Cloud Native Deployments in Air Gapped Environments
Talkat ArgoCon Europe 2023 · on Tuesday, 2023-04-18· at 15:20· Elicium Building | Elicium Ballroom 1 [Argo CD]·
summary
A reproducible management cluster is built to push vetted artifacts into air‑gapped production using Harbor, Trivy, ArgoCD, Gitea as core components; images are scanned, CVE feeds exported to central monitoring, and rollouts happen only from the internal Git-controlled registry. Real runs find extreme results like 735 vulnerabilities in a single image and many vendor containers with 100+ CVEs, prompting enforced distro-less images, per-application RBAC, AD isolation, and a roadmap to artifact signing and transparent provenance before promotion.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:34SECTORS OF CRITICAL INFRASTRUCTURE
- 4:58WHY KUBERNETES?
- 10:56AIR GAPPED SETUP
- 13:11SET UP
- 19:27EXPERIENCE
- 20:44AUTHENTICATION
- 22:00NEXT STEPS: SIGN EVERYTHING
- 22:52START SIGNING STEP BY STEP!
related talks
22mIntegrating Security in the Build Pipeline
35mCloud Native Security for the Rest of Us
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
34mCloud Native Security: A New Paradigm for a New World
34mContainer Vulnerability Management in Kubernetes
22mAirgapped Kubernetes - Hannes Probst
34mCloud Native Security 101: Building Blocks, Patterns and Best Practices
18mManaging Kubernetes in Air-Gapped Environments