Skip to content

Commit 628041b

Browse files
committed
update psp talk
1 parent b1b4f25 commit 628041b

File tree

1 file changed

+55
-13
lines changed

1 file changed

+55
-13
lines changed

PodSecurityPolicyIsDeadLongLive.md

+55-13
Original file line numberDiff line numberDiff line change
@@ -3,20 +3,37 @@ title: Pod Security Policy is Dead, Long Live...?
33
description: What are Pod Security Policies? What do you mean, they are deprecated? What am I going to do?!
44
author: Chris Nesbitt-Smith
55
marp: true
6-
theme: themes/cns
6+
theme: themes/esynergy
77
class: lead
88
video_embed: <iframe width="560" height="315" src="https://www.youtube.com/embed/C5ohERIhlrY" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
99
---
1010

11-
![bg](./images/bg.svg)
11+
<!-- _class: title-page-->
1212

13-
<!-- _class: lead invert -->
13+
<div>
14+
<svg class="waves" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"
15+
viewBox="0 24 150 28" preserveAspectRatio="none" shape-rendering="auto">
16+
<defs>
17+
<path id="gentle-wave" d="M-160 44c30 0 58-18 88-18s 58 18 88 18 58-18 88-18 58 18 88 18 v44h-352z" />
18+
</defs>
19+
<g class="parallax">
20+
<use xlink:href="#gentle-wave" x="48" y="0" fill="rgba(255,255,255,0.7" />
21+
<use xlink:href="#gentle-wave" x="48" y="3" fill="rgba(255,255,255,0.5)" />
22+
<use xlink:href="#gentle-wave" x="48" y="5" fill="rgba(255,255,255,0.3)" />
23+
<use xlink:href="#gentle-wave" x="48" y="7" fill="#fff" />
24+
</g>
25+
</svg>
26+
</div>
27+
28+
<div class="scanlines"></div>
1429

1530
# PodSecurityPolicy is Dead,<br/>Long Live...?
1631

17-
Chris Nesbitt-Smith
32+
<div class="glitch emoji" data-text="🤔">🤔</div>
1833

19-
Appvia | LearnK8s
34+
## Chris Nesbitt-Smith
35+
36+
### UK Gov | Control Plane | LearnK8s | lots of open source
2037

2138
---
2239

@@ -30,6 +47,20 @@ My name is Chris, and I've been trying, with some success to use Kubernetes sinc
3047
I'm Solution Architect at Appvia, instructor at LearnK8s, and tinkerer of open source including maintaining some high profile projects in the home automation space.
3148
3249
I'm often talk too fast when doing these, please shout at me when this happens, and jump in with questions though there will also hopefully be time at the end.
50+
51+
--- ONLINE ---
52+
Hello! Thank you so much for joining me here today.
53+
54+
So, to kick things off my name is Chris Nesbitt-Smith, I'm based in London and currently work with some well known brands like learnk8s, control plane, esynergy and various bits of UK Government I'm also a tinkerer of open source stuff.
55+
56+
I've using and abusing Kubernetes in production since it was 0.4, believe me when I say its been a journey!
57+
58+
I've definitely got the scars to show for it.
59+
60+
It'd be great to hear where you're joining from today so if you could drop a comment in the chat and let me know where you are that'd be great.
61+
62+
We'll have time for any questions at the end if you want to drop them into the comments.
63+
3364
-->
3465

3566
---
@@ -38,6 +69,10 @@ I'm often talk too fast when doing these, please shout at me when this happens,
3869

3970
<!--
4071
By show of hands who's worked with pods before?
72+
73+
--- ONLINE ---
74+
75+
In a virtual, bit offline, by show of hands (or dropping off the stream) who's worked with pods before?
4176
-->
4277

4378
---
@@ -101,7 +136,7 @@ and in that time has never made it past the beta classification, and I believe m
101136
# 😢 <!--fit-->
102137
103138
<!--
104-
Sadly that's not the case for PSPs, they were deprecated in 1.21 April last year, and will be removed entirely in 1.25 which will be around August this year.
139+
Sadly that's not the case for PSPs, they were deprecated in 1.21, and was removed entirely in 1.25.
105140
-->
106141
107142
---
@@ -177,6 +212,11 @@ spec:
177212

178213
<!--
179214
Who can give me an example of what this container can actually do, say if a remote code exploit is found, or your code is bad?
215+
216+
--- ONLINE ---
217+
Looking at this pod, can anyone give me an example of what this container can actually do, say if a remote code exploit is found, or your code is bad?
218+
If you can get ahead of me and leave a comment in the comments.
219+
180220
-->
181221

182222
---
@@ -188,8 +228,13 @@ Who can give me an example of what this container can actually do, say if a remo
188228
# Live demo
189229

190230
<!--
231+
232+
Lets have a quick explore and find out:
233+
191234
set +o history
192-
kind create cluster
235+
kind create cluster --image=kindest/node:v1.23.0
236+
237+
kubectl run --image debian -ti unpriv
193238

194239
kubectl run --rm --privileged --image debian -ti priv
195240

@@ -202,7 +247,6 @@ kubectl run --rm --privileged --image debian -ti priv
202247
kubectl get pods -A
203248
kubectl get nodes
204249

205-
kubectl run --image debian -ti unpriv
206250

207251
---
208252

@@ -510,7 +554,7 @@ The short answer is...
510554
![bg](./images/psp-chris.jpeg)
511555

512556
<!--
513-
use our whizz-bang-super-duper tool
557+
use a whizz-bang-super-duper tool that I made
514558
-->
515559

516560
---
@@ -801,9 +845,7 @@ Thanks for your time, hopefully this has been interesting if a tease.
801845

802846
Please do follow me on LinkedIn, Twitter, Github and you can be assured there'll be no spam since I'm awful at self promotion especially on social media. cns.me just points at my linkedin
803847

804-
At Appvia we're doing a tonne of opensource, so checkout both mine and the appvia github orgs, star and watch to your hearts content.
805-
806-
The original content for this talk and some of the solutions I've alluded to including how to do Policy as Versioned Code are on the appvia blog.
848+
The original content for this talk and some of the solutions I've alluded to including how to do Policy as Versioned Code are on the appvia.io blog.
807849

808-
Questions are very welcome on this or anything else, I'll hold the stage as long as I'm allowed, or find me afterwards, I'm pretty thirsty so I'll be over there.
850+
Questions are very welcome on this or anything else, If I miss you or you're not watching this live I'll try and keep an eye on the comments, or find me on the DevSecCon discord or LinkedIn.
809851
-->

0 commit comments

Comments
 (0)