A Look Under the Hood of CNCF Security Audits
31 min

A Look Under the Hood of CNCF Security Audits

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Adam Korczynski David Korczynski
cncf security-audits cloud-native open-source-security threat-modeling vulnerability-management cve salsa-compliance supply-chain-security argo cilium flux
Practical Challenges with Pod Security Admission
29 min

Practical Challenges with Pod Security Admission

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
V Körbes Christian Schlotter
kubernetes pod-security-admission security containers kubernetes-security admission-controller least-privilege vmware pod-security-policies workloads security-profiles
Malicious Compliance: Reflections on Trusting Container Scanners
36 min

Malicious Compliance: Reflections on Trusting Container Scanners

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Ian Coldwater Duffie Cooley Brad Geesaman Rory McCune
container-scanning kubernetes security vulnerability-management docker sbom ci-cd supply-chain-security policy-as-code cloud-native alpine-linux go
The Next Log4jshell?! Preparing for CVEs with eBPF!
36 min

The Next Log4jshell?! Preparing for CVEs with eBPF!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Natalia Reka Ivanko John Fastabend
ebpf log4jshell cve kubernetes security observability runtime-security vulnerability-management linux-kernel kernel-extensions network-security process-monitoring
Prevent Embarrassing Cluster Takeovers with This One Simple Trick!
38 min

Prevent Embarrassing Cluster Takeovers with This One Simple Trick!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Daniele de Araujo dos Santos Shane Lawrence
kubernetes security cloud-native container-security kubeaudit least-privilege devsecops ci-cd vulnerability-management runtime-security cluster-security
The Top 10 List of Istio Security Risks and Mitigation Strategies
35 min

The Top 10 List of Istio Security Risks and Mitigation Strategies

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
José Carlos Chávez
istio security kubernetes cloud-native service-mesh networking observability authorization authentication mtls supply-chain-security web-application-firewall
Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
30 min

Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Alex Ilgayev Elad Pticha
cicd oidc cloud-security authentication identity-management github-actions gitlab-ci gcp aws azure access-control
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
33 min

What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
James Callaghan Richard Featherstone
zero-trust threat-modeling cloud-native kubernetes istio service-mesh workload-identity authorization opa security distributed-systems
Painless Multi-Cloud to the Edge Powered by NATS & Kubernetes
41 min

Painless Multi-Cloud to the Edge Powered by NATS & Kubernetes

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Tomasz Pietrek David Gee
nats kubernetes multi-cloud edge-computing messaging pub-sub request-reply iot cloud-native networking microservices k3s
Minikube from CLI to GUI!
39 min

Minikube from CLI to GUI!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Medya Ghazizadeh
minikube kubernetes cli gui docker container-runtime golang developer-velocity testing automation cloud-native local-development
What's New in Operator Framework?
23 min

What's New in Operator Framework?

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Jonathan Berkhahn Per Gonçalves da Silva
kubernetes operator-framework operator-sdk operator-lifecycle-manager olm crd automation cloud-native devops container-orchestration package-management dependency-resolution
Open Policy Agent (OPA) Intro & Deep Dive
34 min

Open Policy Agent (OPA) Intro & Deep Dive

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Charlie Egan
opa open-policy-agent policy-engine kubernetes microservices ci-cd cloud-native security opa-gatekeeper