Know Your Kubernetes Deploys

Explore how Shopify secures its software supply chain in this 28-minute conference talk from SREcon18 Europe. Discover the process of creating container signatures to verify origin, testing, and security status. Learn about implementing an admission controller to enforce deploy-time policies and prevent privilege escalation via code deployment. Gain insights into advanced Kubernetes deployment security practices and strategies for tracking workloads in a large-scale environment.