2024-08-06 Meeting notes

Date

Attendees

Goals

Discussion items

TimeItemWhoNotes
Discuss the security issue raised by external member
  • Discussion of a long-term solution?
  • Since Nephio primarily focusses on IaC deployments/automation ... It would be important to have IaC scanning done.
 10min Workload Identity  Next week demo for Workload Identity
    * Registrations were done manually previously. Next demo will automate the registration process.
    * Deployment of the vault as a secrets manager ... Integration of workloads ..

Action items

  • Integration of IaC scanning engine such as checkov for scanning k8s manifests, terraform scripts, and any other infra related scripts. 1) Creating GH workflow 2) Establishing baselines 3) Helping team fix the issues Rahul 
  • Next week workload identity demo: automated registrations of the workloads Prashant