Deja Vu: Let's think about security again! - Shripad Nadgowda & Paolo Dettori, IBM
summary
NSA labels misconfiguration the top cloud vulnerability and Gartner projects 99% of cloud failures blamed to customers by 2025 — argument: shift infra control to Kubernetes via Crossplane demands rethinking security. Demonstrated a single DevSecOps pipeline that merges app and infra workflows using kubectl, Argo CD and Tekton, plus admission controllers and PR-time checks that report container resource limits and package vulnerabilities. Built an IBM Cloud provider experimental, supports Resource Controller API, Helm provider, Go templating and import of existing services, and ties infra checks to NIST-style controls.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 2:05Cloud provider
- 6:22Current security practices
- 9:45Crossplane
- 17:05Sustainable Security
related talks
10mKeynote: CloudNativeDevSecOps
19mHow to Secure Your Kubernetes Clusters
32mHacking the Cloud Native Renaissance: Lowering Risk of Kubernetes Adoption
56mThe Future of AppSec is Cloud-Native
06mKeynote: Skip the Anxiety Attack - Build Secure Apps with Kubernetes
09mKeynote: Supply Chain: The New Threat Vector in Cloud Native Security
22mSecuring Kubernetes: Best Practices for DevSecOps in the Cloud-Native Era
35mCloud Native Security for the Rest of Us