Building Supply Chain Policies with Gatekeeper and Ratify

Explore how to enhance Kubernetes cluster security and compliance using Gatekeeper and Ratify in this informative conference talk. Learn to implement advanced supply chain policies by leveraging Gatekeeper's admission controller capabilities and Ratify's artifact verification features. Discover techniques for intercepting and validating Kubernetes API server requests, enforcing CRD-based policies, and incorporating external data for comprehensive security measures. Gain insights into verifying image signatures, analyzing SBOMs for vulnerabilities, and developing custom verifiers to meet evolving policy requirements. Master the integration of Gatekeeper, Ratify, and OCI registries to create robust supply chain security policies for your Kubernetes clusters, ensuring compliance with corporate and regulatory standards.

Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper & Ratify - J Rickard