Dance Madly on the Lip of a Volcano
summary
Describes a concrete Kubernetes security-release workflow: reports hit a public security mailing list, a private repo holds patches and CI, a small expert team forms within 24 hours, patches land within seven days and binaries are cut on a 21-day release cadence; CVSS-style scoring guides severity decisions. Infrastructure includes GPG-signed artifacts, automated CI against ~20 test configurations and release scripts; project sustains three minor releases (9–12 months support). Process already runs and succeeded in the first live exercise.
AI-written summary · about
chapters (6)
- 0:00Intro
- 4:15Open Source Security Disclosure
- 10:52Community Security Process
- 15:50Kubernetes Release Process
- 19:02Successful Releases
- 24:26Improvements
related talks
39mFrom CVD to Secure Releases: Automating Security from Source to Releases
46mA Security State of Mind: Continuous Security with Kubernetes
40mEmbracing Security - A Changing DevOps Landscape
48mImproving the Security of a Large Open Source Project One Step...
45mDeploying to production with confidence
26mBoost your security and resiliency in Kubernetes
53mWhere The Wild Things Are: The State Of Open Source Supply Chain Risk Management In Three Stories
35mKeynote: How I learned to stop worrying and love CVEs