Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building
Explore a comprehensive demonstration on utilizing kpack for building container images on Kubernetes clusters. Discover the advantages of kpack, including its declarative builder resource and use of unprivileged Kubernetes primitives. Learn how kpack exports OCI-compatible images, orchestrates around source code, and schedules rebuilds based on changes to source, stack, or buildpacks. Delve into kpack's internal use of Cloud Native Buildpacks and its potential to enhance supply chain security. Understand how kpack integrates with sigstore projects like cosign, provides a parameterless and hermetic build process for higher SLSA levels, and automatically generates SBOMs. Gain valuable insights into improving security practices, particularly in the realm of supply chain security, through this informative conference talk.