Secure Secret Management in Kubernetes: Exploring Different Approaches"Security is not a product, but a process." - Bruce Schneier. Introduction Secrets are an important aspect of any application, containing sensitive information such as passwords, API keys, and certificates. Storing and managing secrets securely is c...7 min read·blog.thisisaditya.comApr 30, 2023
Authentication & Authorization in Kubernetes - Nginx Plus Ingress Controller with OIDC policy"Secure your applications, not your network. Verify identity and enforce access controls in the application itself, where they can travel with the application wherever it goes." - John Kindervag, creator of the Zero Trust security model. Introductio...9 min read·blog.thisisaditya.comMar 19, 2023
Authentication & Authorization in Kubernetes - Oauth2 Proxy with Dex IdP"Authentication and authorization represent the new perimeter in a world where identity is the new control plane." - Satya Nadella, CEO of Microsoft. Introduction In our previous article, we explored how Oauth2 Proxy can be used as an external authe...8 min read·blog.thisisaditya.comMar 5, 2023
Authentication & Authorization in Kubernetes - Using Oauth2 Proxy as Authentication Proxy"OAuth 2.0 and OpenID Connect (OIDC) have become the de facto standards for authentication and authorization in modern web applications and APIs. In the world of Kubernetes, these technologies provide a powerful framework for securing access to your ...10 min read·blog.thisisaditya.comFeb 26, 2023
Authentication & Authorization in Kubernetes ClusterIn a Kubernetes deployment, authentication and authorization can be configured using various methods such as X.509 client certificates, static passwords, or6 min read·blog.thisisaditya.comFeb 19, 2023