Kubernetes SIG Auth Deep Dive
36 min

Kubernetes SIG Auth Deep Dive

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Jordan Liggitt Mike Danese Rita Zhang David Eads
kubernetes kubernetes-sig-auth authentication authorization auditing security api-security cloud-native container-orchestration
Can You Keep a Secret? on Secret Management in Kubernetes
38 min

Can You Keep a Secret? on Secret Management in Kubernetes

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Liav Yona Gal Cohen
kubernetes secrets-management secret-store-csi-driver cloud-native csi-driver security access-control authentication key-management devops
Hardening Kubeflow Security for Enterprise Environments
41 min

Hardening Kubeflow Security for Enterprise Environments

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Julius von Kohout Diana Dimitrova Atanasova
kubeflow kubernetes mlops security enterprise-security authentication authorization rbac vulnerabilities cvss software-supply-chain ci-cd
The Top 10 List of Istio Security Risks and Mitigation Strategies
35 min

The Top 10 List of Istio Security Risks and Mitigation Strategies

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
José Carlos Chávez
istio security kubernetes cloud-native service-mesh networking observability authorization authentication mtls supply-chain-security web-application-firewall
Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
30 min

Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Alex Ilgayev Elad Pticha
cicd oidc cloud-security authentication identity-management github-actions gitlab-ci gcp aws azure access-control
InSPIREing Progress: How We're Growing SPIFFE and SPIRE in 2023 and Beyond
55 min

InSPIREing Progress: How We're Growing SPIFFE and SPIRE in 2023 and Beyond

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Daniel Feldman Andrés Vega
spiffe spire workload-identity zero-trust cncf kubernetes security cloud-native authentication tpm istio
How to Make Your K8s Cluster Survive When It Has No Internet Access: Airgap Reflection in a Cloud Native World
31 min

How to Make Your K8s Cluster Survive When It Has No Internet Access: Airgap Reflection in a Cloud Native World

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Christophe Jauffret
kubernetes k8s airgap cloud-native container-runtime registry policy-management proxy authentication helm docker networking
Envoy Gateway Update
19 min

Envoy Gateway Update

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Alice Wasko Arko Dasgupta
envoy-gateway envoy-proxy api-gateway kubernetes cloud-native ingress-controller grpc tcp-routes udp-routes rate-limiting authentication xds
Cert-Manager Can Do SPIFFE? Solving Multi-Cloud Workload Identity Using a De Facto Standard Tool
38 min

Cert-Manager Can Do SPIFFE? Solving Multi-Cloud Workload Identity Using a De Facto Standard Tool

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Thomas Meadows Joshua Van Leeuwen
cert-manager spiffe kubernetes workload-identity multi-cloud csi-driver x509 authentication security cloud-native identity-management
Keynote: Cappucci-Know: Percolating EU End User Insights in the Cloud Native Café
10 min

Keynote: Cappucci-Know: Percolating EU End User Insights in the Cloud Native Café

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Taylor Dolezal Yuichi Nakamura Sergiu Petean Kasper Borg Nissen Sabine Wolz
cloud-native kubernetes cncf keynote end-user-insights digital-sovereignty open-source community authentication authorization automotive fintech
Fortify the Fort: Think Outside the Security
21 min

Fortify the Fort: Think Outside the Security

Droidcon - Droidcon London 2024
Goran Minov
android security authentication authorization oauth oidc rate-limiting race-condition biometrics mfa api-security identity-management
Passwordless Future!!
26 min

Passwordless Future!!

Droidcon - Droidcon London 2024
Ayushi Gupta
passwordless-authentication passkeys android-development fido-alliance public-key-cryptography authentication security user-experience google-password-manager biometrics android-9 webauthn android