Building Developer Pipelines with PKS, Harbor, Clair, and Concourse - Thomas Kraus, Merlin Glynn
summary
Demo builds a Go web app with a Concourse pipeline that pushes images to Harbor, runs Clair scanning, and uses Notary to sign approved images before Kubernetes deploy on PKS. PKS uses BOSH for day‑2 repair and NSX‑T for networking. The pipeline detects 53 critical CVEs in the first image, fails the run, switches base images, and then Concourse pipeline builds and scans again, signs the image and deploys successfully to a node‑port service. Harbor + Clair + Notary enforced signing.
AI-written summary · about
chapters (13)
- 0:00Introduction to PKS
- 1:31PKS core goals and components
- 4:22PKS developer and operator roles
- 5:45Day two operations and management
- 7:47Harbor container registry
- 10:37Vulnerability scanning with Claire
- 13:23Content trust and image signing
- 14:46CI/CD pipeline architecture
- 18:35Live demo: creating a PKS cluster
- 22:36Pipeline build and security scan
- 29:34Fixing vulnerabilities and signing
- 34:18Application deployment and wrap-up
- 37:48Q&A session
related talks
38mTutorial: Building Security into Kubernetes Deployment Pipelines
32mBuilding a Secure By-Design Pipeline with an Open Source Stack- 32mBuilding a Secure By-Design Pipeline with an Open Source Stack
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
30mA secure journey on Kubernetes
40mLet Your Software Supply Chain Ride with Kubernetes CI/CD
19mWho Are You Building For: Pipelines Have a Purpose