andifalk / cloud-native-microservices-security

Cloud-Native Microservice Security Bootcamp

Cloud-Native Microservice Security Boot-Camp

Tutorial

Tutorial

Slides

• Slides for Workshop (PDF)

Introduction

• Requirements and Setup
• Demo Application Architecture

Hands-On Labs

• 1.Security via Spring Boot Auto-Configuration
• 2.Customized Authentication
• 3.Mutual TLS (MTLS)
• 4.Authorization
• 5.Automated Testing
• 6.Kubernetes Security
  • 6.1.Docker as Root
  • 6.2.Docker as NonRoot
  • 6.3.Kubernetes Deployment
  • 6.4.Secure Kubernetes Deployment

Bonus Labs

• CSRF Attack Demo
• Web Authn