Dates
Conferences
Tags
Sort by:
Most recent
Conference: Global AppSec Dublin 2023
Authors: Gabriel L. Manor
2023-02-15
tldr - powered by Generative AI
The talk discusses the importance of maintaining good security hygiene for large mono-repos by adopting the hierarchical repo model and using a combination of static analysis tools and Open Policy Agent (OPA) to enforce security policies on the code itself without compromising developer velocity.
- Comparison of OSP top 10 lists from 2003 and 2023 to show how applications have shifted over the years
- The most effective way to avoid insecure application is to not deploy
- The need for a permission model and policy engines to streamline access control and decision-making
- Open Policy Agent (OPA) as a popular policy engine that can be configured using the Rigo language
- The importance of writing queries to understand the permission we want to give for every deployment process
- Illustration of a simple deployment process using OPA and queries
Conference: KubeCon + CloudNativeCon North America 2022
Authors: Vineeth Pothulapati
2022-10-28
tldr - powered by Generative AI
Migrating from OpenTracing to OpenTelemetry for improved Tracer implementation and performance
- Two levels of migration: instrumentation layer and collector layer
- OpenTelemetry shim and complete re-instrumentation are two ways to migrate at the instrumentation layer
- Complete re-instrumentation offers more capabilities and flexibility
- OpenTelemetry SDK is more performant and has access to framework plugins
- Context propagation using baggage and headers is easy in OpenTelemetry
- OpenTelemetry supports multiple context propagations
- Demo shows how to migrate from OpenTracing to OpenTelemetry