Intro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi
summary
CNCF Security SIG explains that SAFE became the SIG to centralize recurring cloud-native security problems (identity, authZ, auditing), leverages SPIFFE for service identity, and inventories 40 projects identified in the CNCF landscape as security-relevant. A lightweight, reproducible security assessment process runs in days–a week as a pre-audit step, led by a security review team of four, with a target of five security assessments goal this year and plans for a security overview and policy white paper.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:05Focus Area
- 12:12Reducing Risk across the Ecosystem
- 13:19Security Assessments
- 17:43Roadmap
- 19:08Whether Policy and Security Belong in the Same Working Group
- 26:16Who Is Using Kubernetes in Production
