What's New in Knative Eventing: Security, Discovery, Integrations, and JobSink
Talkat KubeCon + CloudNativeCon Europe 2025 · on Wednesday, 2025-04-02· at 15:15· Platinum Suite | Level 3 | Room 1-2·
summary
Knative Eventing now adds HTTPS addressables with strict/permissive modes using cluster-manager for certs, plus OIDC tokens via per-source Kubernetes service accounts and an EventPolicy CRD to restrict senders (spec.to/spec.from and optional filters), with three default modes: allow-all, deny-all, or allow-same-namespace. Native integrations include an integration source/sink for SQS, SNS, S3 and DynamoDB. JobSink spawns Kubernetes Jobs that mount the incoming event as a file for long-running work, and Event Transform applies declarative JSON expressions to reshape CloudEvents.
AI-written summary · about
chapters (7)
- 0:00Knative Eventing updates
- 1:44Security features
- 11:25Third-party integrations
- 13:58Event discovery
- 19:18Job sync
- 21:50Event transform
- 26:09Q&A
related talks
32mKnative - The Security Platypus?
57mThe Kubernetes Sessions Security
35mCloud Native Security for the Rest of Us
43mKnative Security Pipelines
41mCloud Native Security For The Rest Of Us
35mDeep Dive: NATS
24mOne stop talk for kubernetes security !!
31mSafeguarding Kubernetes: Pod Security Admission, NeuVector & Kyverno in the Ring