Let Your Software Supply Chain Ride with Kubernetes CI/CD
summary
Practical survey of Kubernetes CI/CD that names the exact tools used, the gaps found, and concrete hardening steps: real production setup running Jenkins, Flux, Helm and Terraform; image builders Kaniko, Buildpacks and img; signing and verification with Notary/TUF and in-toto; scanning with Trivy; admission enforcement with Kritis and Harbor registry. Useful if seeking Flux vs Draft comparisons, Kaniko and rootless builds and step-by-step hardening; skip if expecting deep benchmarks or live demos.
AI-written summary · about
chapters (5)
related talks
34mA New Way To Roll: Supply Chain Choreography For Enterprise Grade Kubernetes
40mTreating Kubernetes as a Linux Distro: APT-Style Packaging with FluxCD
26mEverything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows
20mSimplifying Kubernetes: Streamlining Secure App Deployment in DevSecOps
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
24mHosting Applications in the Real World
26mEmpowering SRE with GitOps