Experiences From Running Istio in a K8s Production Environment
Insights on deploying Istio in multi-cloud Kubernetes environments, covering traffic control, security, and overcoming challenges in production settings.
Modern Service Networking With Consul Connect, Envoy and Kubernetes
Explore modern service networking using Consul Connect, Envoy, and Kubernetes. Learn about service mesh benefits, secure communication, and configuring Connect and Envoy for enhanced application security.
From Containerized Application to Secure and Scaling With Kubernetes
Learn to secure and scale containerized applications with Kubernetes, covering authentication, authorization, MTLS, certificate management, CICD, availability, and scalability for production-ready code.
Protecting Stateful Workloads With CSI Snapshot
Explore CSI Snapshot for Kubernetes: safeguard data, enable backups, and facilitate migrations. Learn about API design, controllers, and practical applications for ensuring data integrity in stateful workloads.
Intro - Harbor
Explore Harbor, an open-source cloud-native registry for secure container image management. Learn about RBAC, vulnerability scanning, image distribution, replication, and provenance through real-world use cases.
Protecting Ourselves from CNCFgate - Software Supply Chain Security at CNCF - Practices, and Tools
Explore cloud-native software supply chain security practices, challenges, and tools. Learn strategies to protect against vulnerabilities and attacks in complex software systems.
Kubernetes Data Protection WG Intro and Deep Dive
Explore Kubernetes data protection efforts, current state, future directions, and how to contribute to the Data Protection Working Group's mission of enhancing K8s data safeguarding.
What Do You Mean K8s Doesn't Have Users? How Do I Manage User Access Then?
Explore Kubernetes authentication and authorization, including user access management, permissions, RBAC, and security best practices for efficient cluster administration.
FalcOMG That's AWESOME - New Things, Fixed Things, and YOU Panel
Explore Falco's latest updates, driver donation impact, and future roadmap with key maintainers. Learn about this cloud-native runtime security project and its role in Kubernetes threat detection.
Compliance Beyond Security - A Cloud Native GDPR Implementation Experience
Explore GDPR implementation challenges in cloud-native environments, focusing on user data rights, data removal across the stack, and compliance strategies for modern regulatory landscapes.
Get In Containerds, We’re Going Securing - Kubernetes SIG Security is Here
Explore Kubernetes SIG Security's initiatives, including security audits, documentation, and community building. Learn how to contribute to enhancing Kubernetes project security.
The Art of Hiding Yourself
Explore hacker techniques for anonymity in Kubernetes clusters, covering audit log tampering, process concealment, unconventional file storage, and network connection masking.
How DoD Uses K8s and Flux to Achieve Compliance and Deployment Consistency
Explore DoD's journey with K8s and Flux for improved compliance, deployment consistency, and air-gapped operations in restricted environments.
CSI Volume Attacks – The SRE Strikes Back
Explore CSI security, Kubernetes protection, and storage protocols. Learn to safeguard data from unauthorized access with demos on volume lifecycle, pod policies, and file system permissions.
Notary v2 - Supply Chain Security for Containers
Explore Notary v2's advancements in container supply chain security, its integration with other initiatives, and its path to production. Learn about registry-native solutions and ongoing developments.
Noise Cancelling Headphones for Fluent Bit - Powered by Lua
Explore Fluent Bit's Lua filter plugin for IP address enrichment and noise reduction in log data, enhancing security and data engineering workflows.
Secure Code Development and Lessons Learned from etcd Security Audit
Insights from etcd security audit: common code vulnerabilities, critical threats, and best practices for secure development in open-source projects.
Constructing Building Blocks for Production Grade Cloud Native Deployments - with Crossplane
Discover how Crossplane and composition enable deployment of a highly available Vault with GCS backup, Cloud KMS auto-unsealing, and GCP workload identity, simplifying cloud-native infrastructure assembly.
Beyond Signatures - Using TUF and Notary to Secure Software Distribution
Explore TUF and Notary for secure software distribution, focusing on protection against attacks, adapting TUF for Notary v2, and addressing unique registry ecosystem challenges.
Integrating Security in the Build Pipeline
Discover how to integrate security into your build pipeline, addressing vulnerabilities early and making deployment decisions based on artifact security status.
Modern Least Privilege with DevSecOps
Explore modern least privilege principles in DevSecOps, focusing on platform teams, continuous delivery, and scaling to zero for enhanced security and efficiency in cloud-native environments.