Amim Knabben
Staff R&D Software Engineer - Broadcom
Florianópolis, Brazil
Actions
With over 15 years of expertise in infrastructure, operations, and Kubernetes engineering, I am a highly skilled professional who is well-versed in advancing open-source and proprietary cloud-native products. I am currently collaborating upstream as a CNCF Ambassador and Kubernetes SIG Windows Tech Lead.
Area of Expertise
Pragmatically Securing GitOps Deployment Pipelines
Sigstore offers a robust solution for the secure signing of diverse artifacts, including OCI images and blob files, ensuring their authenticity and integrity in the software supply chain.
Within the project toolkit, I will introduce innovative concepts aimed at implementing security policies for package deployments in Kubernetes clusters. The goal is to showcase the practical process of constructing secure CI/CD pipelines, encompassing pivotal elements like attestations, automated signatures, and artifact validation, all rooted in GitOps principles.
This approach to preserving the integrity of software artifacts empowers Site Reliability Engineers (SREs) and system administrators to significantly reduce vulnerabilities stemming from compromised Infrastructure as Code (IaC) repositories, thereby mitigating the potential for software supply chain attacks.
The security evolution of gRPC services in the mesh
This presentation aims to explore the evolving surrounding of gRPC services intercommunication in the context of containers and inside service mesh. It will delve in the history and intricacies of securing communication, authentication, authorization and accounting within a modern distributed system architecture.
This talk also emphasize the current crucial role of Istio in enhancing the security posture of gRPC services east-west traffic compared with older approaches, that includes default encryption, identity and access management, and secure service-to-service communication on service mesh without the complexity of sidecars usage.
gRPC Conf 2023 Sessionize Event
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top