Lightning Talk: Secure GitOps for Regulated Workloads: Argo CD Meets Confidential...

on YouTube ↗06m

" summary

Shows how Argo CD enforces Sigstore/Cosign provenance before reconciliation and rejects unsigned or altered images via OPA policies, then schedules workloads as confidential containers on microVMs using Intel TDX AMD SEV or IBM Secure Execution. Demonstrates runtime TEE attestation feeding OpenTelemetry and Prometheus so deployments are gated by SLSA/attestation evidence and auditors can verify end to end that images were signed, attested, and memory-isolated.

AI-written summary · about

" related talks

• 34mSecure by Default with GitOps - A Guide to OPA with Argo CDDan Garfield · ArgoCon 2022
• 34mTrust But Verify: Bringing Supply Chain Integrity To CD GitOpsYuji Watanabe, Hirokuni Kitahara · KubeCon + CloudNativeCon North America 2022
• 27mSecure by Design: Embedding DevSecOps into Your GitOps WorkflowsArpit Nigam · GitOpsCon Europe 2025
• 13mLightning Talk: The Successful Recipe to Secure Your Fleet of...Poonam Lamba, Mathieu Benoit · GitOpsCon North America 2022
• 10mLightning Talk: Exploring HashiCorp Vault and ArgoCD - the GitOps WayTracy P Holmes · GitOpsCon Europe 2022
• 26mSecuring GitOps Supply Chain with Sigstore and KyvernoRoberto Carratala, Faz Sadeghi · ArgoCon 2022
• 10mLightning Talk: How to Keep a Secret in GitOps, Without Keeping...Nikita Kutselev, Daniel Hoang · GitOpsCon North America 2022
• 25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...Jim Bugwadia, Avni Sharma · GitOpsCon North America 2022