Easy Kubernetes Auth and RBAC with Infra
Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC, auth to Kubernetes, and more.
DevOps and Docker Talk: Cloud Native Interviews and Tooling
Audio is streamed directly from the publisher (media.transistor.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾
Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC and auth to Kubernetes and more.
Infra is a new company taking on simplifying centralized infrastructure, user authentication and permissions. Their open source tool by the same name is quite easy to start with. In this episode, Matt does a great job of explaining the pain points of Kubernetes user management, certificate distribution and revocation, and more pain points that Infra is bringing simplicity to.
Streamed live on YouTube on November 10, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #191).
★Topics★
Infra Website
Infra on GitHub
All Day DevOps free conference
Matt Williams
===========
Matt on Twitter
Matt's YouTube Channel
★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box
Homepage bretfisher.com
- (00:00) - DDT MAIN
- (00:04) - Intro
- (03:11) - Bret intro
- (04:10) - Main show
- (04:25) - Introducing Matt
- (04:57) - Today on the podcast
- (05:23) - Infra HQ and Company History
- (06:09) - How Infra came to be
- (08:57) - Datadog
- (10:51) - Infra and open source
- (12:16) - How Infra can help
- (12:41) - Core Infra functionality
- (14:13) - Bad idea
- (15:05) - Can't revoke certificates
- (18:28) - Painful Certificate Redistribution
- (19:28) - Why you need Infra
- (20:58) - Question
- (21:55) - Service accounts
- (22:39) - kubectl and pronunciations
- (24:14) - Question about OIDC
- (26:02) - Not just a Kubernetes tool
- (27:44) - Dealing with Keys is Hard
- (28:25) - Offboarding can be harder than Onboarding
- (30:41) - Workflow
- (31:38) - Demo intro
- (32:08) - End demo
- (32:19) - Cloud hosted and self-hosted
- (32:52) - Providers, Okta
- (34:19) - Is Infra GIOps Compatible?
- (37:10) - Quick summary of the demo for audio listeners
- (39:01) - Dumbed down roles?
- (40:25) - Question
- (41:09) - A tool to add to your toolbox
- (42:55) - Getting started and contributing
- (43:42) - Question
- (44:08) - Auditing in the future
- (45:06) - A Safe and Secure Model
- (46:09) - Wrapping up
- (47:59) - Outro
You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!
Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com