Loading…
Back To Schedule
Thursday, November 21 • 4:25pm - 5:00pm
Identity Bootstrapping in Multi-tenant Multi-cluster Kubernetes - Manish Mehta, Volterra & Derek Suzuki, The Voleon Group

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
With the increasing popularity of Kubernetes, providing managed K8s has been a great way to convert enthusiasts into adopters. However, current solutions mainly focus on providing isolated clusters and adopters are responsible for making workload identities work across clusters. If multi-tenancy is added to the mix, the challenges of bootstrapping identities that work across clusters - but within tenancy - are even greater.

In this presentation, the speakers will share challenges of securely bootstrapping identities in such a setup (especially when the individual clusters could be running in untrusted environments), the tradeoffs, and possible solutions. Manish will also introduce planned open-source components of a solution used by Volterra Edge Services for identity bootstrapping and other security services.
Speakers
avatar for Derek Suzuki

Derek Suzuki

Director of DevOps, The Voleon Group
Derek Suzuki is Director of DevOps at The Voleon Group.  Previously he was Senior Director of Information Technology and Business Applications at Outbrain and has held a variety of technology management roles at Redwood Systems, ZipRealty, Wine.com, Juno Online Services, and other... Read More →
avatar for Manish Mehta

Manish Mehta

Chief Security Architect, Volterra
Manish Mehta is Chief Security Architect at Volterra Edge Services, CA. In the past, he has worked at Netflix, Cryptography Research Inc., and other SF bay area companies designing and developing solutions around secure bootstrapping, authentication (service and user), and authorization... Read More →

IdentityBootstrapping v4 pdf
Thursday November 21, 2019 4:25pm - 5:00pm PST
Room 14AB - San Diego Convention Center Mezzanine Level
  Security + Identity + Policy