Enforcing a Secure Supply Chain on Kubernetes

Explore the implementation of a secure supply chain for Kubernetes in this conference talk by SUSE experts. Learn about the importance of secure supply chains in light of recent exploits and vulnerabilities. Discover how to leverage open-source projects to establish a robust secure supply chain and enforce it within Kubernetes clusters using an Admission Controller. Gain insights into the Sigstore keyless workflow and understand the implementation of signature verification policies. Understand how to maintain cluster compliance and quickly assess workloads affected by newly announced CVEs. Delve into practical strategies for enhancing Kubernetes security and protecting your containerized applications from potential threats in the software supply chain.

Enforcing a Secure Supply Chain on Kubernetes - Raul Cabello Martin & Víctor Cuadrado Juan, SUSE