Securing Kubernetes Manifests with Sigstore Cosign - Options and Best Practices

Explore options for verifying Kubernetes manifests with Sigstore Cosign before cluster application in this informative conference talk. Learn how Sigstore Cosign integrates with Kubernetes to provide secure solutions for signing and verifying container images, resource manifests, configuration files, and other critical components bundled as generic OCI images. Discover the use of GitOps tools like FluxCD and policy engines such as Kyverno and Gatekeeper in combination with Sigstore Cosign to enforce security policies and prevent unwanted cluster changes. Gain valuable insights into software supply chain security, container image workflows, and cluster policies. Suitable for both experienced Kubernetes users and beginners, this talk offers practical knowledge on securing Kubernetes deployments using Sigstore Cosign.

Introduction
What is Software Supply Chain
Container Image Workflow
Cosign
Kubernetes Manifest
Cluster Policy
MChart
Flex
Conclusion