPIFFE, SPIRE, and Envoy for 300+ microservices, reducing maintenance and simplifying client migration.
Lessons From Migrating to SPIFFE After 10 Years of Service Identity at Square
Insights from Square's migration to SPIFFE for service identity across environments, covering challenges, community support, risk management, and lessons learned.
SPIFFE at GitHub
Explore GitHub's SPIFFE implementation, including SPIRE deployment, plugin integration, and solutions for availability and pod creation challenges in Kubernetes environments.
Using SPIRE in Production at Uber
Explore Uber's implementation of SPIFFE and SPIRE for workload authentication in diverse environments, covering architecture, practices, and benefits achieved.
Intro & Deep Dive - Kubernetes Data Protection WG
Explore the Kubernetes Data Protection Working Group's mission, current state, and future plans for enhancing data protection in Kubernetes ecosystems. Learn how to contribute to this collaborative effort.
Rook - Intro and Ceph Deep Dive
Explore Rook, a cloud-native storage orchestrator for Kubernetes, and dive deep into Ceph storage provider. Learn about architecture, improvements, and production-ready features for managing data in cloud environments.
Uniform Workload Identity Everywhere - SPIRE Integrations and Extensibility
Explore SPIRE's adaptability for secure workload identity across diverse infrastructures. Learn about integrations, extensibility, and plugin-based architecture to support your organization's unique needs.
Everything You Should Be Doing, But Aren’t - DevSecOps for K8s Workflows
Comprehensive guide to implementing DevSecOps in Kubernetes workflows, covering application security, threat detection, and governance as code with live demonstrations using CNCF projects.
Lives on the Line - Learning Disaster Response From the Coronavirus Pandemic
Exploring disaster response in cloud-native through the lens of the COVID-19 pandemic, comparing incident response in medicine and software, and highlighting open source's role in saving lives.
Kubernetes-native Security with Starboard
Explore Starboard, an open-source tool integrating security information into Kubernetes CRDs. Learn its motivations, design challenges, and how to generate actionable security insights.
Beyond the Buzzword - BPF’s Unexpected Role in Kubernetes
Explore BPF's role in Kubernetes, its recent enhancements, and how it powers cloud-native tools for networking, security, and observability. Includes live demos of BPF-based tools deployment.
Security Kill Chain Stages in a 100k+ Daily Container Environment with Falco
Explore how MathWorks uses Falco to detect security threats in a large-scale container environment, covering implementation strategies, rule creation, and mapping to the Security Kill Chain.
Notary v2 - Redesigning the Secure Supply Chain for Containers
Explore Notary v2's redesign for secure container supply chains, focusing on OCI registry-native protocols and improved ecosystem security based on community experience.
Harbor - Enterprise Cloud Native Artifact Registry
Explore Harbor's enterprise cloud native registry features, including RBAC, content replication, vulnerability scanning, and future roadmap for enhanced container management and distribution.
Intro and Deep Dive - Kubernetes SIG-Storage
Explore Kubernetes SIG-Storage's role in managing file and block storage, capacity, and operations. Learn about current projects, future plans, and how to get involved in this essential Kubernetes component.
Layers of Isolation in Kubernetes
Explore Kubernetes isolation layers, from containers to clusters. Learn security architecture, real-world attacks, and mitigation strategies for effective workload separation based on threat models.
SAFE - A Cloud Native Security Working Group
Explore cloud native security with SAFE, a working group addressing access controls and safety concerns in modern architectures, presented by Liz Rice from Aqua Security.