Loading…
May 10-12, 2023
Vancouver, British Columbia, Canada + Virtual
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2023 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time (UTC/GMT -8). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Back To Schedule
Monday, May 1 • 7:00am - 7:40am
(Virtual) Securing Kubernetes Manifests with Sigstore Cosign, What Are Your Options? - Mathieu Benoit, Google

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
In this talk, we will explore the options to verify with Sigstore Cosign the provenance of Kubernetes manifests before actually being applied in your cluster. Attendees will learn how Sigstore Cosign integrates with Kubernetes to provide secure solutions for signing and verifying container images and resource manifests, configuration files, and other critical components, bundled as generic OCI images. We will also touch upon the use of GitOps tools like FluxCD and policy engines like Kyverno and Gatekeeper in combination with Sigstore Cosign to enforce security policies and prevent unwanted changes in your cluster. Whether you are a seasoned Kubernetes user or just starting out, this talk will provide valuable insights and tips about your options for verifying in Kubernetes your Kubernetes manifests signed by Sigstore Cosign.
Speakers
avatar for Mathieu Benoit

Mathieu Benoit

Customer Success Engineer, Humanitec
Mathieu is DevRel Engineer at Google, focused on Kubernetes. He is passionate about Cloud Native Computing technologies related to Kubernetes, Cloud Security, GitOps, DevSecOps and SRE. Based on his past experiences as software engineer, IT consultant, and solution architect, he now... Read More →

OSS NA SupplyChainSecurityCon 2023 Cosign and Kubernetes Mathieu Benoit pdf
Monday May 1, 2023 7:00am - 7:40am PDT
Virtual
  SupplyChainSecurityCon, Ensuring users know what Software Components Included