Secure All the Things: From IaC to Kubernetes
summary
A concrete DevSecOps setup that secures the full path from Infrastructure as Code to Kubernetes deployments, using automated, risk-aware pipelines and prevention practices. It covers secure CI/CD pipelines, GitOps-based secret management, a Kubernetes cluster provisioned with Cluster API and Talos Linux, Policy-as-Code for enforcement, and encrypted communications.
AI-written summary · about
chapters (14)
- 0:00DevOps security intro
- 1:03Banking compliance context
- 3:10Secure cloud IaC
- 7:24Terraform to OpenTofu
- 9:50Securing containers
- 13:03GitLab CI/CD
- 16:34Kubernetes and Talos Linux
- 18:41Cluster API deployment
- 20:49GitOps with Argo CD
- 22:35Secrets with ESO
- 25:26Kyverno enforcement
- 26:29Istio networking
- 32:05Security culture conclusion
- 41:56Q&A
related talks
11mSecuring the Kubernetes Ecosystem
19mHow to Secure Your Kubernetes Clusters
22mSecuring Kubernetes
46mContinuous Kubernetes Security
24mOne stop talk for kubernetes security !!
40mSecurity-as-Code to Accelerate DevSecOps, a Practical Guide to Get Started
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
26mEverything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows