Security In Plain Sight: Hardening Systems Via Open Source
summary
Azure teams release upstream open source tooling that actually enforces controls: Gatekeeper (Open Policy Agent) validates Kubernetes manifests to block unauthorized registries and images; Secret Store CSI moves secrets out of the cluster while preserving the Kubernetes secret API; Azure AD Pod Managed Identity issues pod-scoped credentials so apps avoid in-container auth; Open Enclave SDK runs on Intel SGX and ARM TrustZone in production and enables Mystikos to run unmodified Linux binaries in SGX, though Mystikos is still early stage.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:52Gatekeeper
- 1:19CSI Secrets Store
- 1:46Azure AD Pod Managed Identity
- 2:52Open Service Mesh (OSM)
- 3:17Open Enclave SDK
- 3:46Mystikos: Bringing TEEs to Cloud Native
related talks
24mOne stop talk for kubernetes security !!
33mKubernetes is Open by Default, Use Open Source to Secure
11mSecuring the Kubernetes Ecosystem
43mSecuring container deployments on Azure Kubernetes Service with open-source tools
35mCloud Native Security for the Rest of Us
22mSecuring Kubernetes
41mCloud Native Security For The Rest Of Us
39mThe Art of (Cloud Native) Defense: Pillars of Kubernetes Security