Right-sized Access Control & Pull with Proof - Stanislav Láznička & Lucas Käldström

This talk features Stanislav Láznička from Microsoft and Lucas Käldström from Upbound discussing advanced topics in Kubernetes access control. They delve into Constrained Impersonation and Conditional Authorization, presenting innovative approaches to avoid all-or-nothing access policies and enabling more granular control. The session also covers "Ensure Secret Pulled Images," a vital security enhancement that addresses a longstanding vulnerability by ensuring Kubelet verifies cached images' credentials. Attendees will gain valuable insights into managing access control policies and securing multi-tenant clusters effectively.