Keynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...
summary
A survey from Red Hat finds many teams claim “DevSecOps” but most only shift left with CI vulnerability scans; enterprise adoption of full feedback loops and runtime response remains limited. The ecosystem ships concrete tooling: sigstore for pipeline signing and transparency, encrypted containers and rootless builds for safer images, plus calls for user namespaces and stronger separation of cluster-admin vs data-plane privileges. Expect focus on observability-driven automated response and practical operational playbooks.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:29Gartner
- 5:09State of Kubernetes Security
- 7:17Sig Store
- 7:59Encrypted Containers
- 8:35Kubernetes Support for User Namespaces
related talks
10mKeynote: CloudNativeDevSecOps
17mKeynote: Welcome + Opening Remarks
09mKeynote: Supply Chain: The New Threat Vector in Cloud Native Security
17mKeynote: Modern Least Privilege with DevSecOps
14mKeynote: Back to the Future: Next-Generation Cloud Native Security
15mKeynote: The Security Symphony
25mKeynote: DevOps - The Return of Security
35mKeynote: Reliability in Cloud Native DevOps