Using Workload Identity Federation to Increase Developers Producti... Mario Loriedo & Satish Puranam

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon Europe in Paris from March 19-22, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at kubecon.io
Using Workload Identity Federation to Increase Developers Productivity at Ford Motor Company - Mario Loriedo, Red Hat & Satish Puranam, Ford
Developing applications nowadays requires access to external APIs through personal access tokens. But this brings some challenges. How is a token approved and issued? How can we make sure that it’s going to be stored in a secure way? How do we limit the scope of the token so that who owns it cannot abuse it? How are tokens transmitted across different systems? Ford is a long time Kubernetes user and in this talk we are going to show how two recent features are allowing developers and platform engineers to manage API tokens effectively and securely. Those features are Service Account Token Volume projection (that brings some new security features compared to the default Service Account Tokens) and Workload Identity Federation (that allows linking Kubernetes Service Accounts with third party services).