Kyverno Introduction and Deep Dive
36 min

Kyverno Introduction and Deep Dive

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Charles-Edouard Brétéché Jinhong Brejnholt
kyverno kubernetes policy-engine security automation validation software-supply-chain-security governance policy-as-code
The Ins and Outs of the Cloud Provider in Kubernetes
36 min

The Ins and Outs of the Cloud Provider in Kubernetes

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Michael McCune Joel Speed Bridget Kromhout
kubernetes cloud-provider ccm sig-cloud-provider kubelet kube-controller-manager cpi container-networking load-balancing node-lifecycle ha-configuration
OpenTelemetry: Using Unified Semantics to Drive Insights + Project Update
38 min

OpenTelemetry: Using Unified Semantics to Drive Insights + Project Update

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Morgan McLean Alolita Sharma Daniel Dyla Ted Young
opentelemetry observability semantic-conventions tracing collector kubecon cloud-native telemetry data-modeling profiling
Kubernetes SIG Apps Updates
31 min

Kubernetes SIG Apps Updates

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Maciej Szulik Janet Kuo Kenneth Owens
kubernetes sig-apps application-deployment application-operations api-promotions controller-improvements batch-jobs statefulsets daemonsets cronjobs cloud-native
Kubernetes Security Response Committee: Intro & Deep Dive
35 min

Kubernetes Security Response Committee: Intro & Deep Dive

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Monis Khan Micah Hausler
kubernetes security vulnerability-management cve bug-bounty cloud-native aws microsoft api-security supply-chain-security
Cluster Grey Zone: Risks in Managed Cluster Middleware
30 min

Cluster Grey Zone: Risks in Managed Cluster Middleware

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Shay Berkovich Barak Sharoni
kubernetes cloud-security managed-kubernetes eks gke aks cluster-middleware attack-surface privilege-escalation container-security threat-modeling fluent-bit node-problem-detector
Chaos Engineering 2023 with Chaos Mesh
36 min

Chaos Engineering 2023 with Chaos Mesh

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Saiyam Pathak
chaos-engineering chaos-mesh kubernetes resilience reliability microservices distributed-systems cloud-native testing ci-cd observability performance
Running Not Root Made Easy
29 min

Running Not Root Made Easy

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Luboslav Pivarc
kubernetes non-root security pods containers virtual-machine capabilities selinux apparmor runtime kubevirt
Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper and Ratify
37 min

Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper and Ratify

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Jeremy Rickard
kubernetes supply-chain-security gatekeeper ratify opa rego oci admission-controller policy-as-code sbom ci-cd
Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments
34 min

Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Christophe Tafani-Dereeper Diego Comas
kubernetes cloud-services aws-eks azure-aks gcp-gke iam security server-side-request-forgery workload-identity secrets-management access-control incident-response
Kubernetes Defensive Monitoring with Prometheus
27 min

Kubernetes Defensive Monitoring with Prometheus

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
David de Torres Huerta Mirco De Zorzi
kubernetes prometheus monitoring security falco cloud-native container-security threat-detection anomaly-detection observability cncf
Improve Vulnerability Management with OCI Artifacts – It Is That Easy!
36 min

Improve Vulnerability Management with OCI Artifacts – It Is That Easy!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Itay Shakury Toddy Mladenov
vulnerability-management oci-artifacts sbom supply-chain-security container-security trivy notary oras cicd kubernetes container-registry signing