~/talk

Make the Secure Kubernetes Supply Chain Work for You

on YouTube 34m
Talkat KubeCon + CloudNativeCon Europe 2022 · 2022-05-16..05-20· [security]

speaker

name:Adolfo García Veytia
links:none on file

resources

video:https://youtu.be/ffiaA__8UAE
slides:none on file

summary

Kubernetes adds concrete supply-chain controls since 1.22: projects generate SBOMs (SPDX), produce SLSA provenance attestations outside the build to avoid forged metadata, and apply layered digital signatures during staging and promotion. The release pipeline builds ~50 container images and ~20 binaries, uses an image promoter and a separate file promoter, mirrors artifacts to regional registries, and signs with ephemeral signing via sigstore keyless backed by a transparency log so promoted artifacts remain authentic and auditable.

AI-written summary · about

chapters (4)

  1. 0:00Start
  2. 1:26Bad Motivator
  3. 2:26Career Goals
  4. 4:56Bad Carbonite Results

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.