A Security State of Mind: Continuous Security with Kubernetes
summary
Kubernetes plus an enterprise distro is used to automate CI/CD: GitHub source triggers a builder image that produces Docker images into a private registry, then deploys via Kubernetes with OpenShift tooling. Images are scanned by OpenSCAP during the build; the talk cites a Docker Hub scan with 64% of images having medium/high issues and “66” JRE advisories as an example. Demo builds a PHP app, pushes to the registry and performs a successful rolling update; image signing (RHEL 7.3/atomic) and blue‑green/canary strategies are shown.
AI-written summary · about
chapters (20)
- 0:00Start
- 2:54IT MUST EVOLVE TO STAY AHEAD OF DEMANDS
- 4:32DEVOPS: BREAK DOWN THE WALLS
- 10:50BUILD, SHIP, RUN
- 13:55CONTINUOUS INTEGRATION WITH SECURITY SCAN
- 15:38TREAT CONTAINERS AS IMMUTABLE
- 16:23IMAGE SIGNING Validate what images and version are running
- 17:30TRADITIONAL SOFTWARE SUPPLY CHAIN
- 19:13CUSTOM SUPPLY CHAIN
- 20:45PRIVATE REGISTRY
- 22:49CONTINUOUS DEPLOYMENT
- 23:17ROLLING UPDATE DEPLOYMENT
- 24:04BLUE-GREEN DEPLOYMENT
- 24:56A/B TESTING with CANARY DEPLOYMENT
- 30:58CONTAINER HOST SECURITY
- 32:19SECURITY CONTEXT
- 33:31Network Isolation
- 34:54STORAGE SECURITY
- 35:25API & PLATFORM ACCESS
- 36:29MONITORING
related talks
32mA Security State Of Mind: Compliance and ...
37mAchieving High Security at Scale with Microservices
21mContinuous Security by Design
30mA secure journey on Kubernetes
38mTutorial: Building Security into Kubernetes Deployment Pipelines
43mContainer Security: So Many Options, Use Them All!
34mDelivering Continuous Security with Docker
37mSupply Chain Security in Kubernetes