CloudOpen @ OSS LATAM 2022
2022-08-23..2022-08-24
-- online --
who it's for
security engineers, platform engineers, kubernetes operators, devops engineers, site reliability engineers, engineering managers
topics
SBOM generation and storage; artifact signing with sigstore; cosign image signing; docker image slimming; SAST and DAST scanning; Trivy registry scanning; Kubescape in CI; Litmus-SDK chaos experiments; ArgoCD GitOps for SaaS; tf-controller Terraform reconciliation; Yugabyte multi-region clusters; trace-based testing with Trace Test
| title | author | length |
|---|---|---|
| A Checklist for Security from the Container to the Kubernetes: An Overview End to End | Carol Valencia | 24m |
Checklist covers source-to-cluster controls with concrete tools: SAST/DAST and SCA for code and dependencies, SBOM generation for build integrity, image… | ||
| A Different Kind of S3: First Line Security of the Supply Chain | John Amaral | 18m |
Three practical defenses claim to cut supply chain risk: generate s-bombs (machine‑readable SBOMs stored in artifact stores or S3 for retrospective… | ||
| Building a Secure By-Design Pipeline with an Open Source Stack | Rotem Refael | 32m |
End-to-end pipeline assembles open source pieces to catch security early: source and IaC scanning in the IDE and PRs, CI integration with GitHub Actions or… | ||
| Create Chaos Experiments Using Litmus-SDK | Kale Oum Nivrathi | 34m |
Step-by-step demo of using the Litmus-SDK Python HDK to scaffold, implement and run a chaos experiment: generates a project from attribute.yaml, produces the… | ||
| From Traditional to GitOps: A Tale of Modernizing Two Goverment Institutions in One Year | Víctor Leonel Orozco López | 41m |
Two Guatemalan government systems move from Docker and Java EE monoliths to a staged cloud strategy inside a year, facing a data residency in Guatemala… | ||
| GitOps your SaaS Apps with ArgoCD: The Answer to the Unmanaged SaaS Jungle | Eran Bibi | 28m |
Shows a working GitOps pipeline that manages SaaS config by pushing Terraform manifests to Git and letting ArgoCD + tf-controller reconcile them into the SaaS… | ||
| How Geo-Distributed Apps Use Global Cloud Infra for Speed and Compliance | Denis Magda | 38m |
Shows concrete multi-region options using Yugabyte: multi-region cluster, read replicas, multiple standalone clusters and a geo-partitioned cluster with… | ||
| How Testability Drives Observability | Matheus Henrique Pereira Nogueira de Paula | 36m |
Argues that using real trace data as test assertions catches gaps ordinary end-to-end tests miss, and creates a feedback loop that forces better telemetry… | ||
| SOAR with Postee: Automated Incident Response for Cloud Native Risks | Simarpreet Singh, Carol Valencia | 23m |
Postee is a SOAR message router that ingests tool outputs like Trivy scan results and runtime alerts from Tracy, evaluates them with OPA policy routing, and… | ||
| Why Kubernetes Applications Require a New Approach to Testing using Testkube | Bruno Leonel André Lopes | 16m |
Claim: a Kubernetes-native test platform eliminates CI pipeline bloat by running tests as cluster resources and handling containerization, orchestration and… | ||
| nothing matches | ||