Trust But Verify: Bringing Supply Chain Integrity to CD GitOps
CNCF [Cloud Native Computing Foundation] via YouTube
You’re only 3 weeks away from a new language
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk describes adding end-to-end integrity checks to CD GitOps deployments, where manifests are composed from multiple source assets and changed during continuous deployment. It covers keyless signing with Sigstore, configuration provenance, and Kubernetes admission enforcement.
Syllabus
Trust But Verify: Bringing Supply Chain Integrity To CD GitOps - Yuji Watanabe & Hirokuni Kitahara
Taught by
CNCF [Cloud Native Computing Foundation]