Understanding, Maintaining and Securing Envoy's Supply Chain
CNCF [Cloud Native Computing Foundation] via YouTube
Still Paying Per Course? Get Every Coursera Certificate for ₹7,999
Learn EDR Internals: Research & Development From The Masters
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the complex software supply chain of Envoy, a popular open-source proxy, in this informative conference talk. Gain insights into Envoy's extensive network of over 60 external dependencies, crucial for its data and control plane functionality, build processes, testing, and observability features. Delve into a comprehensive overview of these third-party dependencies, their categorization, and their significance within Envoy's ecosystem. Focus on the security implications of these dependencies and their relationship to Envoy's threat model. Learn about the Envoy community's strategies for maintaining, versioning, and testing dependencies, as well as future plans to enhance supply chain confidence. Discover practical approaches for organizations to minimize unnecessary dependencies and strengthen their own software supply chains.
Syllabus
Understanding, maintaining and securing Envoy's supply chain - Michael Payne, Harvey Tuch
Taught by
CNCF [Cloud Native Computing Foundation]