Bulletproof Microservices with Spring and Kubernetes
summary
Shows a concrete stack and configs: uses Skaffold dev plus Cloud Native Buildpacks to auto-build, tag images with sha256, push and update Kubernetes Deployments; uses kustomize to templatize manifests and Kubernetes Secrets for basic auth (username alice / password test) and proves 401 then success. Adds an NGINX ingress with cert-manager (Let's Encrypt + ExternalDNS) to terminate TLS — cert issuance works though some live-demo DNS routing fails — and demonstrates auto-injected certificates for mutual TLS via auto-cert, with clients and servers rejecting unauthenticated requests.
AI-written summary · about
chapters (11)
- 0:00Introduction and speakers
- 1:51Why secure Spring apps on Kubernetes
- 4:20Deploying the Animal Rescue app
- 14:55Adding HTTP basic auth
- 22:23Using Kubernetes ingress for auth
- 28:14Enabling TLS with cert-manager
- 37:43Automating DNS with ExternalDNS
- 41:55OAuth2 proxy for GitHub auth
- 46:12Mutual TLS for service security
- 55:03Auto-cert demo and trade-offs
- 56:12Service mesh overview
related talks
34mBullet proof Microservices with Kubernetes and Spring
44mSpringing into Kubernetes
46mModern DevOps with Kubernetes
25mKubernetes Ingress-Nginx Security from Beginner to Expert
02h 00mKubernetes Security for Developers.
48mGo on Kubernetes from scratch
49mDeveloping microservices applications on the Kubernetes platform
33mBuilding a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]