Labels, Labels, Labels
summary
Claim: embed full metadata and even runnable manifests inside image labels and use CI policy to enforce them. A demo builds an image (build #12) with base64-encoded Kubernetes YAML and Compose stored as labels, Jenkins injects build args, StackRox rejects images missing required labels, Skopeo reads labels remotely and pipes decoded YAML to kubectl apply, deploying to a K3s cluster behind Traefik with Redis hit counter. The technique works end-to-end and avoids extra artifact storage.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:07Why Use Labels
- 2:31Defining Label Schemas
- 4:48Recommended Label Sets
- 6:20Creating and Viewing Labels
- 7:23Advanced Label Techniques
- 9:08Demo and Security Policy
- 14:07Demoing Scopio and Deploy
- 16:18Testing the Application
- 16:57Recap and Conclusion
related talks
37mKubernetes, Metadata and You [I]
30mEstablishing Image Provenance and Security in Kubernetes - Adrian Mouat, Container Solutions
38mTutorial: Building Security into Kubernetes Deployment Pipelines
27mApplying CI/CD Patterns to Image Mode for RHEL
20mSimplifying Kubernetes: Streamlining Secure App Deployment in DevSecOps
52mAdding containers to your CI/CD pipeline
40mLet Your Software Supply Chain Ride with Kubernetes CI/CD
32mEnhance Your Kubernetes CI/CD Pipelines With Open Source