Skip to main content
CPEBuddy
mTLS and Network Policies - Feat. Istio, Linkerd, Cilium, Kuma, and NSM (You Choose!, Ch. 3, Ep. 4)

mTLS and Network Policies - Feat. Istio, Linkerd, Cilium, Kuma, and NSM (You Choose!, Ch. 3, Ep. 4)

Source: YouTube · DevOps & AI Toolkit · published Jan 31, 2024 · 1:19:25

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

This episode compares Kubernetes tools for mTLS and network policy security 13:00, following a demonstration of the External Secrets Operator implementation 6:39.

Key Takeaways:
• The hosts demonstrate using the External Secrets Operator to sync a password from AWS Secrets Manager to a Kubernetes secret via ArgoCD 6:39.
• Linkerd is presented as a lightweight sidecar mesh focusing on operational simplicity, using a Rust-based micro-proxy instead of Envoy 24:12.
• Istio offers an "ambient mesh" mode for sidecar-less layer 4 policy and mTLS, alongside traditional sidecar capabilities 30:01.
• Kuma is highlighted for its multi-cluster architecture and Gateway API-inspired policy system, allowing fine-grained traffic control 35:46.
• Cilium leverages eBPF for high-performance L3/L4 network policy and provides transparent encryption options like IPsec or experimental mTLS 41:19.

The show concludes the technical presentations and transitions to a Q&A session to help viewers choose the appropriate solution.

Sources:

  • 6:39 External Secrets Operator implementation
  • 13:00 Defining mTLS and Network Policy
  • 24:12 Linkerd presentation and Rust proxy
  • 30:01 Istio ambient mesh explanation
  • 35:46 Kuma multi-cluster and policies
  • 41:19 Cilium eBPF and encryption

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

hello us again welcome to YouTu I'm so glad you're here I'm talking to you Victor I'm so glad you're here okay ah me I thought that you're so glad that people are watching this okay that's that that's I get it secondary okay okay no I'm happy everybody's here I'm happy the guests are here I'm happy you're here Victor I'm happy the folks who are here with us live are here please do say hello in the chat and say where you're here from I think it's the coolest thing that we got a a global friend group isn't that awesome oh yeah I'm being extra bubbly right now and you don't know what to do with it at all no just following kind of okay eventually I will have to say something but she's on a run now so it's it's okay all right let's uh let's get to business we have um we're in chapter three of y…