API World + CloudX + Dev Innovation Summit 2024: Full Schedule

arrow_back View All Dates

10:30am PST

PRO SESSION (CloudX): Which Vault? Don’t Tell Me Your Secret(s)!

Wednesday November 6, 2024 10:30am - 10:55am PST

Michel Schildmeijer, SSC-ICT, Lead Technologist

Secret management is a crucial aspect of DevOps, as it involves the protection of sensitive data that is used by applications and services. Secrets can include API keys, credentials, tokens, certificates, and passwords that grant access to various resources and systems. If these secrets are compromised, attackers can exploit them to cause damage, steal information, or disrupt operations.
One of the challenges of secret management is how to securely store, distribute, and rotate secrets in a dynamic and distributed environment. Traditional methods of hard-coding secrets in configuration files or environment variables are not secure, scalable, or reliable. Moreover, secrets need to be updated frequently to comply with security policies and regulations, and to prevent unauthorized access.
To address these challenges, several tools and frameworks have been developed to provide secret management solutions for DevOps.
These tools can help DevOps teams to implement best practices for secret management.

Speakers

Michel Schildmeijer

Lead Technologist, SSC-ICT

Michel started his career as a medical officer in the Royal Dutch Airforce, with a focus on pharma. After the air force, he continued in pharma, followed by time working in clinical pharmacology. While there, he transitioned to IT by learning UNIX and MUMPS, and developed a system... Read More →

Wednesday November 6, 2024 10:30am - 10:55am PST
CloudX -- Stage 1

CloudX: DevOps Summit, DevSecOps

Talk Type PRO Session
Track or Conference CloudX, CloudX: Cloud Architecture & Infrastructure, DevSecOps (CloudX), CloudX: DevOps Summit, Deployment Strategies (CloudX)
In-Person/Virtual In Person

11:00am PST

PRO SESSION (CloudX): How We Implemented Zero Trust Security Using Cilium

Wednesday November 6, 2024 11:00am - 11:25am PST

CloudX -- Stage 1

Lakmal Warusawithana, WSO2, Technology Evangelist

Implementing a zero trust approach is essential for security, as it involves verifying and validating every request, irrespective of its origin or location.

In the initial implementation of Choreo, our internal Developer Platform as a Service, we faced challenges in controlling all network access and enforcing authentication, authorization, and seamless network traffic encryption at scale, which is vital for the Choreo cloud service. However, by employing Cilium, K8s, and a cell-based architecture, we were able to develop a scalable platform that upholds zero trust security principles.

The combination of Cilium's eBPF-powered layer 3, 4, and 7 network policies, Hubble Observability, IPSec security, and a cell-based architecture enabled us to address all the critical elements of a zero trust platform successfully.

In this talk, I will detail all the challenges we faced and the strategies we employed to overcome them.

Speakers

Lakmal Warusawithana

Technology Evangelist, WSO2

Lakmal Warusawithana is the Senior Director - Cloud Architecture of WSO2. Lakmal has a long history of working in open source, cloud, and DevOps technologies and has been Vice President of Apache Stratos PaaS Project. Lakmal has also presented at numerous events, including ApacheCon... Read More →

Wednesday November 6, 2024 11:00am - 11:25am PST
CloudX -- Stage 1

CloudX: Cloud Architecture & Infrastructure, Cloud Security

Talk Type PRO Session
Track or Conference CloudX, Cloud Security (CloudX), CloudX: DevOps Summit, DevSecOps (CloudX)
In-Person/Virtual In Person