Fast, Repeatable, Secure: Pick 3
summary
A deployable pattern that ties FINOS CCC and the AI governance framework to running GenAI on Kubernetes using Flux D2 architecture and OCI artifacts signed at SLSA level 3 (demo references Salsa build level 3) proves repeatable: GitHub Actions build OCI manifests, signatures land in rekor, clusters verify artifacts via OIDC and reject unsigned changes. A live demo uses Envoy + LLM guard API as an AI firewall to log prompts and block toxic input (response: "method not allowed").
AI-written summary · about
chapters (9)
- 0:00Compliance and AI security intro
- 3:38Common Cloud Controls overview
- 7:54AI security challenges
- 16:46Compliance model evaluation
- 17:09Secure deployment with Flux
- 27:35AI firewall with Envoy and LLM Guard
- 32:15Secure AI architecture
- 35:58OIDC and Sigstore compliance
- 38:50Summary and resources
related talks
27mHigh-Security, Zero-Connectivity & Air-Gapped Clouds: Delivering Complex Software with the Open Component Model & Flux
35mMulti-Layered Guardrails for Cloud Native AI: Enforcin...
33mSecuring Your Infrastructure as Code Pipeline
30mDeclarative by Default, Secure by Design: GitOps as a Control Plane for Governance
44mAgentic Delivery, Guardrailed: AI in CI/CD & Platform Engineering (Open Source Patterns)
06mFrom Policy to Production: Flux and GitOps as Governance Control...
20mSecure Delivery Using Flux and Open Component Model
31mFast & Secure: Package, Sign, Verify, and Deploy