Skip to content
Kubernetes Security with Identity & OIDC episode artwork

May 29, 2023 38 min

Kubernetes Security with Identity & OIDC

from Cloud Native Compass Hosted by Rawkode Academy

Marc Boorshtein, CTO of Tremolo Security, explains why long-lived kubeconfig certificates are an anti-pattern, how OIDC and impersonation deliver revocable cluster access, and how workflow identity via OIDC JWTs replaces static service account tokens in CI/CD pipelines.

Episode details come from the podcast's RSS feed.

Embed this episode

Ready to play

Kubernetes Security with Identity & OIDC

0:00 38:46

Chapters

  1. 0:00 Introductions
  2. 0:13 Guest & Company Introduction
  3. 0:38 Tremolo Security & Open Unison Overview
  4. 1:47 The Problem with Default KubeConfig Certificates
  5. 1:50 The Problem with Identity and Kubernetes
  6. 3:18 Certificate Lifespan and Revocation Issues
  7. 4:30 Alternatives: OIDC and Impersonation
  8. 5:27 Exploring KubeConfig Alternatives & Service Account Tokens
  9. 7:51 Why Kubernetes Delegates User Authentication
  10. 10:44 Making Kubernetes Access Easier & More Secure
  11. 12:35 Securing Pipeline Identity
  12. 12:45 OIDC
  13. 13:11 Pipeline Identity: The Static Service Account Anti-Pattern
  14. 15:14 Pipeline Identity: Workflow Identity via OIDC JWTs
  15. 15:42 Implementing Workflow Identity with Impersonation
  16. 20:01 Auditing Impersonated Actions
  17. 21:15 Enterprise Kubernetes
  18. 21:28 Writing "Kubernetes in the Enterprise"
  19. 22:02 Motivation Behind the Enterprise Kubernetes Book
  20. 23:53 Unique Challenges of Enterprise Kubernetes
  21. 25:22 Book Contents: Essential Enterprise Kubernetes Topics
  22. 27:30 Enterprise vs. General Kubernetes Authentication Differences
  23. 31:00 Security & Supply Chain
  24. 31:03 Kubernetes Security Landscape & Supply Chain Trends
  25. 33:17 Supply Chain Security: Beyond Vulnerabilities to Identity
  26. 34:43 How Identity Management Solves Supply Chain Security
  27. 37:40 Shameless Plugs

No transcript yet.

Requests help us decide what to transcribe next.

Share this episode

Similar podcasts

DevOps In Agile Way Pawel Piwosz "DevOps in Agile Way" is a captivating podcast that immerses listeners in the dynamic realm of DevOps, engineering practices, value streams, Clouds, AWS, Agile methodologies, and a myriad of other captivating subjects. Through engaging conversations and expert insights, this podcast serves as a bridge between all interested parties, fostering collaboration and enabling efficient software delivery. Join me on a deep dive into the fascinating intricacies of DevOps, where I explore cutting-edge tools, share best practices, and offer real-world anecdotes from industry experts. From continuous integration and deployment pipelines to automation of infrastructure and cloud-native architectures, I unravel the latest trends and strategies that empower organizations to achieve swift and dependable software delivery. Our exploration extends to the Agile methodology, highlighting its seamless integration with DevOps practices and its pivotal role in driving iterative development, cr IT Jobs's Podcast IT Jobs Two Cisco CCIEs discussing topics related to getting and IT Job or hiring for an IT Job. Focus on both Network Engineering, Cloud, Development, and CyberSecurity and as much reality as can be brought.

Frequently asked questions

How long is this episode of Cloud Native Compass?

This episode is 38 minutes long.

When was this Cloud Native Compass episode published?

This episode was published on May 29, 2023.

Can I download this Cloud Native Compass episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.