Cloud Native
Security Talks RSS

KubeCon Europe 2019

Uber x Security: Why and How We Built Our Workload Identity Platform

Tyler Julian, Uber & Daniel Feldman, Scytale

Abstract

Since launching in 2009, Uber has become the poster child for explosive growth - in revenue, headcount, and operational complexity. This growth has created new challenges for Uber’s engineering team and the services they maintain. How can these services reliably identify and authenticate to each other? How can we ensure isolation for critical systems? How can we achieve compliance with regulations like GDPR and SOX? How can we efficiently incorporate identity into unsupported legacy systems? Most importantly, how can we do all of this in a way that doesn’t get in the way of engineers?This talk will explore what led Uber to build out an automated, API-driven, cloud native approach to workload identity with SPIFFE that provides the critical bridge of trust within Uber’s next-gen infrastructure, and the impact it’s had on Uber’s internal security and developer efficiency.

More from KubeCon Europe 2019

Open in the index →
  1. Using eBPF to Bring Kubernetes-Aware Security to the Linux KernelDan Wendlandt, Isovalent 2019-05-21
  2. Portable, Universal Single Sign-On for Your ClustersMiguel Martinez, Bitnami 2019-05-21
  3. Kubernetes + Encrypted Memory = Security * PrivacyHarshal Patil & Pradipta Banerjee, IBM 2019-05-21
  4. Fine-Grained Permissions in Kubernetes: What’s Missing, and How to Fix ThatVallery Lancey, Lyft & Seth McCombs, Triller 2019-05-21
  5. Envoy SDS: Fortifying Istio SecurityYonggang Liu & Quanjie Lin, Google 2019-05-21
  6. Zero Trust Service Mesh with Calico, SPIRE, and EnvoyShaun Crampton, Tigera & Evan Gilman, Scytale 2019-05-22
  7. Smarter Kubernetes Access Control: A Simpler Approach to AuthRob Scott, ReactiveOps 2019-05-22
  8. Inside the CNCF Project Security ReviewsJustin Cormack, Docker 2019-05-22
  9. Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105Ian Coldwater, Heroku 2019-05-22
  10. Container Forensics: What to Do When Your Cluster is a ClusterMaya Kaczorowski & Ann Wallace, Google 2019-05-22
  11. Caller ID in KubernetesMichael Danese, Google 2019-05-22
  12. Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIREEvan Gilman, Scytale, Inc. 2019-05-23
  13. Securing Kubernetes with Trusted Platform Module (TPM)Alex Tcherniakhovski & Andrew Lytvynov, Google 2019-05-23
  14. Secrets Store CSI Driver-Bring Your Own Enterprise Secrets Store to K8sRita Zhang, Microsoft & Anubhav Mishra, HashiCorp 2019-05-23
  15. Protecting the Data LakeAsh Narkar, Styra, Inc 2019-05-23
  16. DIY Pen-Testing for Your Kubernetes ClusterLiz Rice, Aqua Security 2019-05-23