Achieving Pragmatic Parity for Windows Containers
summary
Garden Windows reports concrete features: custom CA injection works by importing certs into a Windows container image layer so future containers inherit them; graceful shutdown provides a hard-coded 10 second control-shutdown window for apps that register a handler; route integrity and optional mutual TLS are enabled with an nginx sidecar that translates Envoy SDS configs (Envoy on Windows remains incomplete); container-to-container networking is unresolved but service-mesh via Envoy is in active development.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:45Pragmatic Parity
- 1:53custom CA certificate injection
- 2:36windows implementation
- 6:22graceful shutdown
- 9:34route integrity & (m)tls
- 12:52envoy on windows is working???
- 13:07what is nginx doing?
- 16:45container-to-container networking
related talks
33mCloud Foundry’s New .NET Capabilities
45mThe Windows Sandbox Paradox
44mModernize your Win32 application for security and privacy Q&A
37mIt’s 2018; Are My Containers Secure Yet?!
46mSecuring Applications and Pipelines on a Container Platform
40mSecuring Containers on the High Seas
53mFrom Secure Container to Secure Service
26mSecure Containers Deployments: Time for Refresh