Loading…
In-person + Virtual
18-21 April
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2023 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central European Summer Time (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis. 
Back To Schedule
Thursday, April 20 • 11:00 - 11:35
Life of a CVE with Ingress-Nginx; Understanding the Project's Release Cycle - James Strong, Chainguard & Dylen Turnbull, Nginx INC

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.


In 7 years, Ingress-nginx has had 221 releases, with over 6800 commits. To ensure stability and to test this highly configurable controller, the project has grown to over 400 e2e tests and helm chart tests across various kubernetes versions and deployment landscapes. We were 3/4 through our stabilization project in the last maintainer track we presented. The ironic thing about OSS and software, in general, is that it is never really completed, nor should the stabilization and security of the project. In this talk, we discuss how we work to improve the release process of ingress-nginx to keep Ingress-nginx CVE-free with real-world examples. We will discuss the current release process and how we are working with sig-release and sig-security to increase release velocity, reduce complexity and increase the security of ingress-nginx. Please join us for this presentation if you want to hear about the ingress-nginx controller getting released & how we continue to improve it.
Speakers
avatar for Dylen Turnbull

Dylen Turnbull

Developer Advocate, NGINX Part of F5
Throughout his career, Dylen Turnbull, has worked for several companies Symantec, Veritas, F5 Networks and now F5's NGINX business unit. This time represents an accumulation of over 25 years of enterprise & open source software and solution development experience. Working with NGINX... Read More →
avatar for James Strong

James Strong

Solutions Architect, Chainguard
James joined Chainguard after a long stint of helping customers migrate to the Cloud and Kubernetes. Security was the number one issue he saw when completing these migrations, and he now wants to help secure their supply chains. James is also the author of O’Reilly’s Networking... Read More →

Life of a CVE In Ingress Nginx Understanding the Project's Release Cycle pptx
Thursday April 20, 2023 11:00 - 11:35 CEST
G109 | First Floor | Congress Centre
  Maintainer Track, Sig-Network Ingress-nginx Subproject