WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Mar 23, 2021

Get started with securing your cloud-native Java microservices applications

Thomas Südbröcker

Stop writing boilerplate code to secure your Java microservices. Discover how Quarkus, Keycloak, and Istio seamlessly automate zero-trust network policies without modifying your core business logic.

Pause
Mute Enter Fullscreen
#1 about 2 min

Demo of the secured cloud-native application

End-to-end demonstration of a secured article application running on Kubernetes.

#2 about 3 min

Cloud native starter project architecture

Overview of a basic cloud-native architecture combining Vue front ends with reactive security.

#3 about 3 min

Implementing IAM with Keycloak and OpenID Connect

Modernizing decentralized authentication securely utilizing OAuth 2 standard protocols and token formats.

#4 about 2 min

Utilizing Quarkus for Kubernetes native Java

Optimizing native compilations in Java specifically tuned for lightweight Kubernetes deployments.

#5 about 3 min

Building restful microservices with Eclipse MicroProfile

Extending Jakarta EE standards specifically targeting efficient restful service orchestration.

#6 about 4 min

Authentication workflow and Keycloak realm configuration

Intercepting client requests to establish identity realms, role definitions, and appropriate front end redirects.

#7 about 5 min

Processing JSON web tokens in the front end

Extracting access tokens and decoding payload claims directly from the JavaScript SDK.

#8 about 4 min

Protecting Java microservices with role-based access

Securing backend REST endpoints by automatically forwarding and validating authentication headers via MicroProfile constructs.

#9 about 7 min

Platform security fundamentals using Istio service mesh

Intercepting cross-cluster communications by proxying traffic via transparent Envoy sidecars to enforce ingress limits.

#10 about 7 min

Enforcing mutual TLS and routing within Istio

Isolating workloads explicitly by encrypting peer-to-peer traffic and ensuring complete zero trust observability.

#11 about 11 min

Accessing the cloud shell and Kubernetes cluster

Leveraging managed Kubernetes services and browser-based interfaces to eliminate local prerequisite configurations.

#12 about 7 min

Cloning repository and preparing cloud terminal

Provisioning workspace environment variables and handling git sources securely within the cloud console window.

#13 about 8 min

Installing Istio programmatically with bash scripts

Automating service mesh deployments by executing bash pipelines to bootstrap required Kubernetes control elements.

#14 about 15 min

Configuring TLS certificates for external ingress gateways

Injecting DNS secrets directly into the Istio namespace to activate authorized Let's Encrypt certificates.

#15 about 6 min

Initializing Keycloak and creating identity management realms

Injecting automated authentication states by provisioning the cluster user directory via API uploads.

#16 about 8 min

Deploying article services and front end config maps

Exposing containerized backing services connecting unified API routes via Kubernetes primitives smoothly.

#17 about 7 min

Validating internal zero trust with strict mutual TLS

Emulating unauthorized access attempts to confirm strict mesh policies safely terminate unencrypted connections.

#18 about 9 min

Restricting internal access using service account policies

Replacing permissive mesh identities to lock HTTP operations by strictly enforcing dedicated API service accounts.

#19 about 5 min

Observing microservice traffic telemetry with Kiali

Visualizing explicit mesh routing flows to detect anomalies while actively inspecting live cluster components.

Matching moments

1:18 min

Technology stack for building robust microservices applications

Niklas Heidloff · LIVE

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · World Congress 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

1:39 min

Understanding the four Cs of cloud native security

Rico Komenda Rico Komenda · World Congress 2025

8:20 min

Deploying native Quarkus applications to a Knative cluster

Alex Soto Alex Soto · LIVE

4:12 min

Utilizing pre-integrated observability and authentication platform tools

Aarno Aukia · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
3 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
4 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
11 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
16 days ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

WeAreDevelopers - Of Agents and Robots thumbnail
1:04:42
17 days ago

WeAreDevelopers - Of Agents and Robots

Chris Heilmann, Daniel Cranney, Marc Plogas

WeAreDevelopers LIVE - How DevRel Makes Tech More Human thumbnail
48:06
24 days ago

WeAreDevelopers LIVE - How DevRel Makes Tech More Human

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate at Docker

Ajeet Raina
Open session

World Congress 2026 North America

September 24, 2026 · 11:40–12:10

Stage 3

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

September 25, 2026 · 09:00–09:30

Stage 1

Test Before Release, Enforce at Runtime: Governance for Tool-Using AI Agents

Sachin Gupta

Member of Technical Staff 2 at eBay

Sachin Gupta
Open session

World Congress 2026 North America

September 24, 2026 · 16:10–16:40

Stage 4

From Cloud Native to Multi-Cloud Native: Write Once, Deploy Anywhere

Sandeep Pal

Principal Member of Technical Staff at Salesforce

Sandeep Pal
Open session

World Congress 2026 North America

September 24, 2026 · 17:30–18:00

Stage 5

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

September 24, 2026 · 10:20–10:50

Stage 7

Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations

Borko Djurkovic

Member of Technical Staff at Cohere

Borko Djurkovic

Related videos

2021: Familiar APIs on Kickass Runtimes #slideless thumbnail
37:55
LIVE • over 5 years ago

2021: Familiar APIs on Kickass Runtimes #slideless

Adam Bien

Kubernetes Security Best Practices thumbnail
23:08
World Congress 2025 • about 1 year ago

Kubernetes Security Best Practices

Rico Komenda

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips thumbnail
27:11
World Congress 2024 • about 2 years ago

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips

Daniel Oh, Kevin Dubois

Development of reactive applications with Quarkus thumbnail
39:10
LIVE • almost 6 years ago

Development of reactive applications with Quarkus

Niklas Heidloff

Serverless-Native Java with Quarkus thumbnail
41:04
LIVE • about 5 years ago

Serverless-Native Java with Quarkus

Alex Soto

Keycloak case study: Making users happy with service level indicators and observability thumbnail
27:15
World Congress 2025 • about 1 year ago

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.