Podevcast

Cloud Native Security Con with Emily Fox

Kubernetes Podcast from Google

Episode | Podcast

Date: Fri, 03 Mar 2023 10:06:00 +0000

<a href="https://www.linkedin.com/in/themoxiefox/">Emily Fox</a> is a security engineer @Apple Cloud Services, a CNCF Technical Oversight Committee member and co-chair for a bunch of CNCF events including recently the Cloud Native Security Conference in Seattle. We had a chance to talk to Emily about the first edition of the CNSC 2023, her involvement with the CNCF community. Her role as a security engineer and some career discussions. Do you have something cool to share? Some questions? Let us know: - web: <a href="https://kubernetespodcast.com">kubernetespodcast.com</a> - mail: <a href="mailto:kubernetespodcast@google.com">kubernetespodcast@google.com</a> - twitter: <a href="https://twitter.com/kubernetespod">@kubernetespod</a> <h2 dir="ltr"> </h2> <h2 dir="ltr">News of the week</h2> <a href="https://www.cncf.io/blog/2023/02/27/kubeedge-cncfs-first-slsa-3-project/"> KubeEdge v1.13.0 released on January 18, 2023, achieves SLSA 3 compliance</a> <a href="https://slsa.dev/spec/v0.1/levels">SLSA 3 compliance</a> <a href="https://www.cncf.io/blog/2023/02/27/kubevela-brings-software-delivery-control-plane-capabilities-to-cncf-incubator/#:~:text=The%20CNCF%20Technical%20Oversight%20Committee,%2C%20faster%2C%20and%20more%20reliable."> KubeVela brings software delivery control plane capabilities to CNCF Incubator</a> GKE Updates: <ul> <li dir="ltr"> <a href="https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-compute-classes#when-to-use"> Balanced compute classes are now offered in GKE Autopilot</a> </li> <li dir="ltr"> <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/autopilot-hostport"> GKE Autopilot now supports exposing randomly assigned host ports for pods</a> </li> <li dir="ltr"> <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/persistent-volumes/local-ssd"> GKE has started offering ephemeral storage with local SSDs</a> </li> <li dir="ltr"> <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/creating-a-cluster-windows#choose_your_windows_server_node_image"> Added support for Windows Server 2022 nodes</a> </li> </ul> <a href="https://aws.amazon.com/blogs/containers/announcing-general-availability-of-amazon-eks-anywhere-on-snow/"> AWS announced the availability of AKS anywhere on Snowball Edge Devices</a> <a href="https://sysdig.com/blog/2023-cloud-native-security-usage-report/">Sysdig released their 6th annual Cloud Native Security and Usage Report.</a> <a href="https://www.cncf.io/blog/2023/02/27/rebooting-the-cloud-native-hamburg-community-group/"> Rebooting the Cloud Native Hamburg community group</a> <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/program/schedule/"> KubeCon EU Amsterdam Schedule</a> <a href="https://kubernetes.io/blog/2023/02/14/kubernetes-katacoda-tutorials-stop-from-2023-03-31/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> Katacoda Kubernetes tutorials shutdown</a> <a href="https://www.secondstate.io/articles/lfx-mentorship-wasmedge-mar-2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> LFX Internships for WASMEdge</a> Kubernetes Community Days (KCDs): <ul> <li dir="ltr"> Upcoming CFP deadlines: </li> <ul> <li dir="ltr"> KCD Italy <a href="https://kcd.smapply.io/prog/kcd_italy_cfp_2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> CFP closes February 20 2023</a> (in-person) </li> <li dir="ltr"> KCD Czech + Slovak <a href="https://kcd.smapply.io/prog/kcd_czech_slovak/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> CFP closes March 1, 2023</a> (in-person) </li> <li dir="ltr"> KCD Bangaluru <a href="https://kcd.smapply.io/prog/kcd_bengaluru_cfp_2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> CFP closes March 20, 2023</a> (in-person) </li> <li dir="ltr"> KCD Zurich <a href="https://kcd.smapply.io/prog/kcd_zurich_2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> CFP closes March 31, 2023</a> (in-person) </li> <li dir="ltr"> KCD Colombia <a href="https://kcd.smapply.io/prog/kcd-colombia-2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> CFP closes March 31, 2023</a> (in-person) </li> </ul> <li dir="ltr"> Check out upcoming KCDs that might be in your region: <ul> <li dir="ltr"> <a href="https://docs.google.com/presentation/d/e/2PACX-1vTTor7CqbM3theZUwJqNs2aV8cOW569D0RjaIpJGzyM8ml_TNwsp12QIb_oXgSsepfZD5FO_4CY-MdV/pub?start=false&loop=false&delayms=30000&slide=id.g7de298ebf2_0_0&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> Sponsorship opportunities</a> are available </li> </ul> <ul> <li dir="ltr"> <a href="https://docs.google.com/presentation/d/1TGtudMBTzfeEDszsmOZHSp8fiNQvmo-54lkBFAkH04o/edit?