Signed, Sealed, Delivered - Sign and Verify All the Things
CNCF [Cloud Native Computing Foundation] via YouTube
Learn the Skills Netflix, Meta, and Capital One Actually Hire For
PowerBI Data Analyst - Create visualizations and dashboards from scratch
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
This conference talk explores how digital signing and policy enforcement can protect against supply chain threats in cloud native environments. Learn how CNCF projects like ORAS, Notary, Flux, and Kyverno work together to ensure everything in production clusters—from images to configuration YAML—comes from trusted sources and hasn't been tampered with. Discover practical solutions for cluster operators facing challenges like rate-limiting, unauthorized configuration changes, and registry tampering. Follow along as Jeremy Rickard from Microsoft demonstrates a complete end-to-end implementation and access sample code from a provided GitHub repository to enhance your cluster security posture.
Syllabus
Signed, Sealed, Delivered - Sign and Verify All the Things - Jeremy Rickard, Microsoft
Taught by
CNCF [Cloud Native Computing Foundation]