KubeCon Europe 2025 Talks Highlight Kubernetes Network, AI Access and Container Security Challenges
Summary
A Wiz recap of KubeCon Europe 2025 highlights talks on Kubernetes network security, access control for AI agents, prompt security, and software composition analysis limits against container image obfuscation.
Key points
- A session on secure Kubernetes networks discussed gaps in mutual TLS for internal service communication and shortcomings in current NetworkPolicy implementations.
- A talk on policy as code argued that existing identity frameworks fall short for AI agents and services, and proposed an AI-native access-control architecture.
- A sponsored keynote covered prompt-protection challenges and performance and reliability tradeoffs in using AI to secure AI services.
- Research on container image obfuscation described limitations in software composition analysis tools and proposed improvements to SBOM generation algorithms.
- Wiz’s talk focused on evolving Kubernetes security needs, including AI workloads, vulnerabilities in peripheral components, and cloud-cluster integration.
Article Details
- Event Type
- Security-focused conference talks at KubeCon Europe 2025
- Impact
- The talks covered Kubernetes network security, AI-native access control and prompt protection, container-image obfuscation and software composition analysis, and evolving Kubernetes security controls. They highlighted operational security challenges and potential improvements, but the article reports no specific incident or measured impact.
People
Igor VelichkovichPresented a talk on Kubernetes network policies with Lior Lieberman.Jakub SuchyPresented a keynote about prompt security and HAProxy's AI Gateway.Lior LiebermanPresented a talk on Kubernetes network policies with Google.Raz CohenPresented a talk proposing an approach to access control for AI agents and services.
Vendors
GoogleLior Lieberman from Google and Igor Velichkovich bravely took on a notoriously hard concept of Network Policies. Their talk highlighted the lack of mTLS for internal service communication and the shortcomings of currentHAProxyJakub Suchy’s short sponsored keynote was one of the more compelling ones. He introduced HAProxy’s work on an AI Gateway—a traffic-routing solution tailored for AI services—and detailed the real-world securityPermit.ioIt’s good to see AI identity finally getting the attention it deserves. Raz Cohen from Permit.io argued that existing identity frameworks fall short when applied to AI agents and services. His session proposed a newWizAnd a noteworthy talk from Wiz - Kubernetes Security 2030
Products
AI GatewaySuchy’s short sponsored keynote was one of the more compelling ones. He introduced HAProxy’s work on an AI Gateway—a traffic-routing solution tailored for AI services—and detailed the real-world security challenges inKubernetesKubernetes has entered its second decade, and this year’s KubeCon felt markedly different from past editions. The hype and glitz have noticeably faded—it almost felt like CNCF intentionally avoided competing with Black