Kubernetes SIG security, 23 Dec 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Kubernetes SIG Security Third-Party Audit 2020-12-23

Description

No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).

A

How's it going man.

A

Oh just dropping stuff immediately.

A

I have no idea if anyone else is going to show up today, yeah. Well, I missed last one, so I figured I'd duck in and take the pulse of the groove yeah. I can tell you what's been going on if you want, um so we decided not to try and finish this year finish issuing the rfp this year, because it's holidays and we figure it.

A

We won't get great response, so everyone else uh is reviewing the um everyone else is reviewing the rfp and putting some feedback in it and then we'll publish like very beginning of next year.

A

uh Did we get a new slack subgroup? I saw the old one was uh archived or did that get on? Okay? No, we don't have a new one. We haven't really needed one. We can just chat and see security unless you wanna, you think we should carve one out. We probably could. I would just asking as a matter of course, um I suppose the uh what was the initialism. You just used the rpi uh rfp request for proposal.

A

Rfp no yeah uh is that a link I have in an email on a list that I'm bad about keeping up on. uh I don't know, let me drop it in the zoom chat in one second, I appreciate it.

A

There's a link to our notes.

A

And within that, you will find that uh I'll link to.

B

A

That one is the link to the 2020 rfp. However, you will also find that you probably don't have access. So if you give me the email address you want me to share with, I will share um oh, but that means I have to make a choice.

A

I think pat rahm at google has been what I've been using for stuff p-a-t-r-h-o-m.

A

A

Hey how's it going.

C

Hi, um it was a crazy end of the year and I didn't do any of the things I said I was gonna. Do.

A

I think that's pretty much par for the course. It's exactly the position, I'm in so best position, I'm in I figure I just I'm just showing up here in case anyone wanted to talk. uh I bring patrick up to speed, just shared him links and give him access figure out, hang out here for 10 15 see if anyone wants to catch up and then wish everyone a happy holiday.

C

Yeah, I I think it's gonna be much easier to do all that stuff, um starting tomorrow.

A

Yeah, I'm pretty pretty checked out for the year. I'm not gonna lie. I haven't shaved like we're, not accomplishing basic, daily tasks. At this point, let alone open source rfp issuing work.

A

uh Patrick did you get access? I did. I did so I'll. Look this over on my my last thing out the door today.

A

Were you actually, oh you're, not in a you're, not the southwest union office isn't open right. No, no, of course, not certainly not to uh squeeze so good. Okay, um let's see, I need to fix the link to the bug, bounty scope document. Anyone know where that is.

A

I I think I found it when I just went to uh kubernetes security. Has the documentation, pinned and slag.

A

uh And hacker1.com kubernetes is what it links directly so.

A

Interesting where's, the scope.

A

Scope here it is what's the odds that this is a anchor.

A

Wishful thinking, yeah.

A

Probably nope, I think it is a it is a h1 iv scope, so I should be able to be like scope right nope. Why not.

A

Hurry string arguments come before.

A

Oh, no, it is oh, it does work.

A

A

Okay, I've now addressed some of the comments.

A

And y'all are welcome to oh well, more people came sorry. I just kind of got in the zone. uh Hi everybody.

A

So there were some comments got left in the 2020 rfp. I literally just finished addressing them. It should be up to date. If anyone wants to work on it between now and jan four is that when we meet next nah jan 6 then feel free, I think that's. When we actually get to work. I did reach out to cncf and ate my hat told me: we wouldn't be spending their money this year didn't seem to care, uh so we'll spend their money q1.

A

Is there anything anyone would like to raise uh for the holidays.

C

um No, I'm I'm gonna leave the call um I'll do all that stuff that we talked about last time for uh january 6 and then we catch up. Then.

A

Cool I'm pretty much in the same mood thanks for swinging by all righty.

C

That's exactly how it.

A

A

Anyone else got anything they want to raise.

B

Just a quick question that the document I didn't see anything about these specific dates.

A

uh Yeah, I figured we would drop the dates in last thing, uh just because I don't know when we're gonna, publish and those are all kind of keyed off of that um we chat about it. On the sixth, I feel like we'll, probably want four or five weeks for an open, rfp a week or two for a question period, um and then we'll probably want to give ourselves a week or two for selecting a vendor. It should be pretty easy math once we once we get it.

A

B

A

All right folks, uh thanks for swinging by I'm gonna, call the.

B

B