Sponsored Keynote: From Kubernetes to Anything: The Evolution of Promotion...
summary
Kargo is now a universal promotion layer that runs user-defined container steps to enforce supply chain and policy checks before any Git commit, combining GitOps with policy-driven workflows. Demo shows Kargo invoking Trivy image to fail an Nginx with critical CVEs and running OPA test to reject a manifest with a privileged container; failures prevent any Git push so Argo CD never sees unsafe changes. Kargo also runs Cosign verification, Liquibase/Flyway migrations, and custom API or test containers.
AI-written summary · about
chapters (7)
- 0:00Introduction to Kargo
- 0:18Challenges in promotion
- 0:54The role of Kargo
- 1:48Custom promotion steps
- 2:13Demo and validation
- 4:34Promotion as a boundary
- 5:27Announcements and wrap-up
related talks
10mThe Power of OPA Gatekeeper: Enforcing Kubernetes Access Control to secure your runtime
22mGitOps - The Magic Key to Cloud Native Security
34mMake the Secure Kubernetes Supply Chain Work for You
07mKeynote: Everything as Code: Declarative Application Delivery with GitOps Workflows- Christian Hernandez, Red Hat
26mSecuring GitOps Supply Chain with Sigstore and Kyverno
35mEnforcing a Secure Supply Chain on Kubernetes
30mA secure journey on Kubernetes
25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...