What does mTLS add beyond Cilium security identities and network encryption?
I've been learning Kubernetes through a homelab and am trying to understand the practical purpose of mutual TLS, especially when using a service mesh such as Linkerd or…
mTLS
What does mTLS provide beyond Cilium identities, network policies, and WireGuard?
I've been building a homelab Kubernetes cluster on Talos with Cilium and am trying to understand the practical purpose of mutual TLS, especially when using a service mesh…
Which API Gateway Controller Works Best for mTLS and TLS Passthrough?
I'm evaluating API Gateway controllers for applications that require mutual TLS. I'm especially interested in setups using true TLS passthrough, along with any practical experience using controllers such…
What’s the Biggest Challenge in Managing Device Identity for IoT at Scale?
I recently built an IoT platform on Google Kubernetes Engine (GKE) and faced a challenge I didn't anticipate. While scaling the messaging with RabbitMQ was straightforward, managing device…
Looking for Study Materials on PKI, Self-Signed Certificates, and mTLS
Hey folks! I'm a DevOps professional with about 3 years of experience. I'm looking to boost the security of my homelab as part of my Certified Kubernetes Security…
Should I Use Wireguard or mTLS for Kubernetes Traffic Security?
Hey everyone! I'm facing some challenges and would love your insights. I have several services running on Kubernetes, including both web and backend services. Currently, we authenticate and…
Transitioning from Ingress-nginx to Gateway API: Seeking Advice on Authentication and Features
Hey everyone! Our team is planning to switch from Ingress as we're approaching the end of support for ingress-nginx next month. This feels like a great opportunity to…
Where Can I Buy a TLS Certificate for Client Authentication?
I'm looking for a trusted source to purchase a TLS certificate specifically for client authentication in mutual TLS (mTLS). It needs to be issued by a public Certificate…
Experiences with CloudNativePG and Istio's mTLS?
Hey everyone! I'm curious to hear from those who are using CloudNativePG (CNPG) alongside Istio's mTLS feature. Specifically, have you experienced any challenges while running CNPG clusters with…
Why are Service Meshes Trending Among Companies?
I'm really curious about the hype surrounding service meshes and their growing popularity among companies. Despite my eight years of experience with Kubernetes, I'm struggling to understand the…
How Can I Achieve mTLS With Azure Front Door?
Hey everyone! I've been testing and reading a lot about Azure Front Door (AFD) but it seems like it doesn't support forwarding client certificates. I'm trying to set…
Does anyone use EnvoyProxy for mTLS and OAuth token injection in production?
We have a customer who needs OAuth access tokens to be included in each HTTP request made from our platform to their API Gateway. Additionally, they require mutual…
Issues with Auto-Renewing mTLS Certificates in Ingress
Hi everyone! I've configured mTLS for the ingress of my backend service and it's working perfectly. However, I'm running into trouble when it comes time to renew the…
How Can I Secure Pod-to-Pod Communication in a Kubernetes Setup?
I'm trying to figure out the best way to secure communication between pods in my Kubernetes setup. Do people usually set up truststores or keystores for each service…