2024-08-06 Meeting notes

Date

Aug 6, 2024

Attendees

@Rahul
@Byung-Woo Jun
@Prashant
@Wim Henderickx

Goals

Discussion items

Time	Item	Who	Notes

Time	Item	Who	Notes
	Discuss the security issue raised by external member	@Rahul	Discussion of a long-term solution? Since Nephio primarily focusses on IaC deployments/automation ... It would be important to have IaC scanning done.
10min	Workload Identity	@Prashant	Next week demo for Workload Identity * Registrations were done manually previously. Next demo will automate the registration process. * Deployment of the vault as a secrets manager ... Integration of workloads ..

Action items

Integration of IaC scanning engine such as checkov for scanning k8s manifests, terraform scripts, and any other infra related scripts. 1) Creating GH workflow 2) Establishing baselines 3) Helping team fix the issues @Rahul

Next week workload identity demo: automated registrations of the workloads @Prashant