Virtual Event
May 4, 2021
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2021 - Virtual and add this Co-Located event to your registration to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central European Summer Time (CEST). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.
Back To Schedule
Tuesday, May 4 • 13:15 - 13:45
Administering Multi Cluster Service Meshes Securely - Eric Murphy & Eitan Yarmush, Solo.io

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
The majority of existing multi-cluster service mesh architectures require the distribution of Kubernetes API credentials (kubeconfigs) across clusters, typically by provisioning a service account in the local cluster and copying its access token to a process running in a remote cluster. This architecture requires that credentials for the Kubernetes API be shared with entities outside the cluster, exposing it to attack. Furthermore, scalability limits of the Kubernetes API Server make it less than ideal to serve an unbounded number of potential remote clients managing configuration and sharing access to a cluster. This talk will explore the downside of existing approaches in this model and propose a new approach based on a client-server management architecture inspired by Envoy which does not require sharing sensitive Kubernetes credentials with remote clusters.

avatar for Eitan Yarmush

Eitan Yarmush

Solo.io, Principal Software Engineer, CTO office
Devoted network engineer and doggy dad. I spend my time hiking, painting, problem solving, and taking care of my new pup. Trying to make the infra space just a little better :)
avatar for Eric Murphy

Eric Murphy

Field Engineer, solo.io
Eric Murphy is a Field Engineer for solo.io. Brings 20 years of experience as a software engineer and architect to Solo.io. Eric loves to think big picture about software design and how technology can solve business problems. In the past, Eric has led workshops focused on topics such as Kubernetes, Java, and Domain-Driven Design. Additionally, Eric is a published author through O’Reilly and has presented... Read More →

Tuesday May 4, 2021 13:15 - 13:45 CEST