SIG Security Update: We Lift Tog...
summary
SIG Security announces an ongoing third‑party audit led by NCC Group audit against Kubernetes 1.24 after the 2019 review found 34 findings in 2019; scope covers API server, scheduler, controller‑manager, kubelet, kube‑proxy and the Secret Store CSI driver, with a roadmap to audit Cluster API and Windows nodes. Tooling runs monthly learning sessions and produced a security checklist for operators plus tutorials for Pod Security Admission and a supply‑chain task to verify signed control‑plane images; findings are being published and PRs are under review.
AI-written summary · about
chapters (9)
- 0:00Start
- 8:15Audit Roadmap
- 8:53Pushkar Zobeker
- 14:01A Raccoon and a Turtle
- 15:22How Security Self-Assessments Was Born
- 16:34Pull Request
- 20:56Psp Deprecation
- 28:38Policy Management
- 31:19Weekly Sig Meeting
related talks
22mSecurity Through Transparency: Kubernetes SIG Security Update
24mSIG Security: Succession Pla ...
34mSIG Security: Empowerment Through Autonomy
06mKeynote: Kubernetes Project Updates
23mGet In Containerds, We’re Going Securing: Kubern...
11mKeynote: Securing Kubernetes, the Upstream Way
01h 32mSIG Auth Update and Deep Dive
27mKubernetes SIG Architecture Intro and Updates