Practical Challenges with Pod Security Admission
29 min

Practical Challenges with Pod Security Admission

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
V Kรถrbes Christian Schlotter
kubernetes pod-security-admission security containers kubernetes-security admission-controller least-privilege vmware pod-security-policies workloads security-profiles
Malicious Compliance: Reflections on Trusting Container Scanners
36 min

Malicious Compliance: Reflections on Trusting Container Scanners

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Ian Coldwater Duffie Cooley Brad Geesaman Rory McCune
container-scanning kubernetes security vulnerability-management docker sbom ci-cd supply-chain-security policy-as-code cloud-native alpine-linux go
The Next Log4jshell?! Preparing for CVEs with eBPF!
36 min

The Next Log4jshell?! Preparing for CVEs with eBPF!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Natalia Reka Ivanko John Fastabend
ebpf log4jshell cve kubernetes security observability runtime-security vulnerability-management linux-kernel kernel-extensions network-security process-monitoring
Prevent Embarrassing Cluster Takeovers with This One Simple Trick!
38 min

Prevent Embarrassing Cluster Takeovers with This One Simple Trick!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Daniele de Araujo dos Santos Shane Lawrence
kubernetes security cloud-native container-security kubeaudit least-privilege devsecops ci-cd vulnerability-management runtime-security cluster-security
The Top 10 List of Istio Security Risks and Mitigation Strategies
35 min

The Top 10 List of Istio Security Risks and Mitigation Strategies

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Josรฉ Carlos Chรกvez
istio security kubernetes cloud-native service-mesh networking observability authorization authentication mtls supply-chain-security web-application-firewall
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
33 min

What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
James Callaghan Richard Featherstone
zero-trust threat-modeling cloud-native kubernetes istio service-mesh workload-identity authorization opa security distributed-systems
Open Policy Agent (OPA) Intro & Deep Dive
34 min

Open Policy Agent (OPA) Intro & Deep Dive

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Charlie Egan
opa open-policy-agent policy-engine kubernetes microservices ci-cd cloud-native security opa-gatekeeper
The Compliance Business Case for Kubernetes in the EU: Get Ready for EUCS
35 min

The Compliance Business Case for Kubernetes in the EU: Get Ready for EUCS

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Robert Ficcaglia Anders Eknert
kubernetes eucs compliance policy-as-code opa rego cncf cloud-native security auditing governance oscal
Use Knative When You Can, and Kubernetes When You Must
37 min

Use Knative When You Can, and Kubernetes When You Must

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
David Hadas Michael Maximilien
knative kubernetes serverless microservices cloud-native automation auto-scaling security cost-optimization developer-experience
Kubernetes Database Operators Landscape
33 min

Kubernetes Database Operators Landscape

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Xing Yang Melissa Logan Sergey Pronin Alvaro Hernandez
kubernetes operators database-operators stateful-workloads data-on-kubernetes cncf storage cloud-native day-2-operations security automation
eBPF 201: Supercharging Your eBPF Dev Process for Cloud Native Apps
35 min

eBPF 201: Supercharging Your eBPF Dev Process for Cloud Native Apps

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Sanjeev Rampal Donald Hunter
ebpf cloud-native kubernetes linux-kernel observability networking development-practices security storage libbpf btf corey
Future of Istio - Sidecar, Sidecarless or Both?
30 min

Future of Istio - Sidecar, Sidecarless or Both?

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Neeraj Poddar
istio service-mesh sidecar sidecarless ambient-mesh kubernetes cncf networking security mtls observability