Loading…
May 2-4, 2018 - Copenhagen, Denmark
Click Here For Information & Registration
← Back to schedule
Establishing Image Provenance and Security in Kubernetes - Adrian Mouat, Container Solutions (Any Skill Level) (Slides Attached)
Wednesday May 2, 2018 11:55 - 12:30 CEST
C1-M3
Take any container running in your Kubernetes cluster. What can you say about it and with what level of certainty? Do you know where it came from? Could an attacker have modified it? Is it up-to-date? Can you identify the exact revision of the code that the image was built from?

This talk will look at what guarantees Kubernetes gives you out-of-the-box, and what you can do to establish a trustworthy and reliable workflow for deploying and updating images. Topics and tooling covered will include:

- building images in a repeatable manner with BuildKit or Bazel
- distributing images through registries
- verifying provenance with secure hashes as well as Notary/TUF
Speakers
avatar for Adrian Mouat

Adrian Mouat

Staff Developer Relations Engineer, Chainguard
Adrian has been involved with containers from the early days of Docker and authored the O’Reilly book “Using Docker” (https://atlas.oreilly.com/oreillymedia/using-docker). He is currently a product manager for Chainguard where he works on Chainguard Images and the Wolfi Linux... Read More →
ImageProvenanceAndSecurity AdrianMouat pdf
Wednesday May 2, 2018 11:55 - 12:30 CEST
C1-M3
  Security+Identity+Signing, Any
Feedback form is now closed.

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Share Modal

Share this link via

Or copy link