Secure API Access to Kubernetes Control Plane with Sakshyam Shah
Learn Kubernetes API server security: authentication, authorization, and admission control best practices for secure control plane access and robust cluster management.
Authorization at Workday - Securing Enterprise Software Solutions
Explore Workday's decade-long journey in authorization, focusing on platform solutions, reusable components, and maintaining industry-standard security while adapting to evolving threats and acquisitions.
Macaroons for Authorization - Understanding Advanced Token Security
Explore macaroons for authorization: their origins, unique properties, and advantages over JWTs. Learn about caveats, implementation considerations, and integration with existing systems.
Go Beyond Role-Based Access with Auth0 FGA
Explore Relationship-Based Access Control (ReBAC) using Auth0 FGA to solve complex authorization challenges beyond traditional RBAC systems.
Authelia - Open Source, Self Hosted Authorization and Authentication for Your Web Applications
Secure your self-hosted web apps with Authelia, an open-source authentication and authorization solution. Learn installation, configuration, and integration with NGinX Proxy Manager for enhanced security.
Kubernetes Security with Identity & OIDC
Explore Kubernetes security, focusing on identity management, OIDC, and certificate handling. Learn best practices for secure cluster access and enterprise-level implementations.
Tokens, Authorization and Docker
Learn about authorization, tokens, and Docker in cybersecurity. Explore single sign-on, Active Directory, smart contracts, JSON Web Tokens, and FIDO for enhanced digital security and authentication.
SIG Auth Deep Dive - Major Enhancements in Kubernetes Security
Explore major enhancements in Kubernetes authentication and authorization, including Pod Security, KMS encryption, and certificate signing request controls. Learn how to contribute to SIG Auth.
Mind the Gap - Integrating Cloud Services with Managed Kubernetes Environments
Explore techniques for integrating managed Kubernetes clusters with external cloud services, covering authentication, authorization, and security considerations for cloud-native applications.
Kubernetes SIG Auth Deep Dive
Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.
Beyond Cluster-Admin - Getting Started with Kubernetes Users and Permissions
Learn to implement users and permissions in Kubernetes clusters, covering user provisioning methods, RBAC for fine-grained access control, and strategies for both managed and self-hosted environments.
Zero Trust Workload Identity in Kubernetes
Explore Zero Trust principles in Kubernetes using SIFFE and Spire for workload identity-based authorization, eliminating the need for secrets and enhancing security across service meshes.
Securing User to Service Access in Kubernetes
Explore networking and security considerations for exposing Kubernetes services to users, covering authentication, load balancing, traffic filtering, and encryption. Learn about various access management options.
Top 5 Authorization Trends in 2022 - A Year in Review
Explore the top 5 authorization trends of 2022 in cloud-native computing, offering insights into evolving security practices and technologies.
RBAC to the Future: Untangling Authorization in Kubernetes
Explore Kubernetes RBAC essentials, from its inner workings to enterprise-level strategies. Learn to design, automate, and monitor least-privilege configurations for enhanced security and efficiency.
Mastering Kubernetes Access Management
Explore advanced Kubernetes access management techniques, focusing on security best practices and efficient user authorization strategies for cloud-native environments.
Dynamic Authorization and Policy Control for Kubernetes Clusters
Learn dynamic authorization and policy control techniques for Kubernetes clusters using Open Policy Agent, focusing on admission control and effective policy management.
Docker Build: Using Scoped Personal Access Tokens
Learn to enhance Docker Hub security by setting up and using scoped personal access tokens, improving access control for distributed applications and container management.
One Large Cluster or Lots of Small Ones - Pros, Cons and When to Apply Each Approach
Explore the pros and cons of using multiple small Kubernetes clusters versus a single large shared cluster, and learn about solutions to address their limitations for informed decision-making.
Optimize Your Kubernetes Clusters on Azure with Built-in Best Practices
Learn to optimize Kubernetes clusters on Azure using built-in tools for diagnostics, security, and efficiency. Discover best practices for managing containerized applications and solving common issues.
Modernizing Authorization for Cloud Native Applications Using OpenFGA
Explore OpenFGA, a CNCF project combining ReBAC and ABAC for flexible, scalable centralized authorization in cloud-native apps. Learn its inner workings and successful use cases.