A DevSecOps Approach to Zero Trust Network Security
summary
Shows a practical path from Kubernetes NetworkPolicy plus Istio TLS to a deployable zero trust stack, using Calico/Tiger CNX to merge network and service‑mesh policies into a single application-layer policy API. Demonstrates hierarchical policy composition with global-to-app tiers, adds missing deny rules, enforces pod egress and mTLS, and logs connections with pod IDs and labels (not packet payloads). Proof of concept is in preview and the product claims aggregated enforcement and usable debugging via denied‑packet metrics.
AI-written summary · about
chapters (4)
- 0:00Start
- 0:31A DevšecOps Approach To Zero Trust Network Security
- 6:23SECURING MODERN APPLICATION NETWORKS
- 14:37MICROPOUCIES FOR MICROSERVICES
related talks
06mKeynote: Progress Toward Zero Trust Kubernetes Networks
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
35mDemystifying Zero-Trust for Cloud Native Technologies
29mZero Trust Security with Service Mesh
29mZero Trust for APIs: From Edge to Mesh with Istio
45mZero Trusting as a True Cloud Native Dev
23mThe Long and Windy Road that leads to Cloud Native Security
32mImplementing Zero Trust in a Kubernetes Cluster with Istio