Mesh in a Mesh - A Model for Stronger Multi-tenancy of Kubernetes Workloads
Explore a new model for deploying workloads in tenant-specific sub-meshes within service meshes, enhancing multi-tenancy in Kubernetes clusters with improved traffic policies and resource management.
Authorization with Envoy at Square
Learn how Square leverages Envoy's ext_authz filter for centralized authorization, benefiting multiple teams and enabling new features. Explore migration strategies and lessons learned.
A Tale of a Meshi Kafka - Securing Kafka Deployment When Istio Is Used
Explore securing Kafka deployments with Istio, addressing authentication, authorization, and encryption challenges. Learn to implement external authorization and simplify policy management using open-source tools.
No More Moats - Protecting Your Cloud Native Infrastructure with Zero Trust
Explore Zero Trust security for cloud native infrastructure using SPIFFE, SPIRE, and open-source tools. Learn practical architectures and implementation strategies from Fortune 500 examples.
AWS Controllers for Kubernetes - The AWS API Universe Now Kubeified
Explore AWS Controllers for Kubernetes (ACK), bridging AWS service APIs and Kubernetes for seamless resource management using familiar Kubernetes tools and configurations.
Fortifying Microservice Security with SPIRE and OPA
Learn how to enhance microservice security using SPIRE for authentication and OPA for authorization. Discover scalable solutions for reliable service-to-service and end-user access control in complex environments.
Using SPIRE in Production at Uber
Explore Uber's implementation of SPIFFE and SPIRE for workload authentication in diverse environments, covering architecture, practices, and benefits achieved.
Customizing OPA for a "Perfect Fit" Authorization Sidecar
Explore customizing Open Policy Agent (OPA) for enhanced authorization: high-performance gRPC API, Kafka decision logging, and OAuth2 Rego functions. Tailored solutions for improved security and integration.
Implementing Authorization
Explore implementing robust authorization systems using Open Policy Agent, decoupling from authentication for fine-grained control and easier maintenance in various software environments.
Managing RBAC Across Multiple Kubernetes Clusters
Explore managing user permissions across multiple Kubernetes clusters using an open-source authentication framework. Learn about centralized auth, cross-cluster RBAC, and efficient resource grouping.
CNCF - SIG Network Intro and Deep Dive
Explore cloud native networking primitives, service mesh patterns, and CNCF Network SIG initiatives for efficient microservice-based distributed systems operation and management.
What Do You Mean K8s Doesn't Have Users? How Do I Manage User Access Then?
Explore Kubernetes authentication and authorization, including user access management, permissions, RBAC, and security best practices for efficient cluster administration.
Cloud & Cloud Native Identity and Access Management - Challenges & Opportunities
Explore challenges and solutions for identity and access management in hybrid cloud native environments, focusing on achieving continuous identity assurance and zero trust.
Case Study - Developing and Scaling Kubeflow’s Web Apps
Explore Kubeflow's web app development journey, covering authentication, scalability, UX for K8s object management, and efficient data fetching for advanced AutoML techniques.
AuthN and AuthZ at Cruise - Crawl, Walk, Run
Explore Cruise's journey in implementing authentication and authorization within Kubernetes clusters, from basic approaches to advanced solutions for zero trust security at scale.
Full-stack React Native in the Era of Serverless Computing - Build an App in Minutes
Learn to build full-stack React Native apps using serverless services. Explore powerful managed solutions for data, search, and authentication. Live demo of creating an app with AWS Amplify and GraphQL API.
Killing BFFs with GraphQL and Next.js
Learn to create a data layer between frontend and backend using GraphQL in Next.js, simplifying complex tasks and keeping your frontend application clean and efficient.
How to Edge Cache GraphQL APIs
Explore edge caching for GraphQL APIs, including benefits, implementation techniques, and smart invalidation strategies. Learn how to optimize performance and overcome traditional caching limitations.
GraphQL Authentication and Authorization at Scale
Explore Unity's approach to GraphQL authentication and authorization at scale, focusing on federation, gateway-level implementation, key design decisions, and wide-reaching benefits.
Migrating to Serverless - An Experience Report
Migrating a collaboration platform to AWS Lambda: benefits, challenges, and solutions for improved scalability, performance, and cost-efficiency in serverless architecture.
The Async Arrow
Explore async arrows in F# for simplified service calls, covering composition techniques for logging, authorization, retries, and error handling without running async expressions.