Panel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kub...
summary
Demo shows DockerSlim shrinking an nginx image from about 142 MB to 12.2 MB image and producing an auto-generated Seccomp profile; a kind cluster mounts that profile, the minified image is pushed to a registry, and Kyverno runs a Kyverno validate-and-enforce policy that blocks pods missing the seccomp securityContext. The end-to-end setup builds the artifact folder, loads the profile into nodes, applies the cluster-wide policy and successfully prevents an unsecured pod from being created.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:27Panelists
- 3:13Kubernetes policies
- 5:22Kyverno introduction
- 7:32Kyverno use cases
- 9:58Kyverno demo
- 14:33DockerSlim introduction
- 17:22Container image problems
- 19:52DockerSlim optimization
- 20:13DockerSlim demo
- 23:23Syscalls and SELinux
- 27:15DockerSlim + Kyverno
- 31:08Combined demo
- 39:49Summary
related talks
31mKnow Your Hard:Automate image security scan with Kyverno & Trivy
27mUnderstanding Kyverno in a Visual Way
01h 29mTutorial: Reducing the Sticker Price Of Kubernetes Security
32mLocal development techniques with Kubernetes
01h 18mEmbracing Docker simplicity - while harnessing platform power
42mLocal Development Techniques with Kubernetes
42mImproving Containers Isolation in Kubernetes
46mA Security State of Mind: Continuous Security with Kubernetes