… We operate a platform that automatically handles the failure of any pod, any node, any infrastructure component – and then we run security on it with zero isolation, zero failure domains, and zero plan for what happens when the kernel, the single piece of shared infrastructure, is the thing that fa… …
… Contributors: Brandt Keller CNCF Security TAG, Defense Unicorns , Chris Aniszczyk CNCF , Evan Anderson CNCF Security TAG, Custcodian , Ivan Fratric Project Zero, Google , Jordan Liggitt Kubernetes, Google , Michael Lieberman, Monis Khan Kubernetes, Microsoft , Natalie Silvanovich Project Zero, Goog…
… The core design decisions are to establish clear layer separation early, integrate security from the start, and adopt GitOps with Argo CD from day one. …