How to Achieve Zero-Trust Security With Kuma Service Mesh
summary
Claim: enable zero trust across hybrid clusters with a single policy and it actually issues and rotates real X.509 certs daily and encrypts cross-zone traffic. Demo uses Kuma service mesh on three clusters plus AWS VMs, a global control plane that propagates CA and certs to Envoy data plane proxies, and a single kubectl command to flip on mutual TLS. Certificates appear in under a minute, permissions deletion immediately blocks calls, and multi-cluster cross-cloud requests remain encrypted and observable.
AI-written summary · about
chapters (8)
- 0:00Zero-trust security intro
- 2:35Why zero trust matters
- 7:28Microservices security with zero trust
- 10:16Identity and encryption
- 13:04Service mesh foundation
- 17:17Kuma policies simplified
- 19:03Live Kuma demo
- 23:39Summary and next steps
related talks
29mZero Trust Security with Service Mesh
12mService Mesh In Action With Kuma: Security, Routing, and Observability
35mDemystifying Zero-Trust for Cloud Native Technologies
26mSecuring Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles
45mZero Trusting as a True Cloud Native Dev
31mTrust no one: implementing zero trust security with Ambient Service Mesh
32mImplementing Zero Trust in a Kubernetes Cluster with Istio
26mA DevSecOps Approach to Zero Trust Network Security