Name: Strengthening Auth in Kubernetes: Image Pulling, DRA Admin Access & Pod Certificates - Rita Zhang & Stanislav Láznička, Microsoft
Start: 2025-04-03T11:45:00+0100
End: 2025-04-03T12:15:00+0100

In-person
1-4 April 2025
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in British Summer Time (BST) (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

Thursday April 3, 2025 11:45 - 12:15 BST

Level 3 | ICC Capital Suite 10-12

The Kubernetes Auth SIG has been collaborating with other SIGs to enhance authentication and authorization across the ecosystem. Kubelet’s credential providers are gaining the ability to use Service Account tokens for registry authentication, while stricter authorization checks are being introduced for image pulls using secrets. For dynamic resource allocation (DRA), privileged ResourceClaims and templates will enable secure device access for admin tasks like health monitoring.

Additionally, ongoing work on automatic client certificate creation for pods is paving the way for streamlined certificate provisioning. Join us to explore these improvements and their impact on security and usability in Kubernetes!

Speakers

Standa Láznička

Principal Software Engineer, Microsoft

I've been dealing with authentication, authorization and certificates in Open Source for quite some time.

Rita Zhang

Principal software engineer, Kubernetes SIG Auth co-chair, Security Response Committee, Microsoft

Rita Zhang is a Principal software engineer at Microsoft, based in San Francisco bay area. She leads the Azure Container Upstream team of maintainers and contributors building features for Kubernetes upstream and CNCF projects. She is a Kubernetes sig-auth chair, a member of the Kubernetes... Read More →

Thursday April 3, 2025 11:45 - 12:15 BST
Level 3 | ICC Capital Suite 10-12

Maintainer Track, Auth

KubeCon + CloudNativeCon Europe 2025

Standa Láznička

Rita Zhang

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!