Panel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kubernetes Workloads More Secure!

The panel discussion focuses on the intersection of Kyverno and DockerSlim in making Kubernetes workloads more secure.

• Containers have become the norm as cloud adoption increases sharply.
• Developers face challenges in making containers production-ready and secure.
• Kyverno and DockerSlim are two projects that address these challenges.
• Kyverno provides policies that act as a contract for shared environments like Kubernetes.
• DockerSlim helps in minifying container images and automating the creation of AppArmor and SecComp profiles.
• The combination of Kyverno and DockerSlim makes cluster security management easier and more efficient.

The speakers discuss how containers are nothing but processors running on servers and are isolated against the Linux kernel but not from it. They also highlight the importance of reducing the surface area of attack and enforcing the number of syscalls that a container can access. They explain how DockerSlim helps in reducing container size and creating security profiles that filter out unnecessary syscalls. They also emphasize how Kyverno's policies act as a contract for shared environments like Kubernetes, making cluster security management easier and more efficient.

Want to minify your container image? Or let's go ahead; ever thought of automating the creation of your container's AppArmor and SecComp profiles? Okay, wait, let us surprise you even more; what if you get all the above and a way to administer their control in the K8s cluster! Yes, you heard it right, Unveiling to you the intersection of Kyverno and DockerSlim! This panel by Shuting, Ruhika, and Mritunjay will demonstrate how these two projects are making the lifecycle of the software supply chain more secure. Kyverno's policies leveraged with DockerSlim's combo of minified image and the auto-generated Seccomp profile will make your cluster security management just another YAML chore without you being a Linux syscalls expert!