WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Mar 23, 2021

Get started with securing your cloud-native Java microservices applications

Thomas Südbröcker

Stop writing boilerplate code to secure your Java microservices. Discover how Quarkus, Keycloak, and Istio seamlessly automate zero-trust network policies without modifying your core business logic.

Pause
Mute Enter Fullscreen
#1 about 2 min

Demo of the secured cloud-native application

End-to-end demonstration of a secured article application running on Kubernetes.

#2 about 3 min

Cloud native starter project architecture

Overview of a basic cloud-native architecture combining Vue front ends with reactive security.

#3 about 3 min

Implementing IAM with Keycloak and OpenID Connect

Modernizing decentralized authentication securely utilizing OAuth 2 standard protocols and token formats.

#4 about 2 min

Utilizing Quarkus for Kubernetes native Java

Optimizing native compilations in Java specifically tuned for lightweight Kubernetes deployments.

#5 about 3 min

Building restful microservices with Eclipse MicroProfile

Extending Jakarta EE standards specifically targeting efficient restful service orchestration.

#6 about 4 min

Authentication workflow and Keycloak realm configuration

Intercepting client requests to establish identity realms, role definitions, and appropriate front end redirects.

#7 about 5 min

Processing JSON web tokens in the front end

Extracting access tokens and decoding payload claims directly from the JavaScript SDK.

#8 about 4 min

Protecting Java microservices with role-based access

Securing backend REST endpoints by automatically forwarding and validating authentication headers via MicroProfile constructs.

#9 about 7 min

Platform security fundamentals using Istio service mesh

Intercepting cross-cluster communications by proxying traffic via transparent Envoy sidecars to enforce ingress limits.

#10 about 7 min

Enforcing mutual TLS and routing within Istio

Isolating workloads explicitly by encrypting peer-to-peer traffic and ensuring complete zero trust observability.

#11 about 11 min

Accessing the cloud shell and Kubernetes cluster

Leveraging managed Kubernetes services and browser-based interfaces to eliminate local prerequisite configurations.

#12 about 7 min

Cloning repository and preparing cloud terminal

Provisioning workspace environment variables and handling git sources securely within the cloud console window.

#13 about 8 min

Installing Istio programmatically with bash scripts

Automating service mesh deployments by executing bash pipelines to bootstrap required Kubernetes control elements.

#14 about 15 min

Configuring TLS certificates for external ingress gateways

Injecting DNS secrets directly into the Istio namespace to activate authorized Let's Encrypt certificates.

#15 about 6 min

Initializing Keycloak and creating identity management realms

Injecting automated authentication states by provisioning the cluster user directory via API uploads.

#16 about 8 min

Deploying article services and front end config maps

Exposing containerized backing services connecting unified API routes via Kubernetes primitives smoothly.

#17 about 7 min

Validating internal zero trust with strict mutual TLS

Emulating unauthorized access attempts to confirm strict mesh policies safely terminate unencrypted connections.

#18 about 9 min

Restricting internal access using service account policies

Replacing permissive mesh identities to lock HTTP operations by strictly enforcing dedicated API service accounts.

#19 about 5 min

Observing microservice traffic telemetry with Kiali

Visualizing explicit mesh routing flows to detect anomalies while actively inspecting live cluster components.

Matching moments

1:18 min

Technology stack for building robust microservices applications

Niklas Heidloff · LIVE

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · World Congress 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

1:39 min

Understanding the four Cs of cloud native security

Rico Komenda Rico Komenda · World Congress 2025

8:20 min

Deploying native Quarkus applications to a Knative cluster

Alex Soto Alex Soto · LIVE

4:12 min

Utilizing pre-integrated observability and authentication platform tools

Aarno Aukia · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
10 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
17 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
19 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
24 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
26 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
about 1 month ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

2021: Familiar APIs on Kickass Runtimes #slideless thumbnail
37:55
LIVE • over 5 years ago

2021: Familiar APIs on Kickass Runtimes #slideless

Adam Bien

Kubernetes Security Best Practices thumbnail
23:08
World Congress 2025 • about 1 year ago

Kubernetes Security Best Practices

Rico Komenda

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips thumbnail
27:11
World Congress 2024 • about 2 years ago

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips

Daniel Oh, Kevin Dubois

Development of reactive applications with Quarkus thumbnail
39:10
LIVE • almost 6 years ago

Development of reactive applications with Quarkus

Niklas Heidloff

Serverless-Native Java with Quarkus thumbnail
41:04
LIVE • about 5 years ago

Serverless-Native Java with Quarkus

Alex Soto

Keycloak case study: Making users happy with service level indicators and observability thumbnail
27:15
World Congress 2025 • about 1 year ago

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.