KubernetesとTerraformのセキュリティ/ガバナンス向上委員会 with OPA

・Summary
An initiative to prevent malicious app deployment by applying Open Policy Agent when deploying apps by appending manifests to kubernetes. It is becoming common to use a combination of Conftest and Gatekeeper for products that use OPA. The second half is about terraform and Kuberntes operations.
・Archive

・Slide

SeaOtter (Kentaro Mori)2022/11/23

モヤモヤをスッキリ、理解の点と点を繋げて、コンテナセキュリティを得意分野に！

・Summary
Introduction to the concept of anti-malware for container security measures and the dangers of root execution and privileged containers
・Archive

・Slide (Public Blog)

SeaOtter (Kentaro Mori)2022/11/23

明日から始められるKyvernoを用いたポリシー制御

・Summary
Introduction to Kyverno.
Explains the syntax and implementation of Kyverno, an alternative to the OPA (Open Policy Agent) Rego language due to its high learning hurdle.
・Archive

・Slide

SeaOtter (Kentaro Mori)2022/11/23に更新

eBPF Superpowers

・Summary
eBPF has been called "Super Power for Linux" and in this talk, Tracy will discuss why it is the foundational technology for a new generation of cloud-native networking, security, and observability tools. This talk is for those who have heard of the term but don't know what it is or how to use it. This talk will answer the following questions.

What is the eBPF?
How does the eBPF enable a new generation of cloud-native tools?
What are those tools?
What can you do with eBPF in the cloud today and tomorrow?

This talk will help those not familiar with the Linux kernel understand how eBPF enables high-performance tools to help you connect, manage, and secure your applications in the cloud.
・Archive

・Slide