diff options
| author | Franck Cuny <franck@fcuny.net> | 2024-12-25 12:37:46 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2024-12-25 12:37:46 -0800 |
| commit | 763e0384c772dc153a378762aa949dfccc7e6840 (patch) | |
| tree | e855d83661e8f7306adcc5a5cc636bc8aca2e6f2 /content/container-security-summit-2020.md | |
| parent | add support for tags (diff) | |
| download | fcuny.net-763e0384c772dc153a378762aa949dfccc7e6840.tar.gz | |
fix some textfcuny/tags
Diffstat (limited to 'content/container-security-summit-2020.md')
| -rw-r--r-- | content/container-security-summit-2020.md | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/content/container-security-summit-2020.md b/content/container-security-summit-2020.md index 8bd6bd5..2c3f122 100644 --- a/content/container-security-summit-2020.md +++ b/content/container-security-summit-2020.md @@ -19,24 +19,25 @@ The "un-conference" part was more interesting. There was two sessions that inter Overall, I think we are doing the right things in term of security: we have PSPs, we have our some controllers to ensure policies, etc. We are also looking at automatically upgrade containers using workflows (having a robust CI/CD pipeline is key here). - <a id="org4ab3e9d"></a> # Some notes to followup / read - twitcher / host network / follow up on that - <https://github.com/cruise-automation/k-rail> - - better error message for failures +- better error message for failures - it's not a replacement to PSPs ? - <https://cloud.google.com/binary-authorization> - [falco](https://github.com/falcosecurity/falco) conversation about isolation: + - <https://katacontainers.io/> - could kata be a use case for collocation of storage ? - <https://github.com/google/gvisor> talk about beyondprod (brandon baker) + - <https://cloud.google.com/security/beyondprod/> - binary authorization for borg - security infra design white paper @@ -45,9 +46,11 @@ talk about beyondprod (brandon baker) - <https://cloud.google.com/security/encryption-in-transit/application-layer-transport-security> panels: + - small adoption of OPAh kubernetes audit logging: + - <https://kubernetes.io/docs/tasks/debug-application-cluster/audit/> - <https://github.com/google/docker-explorer> - <https://github.com/google/turbinia> |