Caller ID in Kubernetes – Michael Danese, Google

16

Caller ID in Kubernetes – Michael Danese, Google

Kubernetes lets every Pod have a Service Account identity, but previously, that identity has only really been usable to authenticate to the Kubernete API server. The newly-released pod proof of identity can be used to securely establish trusted communication between workloads running in a Kubernetes cluster, to external services, or even to bootstrap the identity of higher level services like Istio. This talk will delve into the design of workload identity in Kubernetes and how you can use it to build more secure systems.

sched.co/MPdl
Join us for KubeCon + CloudNativeCon in Shanghai June 24 – 26 and San Diego November 18 – 21! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.
Join us for KubeCon + CloudNativeCon in San Diego November 18 – 21. Learn more at bit.ly/2WdUyQ6. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.