Security: Identity Management, RBAC, Authentication and Authorization

Show: 15

Show Overview: Brian and Tyler continue their focus on Security with Marc Boorshtein (@mlbiam, CTO of @tremolosecurity), discussing Identity Management, Container and Kubernetes Authorization and Authentication, RBAC, and how IT teams evolve to manage security in more agile environments.
 
Show Notes:

• PodCTL #14 - Security: Hosts, Registries, Content and Pipelines
• [Video] Identity Management and Compliance
• [Video] DevOps Identity Management
• [Website] Tremolo Security
• 10 Layers of Container Security
• Open Source k8s SSO project
• Open Source OpenShift Identity Manager project

Topic 1 - Let’s talk about User authentication in Kubernetes>

• Certificate Authentication 
• OpenID Connect 
• Reverse Proxy

Topic 2 - Let’s dig into the various types of Authorizations

• Overview of RBAC (Role-Based Access Control)
•  Mapping of Roles to Users and Groups 
• Organizational Challenges

Topic 3 - Given that various people (Devs & Ops) interact with dashboards, how do we manage that Authentication?

Topic 4 - How are organizations evolving to keep up with this more agile form of software development and the associated security challenges?

Feedback?

• Email: PodCTL at gmail dot com
• Twitter: @PodCTL 
• Web: http://podctl.com