How the Basics of Kubernetes Authentication Scale for Organizations
Explore Kubernetes RBAC for flexible team access. Learn basics, identity details, common issues, limitations, auditing, and real-world patterns. Includes live demos for DevOps culture support.
Zero Trust Workload Identity in Kubernetes
Explore Zero Trust principles in Kubernetes using SIFFE and Spire for workload identity-based authorization, eliminating the need for secrets and enhancing security across service meshes.
Improving Secure Pod-to-Pod Communication Within Kubernetes Using Trust Bundles
Explore advanced techniques for enhancing secure pod-to-pod communication in Kubernetes using trust bundles, leveraging cert-manager, SPIFFE, and KEP-3257 for automated TLS certificate creation and mTLS patterns.
Cert-Manager for SPIFFE: Solving Multi-Cloud Workload Identity - Lecture
Explore how cert-manager leverages SPIFFE to solve multi-cloud workload identity challenges, enabling secure pod access across different cloud environments.
Trustchain - Decentralised Public Key Infrastructure for Digital Identity
Explore decentralized public key infrastructure for digital identity, covering Trustchain's approach, functionality, security, and future developments.
Decentralized Public Key Infrastructure
Explore decentralised public key infrastructure with Tim Hobson, examining socio-technical opportunities and challenges in implementing trustworthy digital identity systems.
Production Workload Identity with SPIRE
Explore SPIRE for secure workload authentication in cloud-native architectures. Learn its core design, implementation in production environments, and upcoming features for enhanced identity management.
Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
Kubernetes Supply Chain Security - Building a Secure Software Factory
Explore Kubernetes supply chain security, software factory approaches, and defense strategies against attacks. Learn about signing, verification, and lessons from SUNBURST to enhance cloud-native security.
Easy, Secure Kubernetes Authentication with Pinniped
Explore secure Kubernetes authentication using Pinniped, a CNCF project. Learn implementation strategies and best practices for enhanced cluster security.
Blockchain and the Future of Networking
Explore blockchain's impact on networking, from creating a global data infrastructure to revolutionizing network operations. Learn about innovative projects and future possibilities in this emerging field.
Kubernetes in Highly Restrictive Environments
Explore enterprise-grade Kubernetes deployment strategies, focusing on security, governance, and compliance in restrictive environments. Learn about HA, disaster recovery, and future trends.
How SPIFFE Helps Istio in Service Mesh Federation
Explore SPIFFE's role in Istio service mesh federation, focusing on identity federation across trust domains and secure cross-mesh communication. Includes demonstration of Istio-SPIRE system setup.
Leveraging Blockchain for Identity and Authentication in IoT Security
Explore how blockchain technology can revolutionize identity and authentication in IoT, enhancing security through decentralized, immutable ledgers and innovative approaches to personal data management.
IoT - Taking PKI Where No PKI Has Gone Before
Explores challenges and solutions for implementing PKI in IoT devices, focusing on dynamic contextual information, identity management, and security implications in smart grid environments.
Single Sign-On Dashboard Implementation at Mozilla
Explore Mozilla's new SSO dashboard implementation for improved identity management, featuring high availability, Flask, Ansible, continuous development, and rapid deployment.
Online Accounts for Scope Developers Workshop
Learn to manage online identities on Ubuntu, create service plugins, and authenticate apps using the Online Accounts framework. Ideal for service providers and developers.
Next Generation Authorization: Implementing Okta FGA - DevDay 2023
Explore Okta FGA's flexible, powerful authorization solution. Learn its mechanics, modeling language, and easy integration for improved decision-making and auditability in your applications.
Implementing a Multi-Tenant, Relationship-Based Authorization Model with OpenFGA
Explore implementing multi-tenant, relationship-based authorization using OpenFGA. Learn to model permissions, perform checks, and integrate with identity providers for enhanced security in cloud-native applications.
Next-Level Security: Implementing MTLS in Istio Multi-Cluster Environments Using SPIRE
Explore implementing mutual TLS in Istio multi-cluster environments using SPIRE. Learn about security challenges, mTLS, Istio's features, and SPIRE integration for enhanced microservices security.
Security Showdown: The Overconfident Operator vs the Nefarious Ne'er-Do-Well
Playful demo showcasing cloud-native security concepts through characters Ozzie and Nova, exploring vulnerabilities and proactive measures for robust cluster protection.