Implementing an Auditable Access Control Strategy Using Cluster Certificate Authority Rotation
30 min

Implementing an Auditable Access Control Strategy Using Cluster Certificate Authority Rotation

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Tyler Lisowski Kodie Glosser
kubernetes certificate-authority access-control security ca-rotation zero-downtime mtls credential-management cluster-security
Can You Keep a Secret? on Secret Management in Kubernetes
38 min

Can You Keep a Secret? on Secret Management in Kubernetes

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Liav Yona Gal Cohen
kubernetes secrets-management secret-store-csi-driver cloud-native csi-driver security access-control authentication key-management devops
Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
30 min

Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Alex Ilgayev Elad Pticha
cicd oidc cloud-security authentication identity-management github-actions gitlab-ci gcp aws azure access-control
Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments
34 min

Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Christophe Tafani-Dereeper Diego Comas
kubernetes cloud-services aws-eks azure-aks gcp-gke iam security server-side-request-forgery workload-identity secrets-management access-control incident-response
RBAC to the Future: Untangling Authorization in Kubernetes
27 min

RBAC to the Future: Untangling Authorization in Kubernetes

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Jimmy Mesta
kubernetes rbac authorization security cloud-native access-control kubernetes-security least-privilege iam cve
A Confidential Story of Well-Kept Secrets
39 min

A Confidential Story of Well-Kept Secrets

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Lukonde Mwila
kubernetes secrets-management security aws external-secrets-operator argo-cd opa-gatekeeper gitops cloud-native data-encryption access-control devops