Securing the Deploy Pipeline

Explore a comprehensive solution for securing deployment pipelines in this 31-minute conference talk from KubeCon + CloudNativeCon. Discover how Shopify addresses the challenge of deploying arbitrary code to production while maintaining security. Learn about running checks on containers to assess vulnerabilities and software updates, implementing signature-based verification using Grafeas, and enforcing security policies with the Kritis admission controller. Understand the importance of logging container metadata throughout its lifecycle for potential recalls and redeployments. Gain insights into leveraging Grafeas and Kritis as powerful tools within the Kubernetes ecosystem to prevent privilege escalation via code deployment.

Intro
Overview
Attaching Checks
Voucher
Break Glass
Summary