Implementing multi-layer container and
Kubernetes security for DevSecOps Workshop

Tackling the security of containers and Kubernetes involves more than just the application layer. Security should be implemented at each level of the stack—the underlying host, container, orchestration, and application layers.

In this workshop, we will cover the comprehensive container and Kubernetes security capabilities available in Red Hat® OpenShift® and Red Hat Advanced Cluster Security (from StackRox acquisition).

You will gain experience with:

• Host OS (Red Hat CoreOS and Red Hat Enterprise Linux®) security technologies.
• Evaluating container content and sources for vulnerabilities.
• Designing the build and CI/CD pipeline to proactively check container content and ensure content governance across the application life cycle, including image policy management and enforcement, image scanning, and image signing.
• Certificate & secrets management.
• Implementing methods to control access to containers via authentication and authorization.
• Red Hat OpenShift Container Platform security technologies, including Security Context Constraints (SCC), role-based access control (RBAC), and network security with network policies
• Logging, monitoring, and auditing.

To get the most out of this workshop, participants should have a developer or linux system administrator background, and be familiar with the following:

Virtual workshop details

Time: 10:00 a.m. - 1:00 p.m. PT

Date: October 27, 2021

Speakers: Adrienne Leonardo, Eric Bannon, Shanna Chan, Vinay Bhalerao, Dale Bewley, Nate Revo, Louis Santillan

Any questions? Please email jrapkine@redhat.com