Little Red Riding Hood Finally Practises Zero Trust
summary
Using the Little Red Riding Hood story as a metaphor, this talk shows how to apply Zero Trust to a Kubernetes application and cluster. It covers secure cluster access with HashiCorp Boundary (authentication, roles/permissions), secure deployment checks using Kyverno policies and in-cluster image scanning with Trivy, and secret management with HashiCorp Vault.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 2:54Zero Trust definition
- 5:46Little Red Riding Hood story
- 7:53Securing Kubernetes tools
- 11:44Infrastructure provisioning
- 14:12Access management with External DNS
- 15:58Compliance control with Kyverno
- 17:25Vulnerability scanning with Trivy
- 20:45Secret management with Vault
- 25:37Access securing with Boundary
- 32:17Secure app demo
- 35:58Tool complexity choices
- 41:02Best practices and morals
- 42:33Q&A
related talks
42mLittle Red Riding Hood Finally Practices Zero Trust
36mManaged Zero Trust Security With HashiCorp Cloud Platform
01h 02mIntroduction to Zero Trust Security
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
45mZero Trusting as a True Cloud Native Dev
45mZero Trust: Getting to Step One..and What to Do When You Get There
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
26mSecuring Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles