Security Through Transparency: Kubernetes SIG Security Update

on YouTube ↗22m

" summary

Kubernetes SIG Security reports concrete outputs: prowjobs every six hours scan build-time dependencies and release images for vulnerabilities; a programmatic CVE list and a planned triage policy plus a shadow triage onboarding path. Third-party audit vendor selection is underway with scope expanded to include CSI Secret Store, and an audit roadmap complements ongoing self-assessments starting with Cluster API. Documentation work publishes a hardening guide, an admin/admission threat model, RBAC guidance and a deployable security checklist and templates.

AI-written summary · about

" chapters (10)

1. 0:00Intro
2. 0:57What is SIG Security
3. 2:17Security Documentation Project
4. 7:49Security Checklist Project
5. 10:41Security Audits
6. 12:26Audit Scope
7. 13:25tooling
8. 15:37next steps
9. 17:29selfassessments
10. 19:04wrap up

" related talks

• 37mSIG Security Update: We Lift Tog...Tabitha Sable, Pushkar Joglekar, Savitha Raghunathan, Rey Lejano · KubeCon + CloudNativeCon Europe 2022
• 24mSIG Security: Succession Pla ...Tabitha Sable, Rory McCune, Cailyn Edwards, Iain Smart, Mahé Tardy · KubeCon + CloudNativeCon Europe 2025
• 34mSIG Security: Empowerment Through AutonomyTabitha Sable, Ala Dewberry, Savitha Raghunathan · KubeCon + CloudNativeCon North America 2022
• 11mKeynote: Securing Kubernetes, the Upstream WayRey Lejano · CloudNativeSecurityCon North America 2024
• 23mGet In Containerds, We’re Going Securing: Kubern...S. Raghunathan, I. Coldwater, T. Sable, A. Small · KubeCon + CloudNativeCon Europe 2021
• 36mThe Devil in the Details: Kubernetes’ First Security AssessmentAaron Small, Jay Beale · Cloud Native Security Day 2019
• 46mContinuous Kubernetes SecurityAndrew Martin · OWASP AppSec Europe 2018
• 36mThe Devil in the Details: Kubernetes’ First Security AssessmentAaron Small, Jay Beale · KubeCon + CloudNativeCon North America 2019