Keynote: Progress Toward Zero Trust Kubernetes Networks
summary
Announces Calico support for application-layer policy that unifies Kubernetes NetworkPolicy with Istio’s mutually authenticated TLS, enforcing cryptographic identities (service accounts) plus network info so each pod proves who it is — effectively two-factor pod auth. Claims this lets teams enforce least-privilege per-flow without app changes, ships as a tech-preview on GitHub, and pairs with an enterprise CNX product for additional controls, visibility and support.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:57Network security risks
- 1:55Building blocks for security
- 3:11Unified policy announcement
- 4:24Zero trust model
- 5:05Resources and enterprise
related talks
26mA DevSecOps Approach to Zero Trust Network Security
23mContainer and Kubernetes security policy design: 10 critical best practices
32mUsing Open-Source Software to Secure Cloud-Native Applications
46mContinuous Kubernetes Security
19mKeynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integri...
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
52mImplementing holistic security for containers and Kubernetes
05mKeynote: Crossing the Kubernetes Network Policy Chasm