CNCF-Hosted Co-Located Events Europe 2023

Deploying applications in critical infrastructure is challenging. On the one hand the new generations of energy transmission grids, health care, ambulance, police, firefighter communication and other government services need the cloud native applications. On the other hand, for security and safety, the threat model including attacks by foreign governments forbids the use of public clouds and enforces deployments on isolated clusters. Every package in every image, every helm chart must be checked. With ArgoCD, Harbor, Trivy and a light weight Git solution based on Gitea the speaker has proposed a solution where Security Configuration Management (SCM) can be established within a few steps and security in depth can be enforced on third party suppliers. As all components can check signatures, supply chain security can be established from the package level to deployment. The solution is used in several clusters aiming for the highest level of security. The technical solution is easy, the talk also describes the processes implement monitoring and alerting if new CVE in existing applications occur, which must not be stopped. https://github.com/thomasfricke/notebooks-management-cluster