SOSS Community Day Japan 2024

In the cloud-native landscape, the integration of security into the CI/CD pipeline is not just a best practice—it's a necessity. ArgoCD has emerged as the leading GitOps controller for Kubernetes, automating deployments with precision. However, ensuring that every deployment is secure requires more than just automated workflows; it demands continuous security checks before, during, and after the deployment process. This talk will demonstrate how the combination of ArgoCD and Kubescape, a powerful open-source Kubernetes security tool, delivers a comprehensive security solution for Kubernetes deployments. We will walk through setting up an end-to-end workflow that integrates security checks into every stage of the deployment process. Attendees will learn how to implement security gates that assess vulnerabilities in container images and Kubernetes configurations before any changes are committed and receive real-time alerts if vulnerabilities are detected in production. By the end of this talk, participants will be equipped to enhance their GitOps workflows with robust security practices, making their Kubernetes deployments more resilient and secure.