Lightning Talk: The Successful Recipe to Secure Your Fleet of...
summary
Shows a concrete GitOps stack that enforces fleet-wide security: repo-driven manifests synced with Config Sync or Argo CD, policy-as-code with OPA Gatekeeper (constraint templates + audit and admission enforcement), and Istio service-mesh controls including Istio mTLS strict and sidecar injection rules. Demo runs a failing PR check using the gator CLI in CI, then a corrected PR that passes, and a branch-targeted sync to a staging cluster to verify sidecar injection — end-to-end enforcement at PR, admission, and continuous audit levels.
AI-written summary · about
chapters (9)
- 0:00Securing Kubernetes clusters
- 0:46Security with GitOps and CI/CD
- 2:14OPA Gatekeeper enforcement
- 3:43Istio for secure communication
- 4:29GitHub, OPA, Istio integration
- 6:15Live demo: policy enforcement
- 9:52Shift-left testing with Gator
- 10:14Testing policies in staging
- 11:21Summary and resources
related talks
09mLightning Talk: The GitOps Armada: Set Sail With Kubernetes Fleet Automation
06mLightning Talk: Secure GitOps for Regulated Workloads: Argo CD Meets Confidential...
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
27mLightning Talk: GitOps, A Slightly Realistic Situation on Kubernetes with Flux
11mLightning Talk: Pushing GitOps To the Edge (Literally)
16mSecure Your GitOps - How to Implement a Robust Security Strategy
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
15mLightning Talk: GitOps and Progressive Delivery with Flagger, Istio and Flux