Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ Learn layered container security through a "Guardians of the Galaxy" crew metaph

**Chris Ayers**, Principal Software Engineer

Azure EngOps AzRel

[Blog](https://chris-ayers.com/) | [GitHub](https://github.com/codebytes) | [LinkedIn](https://linkedin.com/in/chris-l-ayers/) | [Bluesky](https://bsky.app/profile/chris-ayers.com) | [Mastodon](https://hachyderm.io/@Chrisayers)

---
Expand Down
22 changes: 19 additions & 3 deletions slides/Slides.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
---
marp: true
theme: custom-default
title: 'Guardians of the Container Galaxy: Defending the Cosmic Cluster'
author: 'Chris Ayers - Principal Software Engineer, Azure EngOps AzRel, Microsoft'
paginate: true
footer: '[chris-ayers.com](https://chris-ayers.com/) | [Bluesky](https://bsky.app/profile/chris-ayers.com)'
description: 'A layered, CNCF-based walkthrough of pragmatic container security.'
Expand All @@ -20,8 +22,10 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

### Chris Ayers
#### Principal Software Engineer
#### Azure EngOps AzRel
#### Microsoft

</div>
</div>

![bg ](./img/team.png)
Expand Down Expand Up @@ -66,7 +70,7 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

## The Container Attack Kill Chain

![center w:650](./img/attack-kill-chain.drawio.png)
![center h:480](./img/attack-kill-chain.drawio.png)

---

Expand All @@ -93,6 +97,8 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

---

<!-- _class: compact -->

## Shift Left + Shield Right

![bg right:24%](https://plus.unsplash.com/premium_photo-1661877737564-3dfd7282efcb?q=80&w=900&auto=format&fit=crop&ixlib=rb-4.1.0&ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D)
Expand Down Expand Up @@ -212,6 +218,8 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

---

<!-- _class: compact -->

## Gamora: The Supply Chain Problem

![bg right:24%](https://plus.unsplash.com/premium_photo-1661879449050-069f67e200bd?q=80&w=822&auto=format&fit=crop&ixlib=rb-4.1.0&ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D)
Expand All @@ -234,6 +242,8 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

---

<!-- _class: compact -->

## Gamora: Vulnerability Scanning & Signing

**Vulnerability Scanning:**
Expand Down Expand Up @@ -321,6 +331,8 @@ description: 'A layered, CNCF-based walkthrough of pragmatic container security.

---

<!-- _class: compact -->

## Rocket: Multi-Stage Builds

**Separate Build and Runtime:**
Expand Down Expand Up @@ -449,6 +461,8 @@ Use Tetragon when you need real-time kernel-level blocking

---

<!-- _class: compact -->

## Groot: The Lateral Movement Problem

![bg right:24%](https://plus.unsplash.com/premium_photo-1674669009418-2643aa58b11b?q=80&w=774&auto=format&fit=crop&ixlib=rb-4.1.0&ixid=M3wxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8fA%3D%3D)
Expand All @@ -469,7 +483,7 @@ Use Tetragon when you need real-time kernel-level blocking

## Groot: Zero Trust in Kubernetes

![center w:900](./img/zero-trust-network.drawio.png)
![center h:480](./img/zero-trust-network.drawio.png)

---

Expand Down Expand Up @@ -511,7 +525,7 @@ Use Tetragon when you need real-time kernel-level blocking
## 🔮 Mantis
### Security Observability

![bg right](./img/observability.png)
![bg right:37.5%](./img/observability.png)

---

Expand Down Expand Up @@ -673,6 +687,8 @@ Use Tetragon when you need real-time kernel-level blocking
</div>
<div>

**Chris Ayers**<br>Principal Software Engineer<br>Azure EngOps AzRel<br>Microsoft

<i class="fa-brands fa-bluesky"></i> BlueSky: [@chris-ayers.com](https://bsky.app/profile/chris-ayers.com)
<i class="fa-brands fa-linkedin"></i> LinkedIn: - [chris\-l\-ayers](https://linkedin.com/in/chris-l-ayers/)
<i class="fa fa-window-maximize"></i> Blog: [https://chris-ayers\.com/](https://chris-ayers.com/)
Expand Down
5 changes: 5 additions & 0 deletions slides/themes/custom-default.css
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,11 @@
grid-template-columns: repeat(3, minmax(0, 1fr));
gap: 1rem;
}
section.compact {
line-height: 1.3;
padding-top: 60px;
padding-bottom: 60px;
}
img[alt~="center"] {
display: block;
margin: 0 auto;
Expand Down
Loading