Welcome to the most challenging class. Good news: you dont need to implement any of this in your startup project. Bad news: You ll use 3 clouds today and it might get confusing

Last Updated: 2024-03-17

Why

How to passwordlessly connect services from your laptop to cloud-serviceA, which talks to cloud-serviceB (in cloud B) ? That s what we ll do today in a very simplified app. This is how e.g. Google GCP implements pod-identity. This lecture will show you how this is done and that you can do it, too.

What

We will cover the following topics:

• SPIFFE/SPIRE
• IAM
• IDPs
• Zero Trust
• A tiny bit of go-code

What you'll build today

By the end of today's lecture, you should have

• ✅ an app running on kind on your laptop
• ✅ that uses SPIFFE to authenticate a service (running on your laptop) via IDP to bind to an Azure role and retrieve a secret from a vault

Homework (Flipped Classroom)

How should I prepare

• Make sure kind works on your laptop

PreRead

• video

What you'll need

• A browser (this lab was only tested on Chrome)
• A laptop with internet
• Pen and Paper

Or how to communicate access across identity-domains

In the beginning, there was <a story>

Lets see what projects are out there and how they differ

Identity tooling available in the CNCF landscape

https://landscape.cncf.io

What we are going to build by the end of this class

Target state

Practise makes perfect

Volontary dry-run on Friday (same lecture hall)

If there is interest, your instructor will be present in the lecture hall on Friday and pretend to be your audience

Congratulations, you've successfully completed this training

What's next?

• TBD

Further reading

• l

Reference docs

• r