We're part of the @meetupmadness group, catching up monthly to discuss all of the aspects of security that *everybody* needs to be across these days. We're helping to increase knowledge and experience to help with more of a shared security paradigm.
Hi DevOps & Security Fans,
Speaker: Scott Coulton from Microsoft
Topic: Securing microservices with istio
In this talk, we will look at how we can secure our application traffic with istio. To do this we will first have to understand the components of istio like envoy, spiffe and spire. This will then give us a good foundation to start talking more advanced topics like how to set up mTLS without changing your application code or zero trust api calls. Making sure all services are authenticated to each other before traffic reaches your pods. Lastly we will tie this all together and look at wrapping automation around this technology to make it production ready.