Everything You Should Be Doing, But Aren’t - DevSecOps for K8s Workflows

Explore a comprehensive defense-in-depth approach to securing production workloads on Kubernetes in this informative conference talk. Witness a live demonstration showcasing the use of CNCF projects like Helm, OPA, Falco, and Argo for cluster security. Learn how to incorporate DevSecOps principles into every stage of the software development lifecycle and scale CI/CD pipelines using the open source Jenkins Template Engine. Gain actionable insights on implementing application security, configuration management policies, runtime threat detection, governance as code, and post-mortem forensics. Benefit from lessons learned supporting various end users, including FinTech and modern Federal software delivery.

Everything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows - Steven Terrana