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0#slide=id.g1c2734236f3_0_16"> Donation Prospectus</a> available for review </li> </ul> </li> <ul> <li dir="ltr"> <a href="https://www.cncf.io/blog/2023/02/24/celebrating-israels-first-kubernetes-community-days-a-look-at-the-history-of-our-cncf-community/"> KCD</a> Israel 2023, Mar 23, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/events/details/cncf-kcd-los-angeles-presents-kcd-los-angeles-at-scale-20x/"> KCD LA</a>, Mar 9, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/events/details/cncf-kcd-pakistan-presents-kubernetes-community-days-pakistan-2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> KCD Pakistan</a> (Islamabad), February 20, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/kcd-netherlands/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> KCD Netherlands</a> (Amsterdam), February 23-24, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/events/details/cncf-kcd-france-presents-kubernetes-community-days-france-2023/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> KCD France</a> (Paris), March 7, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/events/details/cncf-kcd-los-angeles-presents-kcd-los-angeles-at-scale-20x/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> KCD Los Angeles</a>, March 9-10, 2023 </li> <li dir="ltr"> <a href="https://community.cncf.io/events/details/cncf-kcd-ukraine-presents-kcd-ukraine-2023-fundraiser/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9wNbNjMCpEhGeIqVMAJmeQpUaPJQKTsAIzcx3TdROAS_fj-FpLFzDE6yjHFuBJzxpCZ-G0"> KCD Ukraine</a> Virtual Fundraiser, March 16, 2023 </li> </ul> </ul> <h2 dir="ltr"> </h2> <h2 dir="ltr">Links from the interview</h2> Emily Fox: <ul> <li dir="ltr"> <a href="https://twitter.com/TheMoxieFox">Twitter</a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/themoxiefox/">Linkedin</a> </li> </ul> <a href="https://www.youtube.com/watch?v=jXcYiiJ-BBg&list=PLj6h78yzYM2NQ-Zi_k5qVmZyxSmLBzM6V"> Cloud Native Security Con Youtube Playlist</a> <a href="https://www.youtube.com/watch?v=6Zz798IW8Gs">How to Secure Your Supply Chain at Scale - Hemil Kadakia & Yonghe Zhao, Yahoo</a> <a href="https://www.tigera.io/learn/guides/ebpf/">eBPF</a> <a href="https://securityscorecard.com/blog/what-is-the-cia-triad/">CIA Triad</a> <a href="https://business.adobe.com/blog/basics/waterfall#:~:text=The%20Waterfall%20methodology%20%E2%80%94%20also%20known,before%20the%20next%20phase%20begins."> Waterfall development</a> <a href="http://cloudcareers.dev">Cloudcareers.dev podcast</a> <a href="https://twitter.com/raesene">Rory McCune on twitter</a> <a href="https://www.redhat.com/en/topics/security/what-is-software-supply-chain-security"> Software Supply Chain Security</a> <a href="https://www.youtube.com/watch?v=XNH-DebkJo0">Emily Fox on SBOM</a> <a href="https://www.youtube.com/watch?v=jHR_sAYGGAw">Emily Fox on SDLC</a> <a href="https://www.redhat.com/en/topics/security/what-is-software-supply-chain-security"> Shift Left Security: Best Practices for Getting Started</a> <a href="https://kubernetespodcast.com/episode/196-kubernetes-registry/">Episode 196 with Benjamin Elder</a> CNSC 2023 seattle guests <ul> <li dir="ltr"> <a href="https://www.linkedin.com/in/davidwolf/">David Wolf</a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/eric-knauer-5a5225/">Eric Knauer</a> </li> <li dir="ltr"> <a href="https://uk.linkedin.com/in/lizrice">Liz Rice</a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/mitchconnors/">Mitch Connors </a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/josh-knarr-5a2a182b/">Josh Knarr</a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/youngnickinsyd/">Nick Young</a> </li> <li dir="ltr"> <a href="https://www.linkedin.com/in/onlydole/">Taylor Dolezal</a> </li> </ul> <a href="https://www.youtube.com/watch?v=4xK3Vv_rPbg&list=PLj6h78yzYM2NQ-Zi_k5qVmZyxSmLBzM6V&index=25"> Frederick Kautz on SPIFFE/SPIRE</a> <a href="https://www.aniszczyk.org/">Chris Aniszczyk's Blog</a> <a href="https://falco.org/">The Falco Project</a> <a href="https://github.com/cilium/tetragon">Cilium Tetragon</a> <a href="https://docs.px.dev/">Pixie</a> <a href="https://aviatrix.com/">Aviatrix</a> <a href="https://keylime.dev/">Keylime</a> <a href="https://cloud.google.com/anthos">Google Anthos</a> <a href="https://www.youtube.com/watch?v=GUmot7xrY3g&list=PLj6h78yzYM2NQ-Zi_k5qVmZyxSmLBzM6V&index=38"> Beyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions - Tiffany Jernigan</a> <a href="https://www.youtube.com/watch?v=ArZYJ1LCCT4">Standardization & Security - A Perfect Match - Ravi Devineni & Vinny Carpenter, Northwestern Mutual</a> <a href="https://www.youtube.com/watch?v=oAJ0Pq0l_RY">CSI Container: Can You DFIR It? - Alberto Pellitteri & Stefano Chierici, Sysdig</a> <h2 dir="ltr">Links from the post-interview chat</h2> <a href="https://events.linuxfoundation.org/cloud-native-securitycon-europe/"> Cloud Native Security Con Eu 2023</a> <a href="https://www.cncf.io/people/technical-oversight-committee/">CNCF TOC</a>