WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Mar 23, 2021

Get started with securing your cloud-native Java microservices applications

Thomas Südbröcker

Stop writing boilerplate code to secure your Java microservices. Discover how Quarkus, Keycloak, and Istio seamlessly automate zero-trust network policies without modifying your core business logic.

Pause
Mute Enter Fullscreen
#1 about 2 min

Demo of the secured cloud-native application

End-to-end demonstration of a secured article application running on Kubernetes.

#2 about 3 min

Cloud native starter project architecture

Overview of a basic cloud-native architecture combining Vue front ends with reactive security.

#3 about 3 min

Implementing IAM with Keycloak and OpenID Connect

Modernizing decentralized authentication securely utilizing OAuth 2 standard protocols and token formats.

#4 about 2 min

Utilizing Quarkus for Kubernetes native Java

Optimizing native compilations in Java specifically tuned for lightweight Kubernetes deployments.

#5 about 3 min

Building restful microservices with Eclipse MicroProfile

Extending Jakarta EE standards specifically targeting efficient restful service orchestration.

#6 about 4 min

Authentication workflow and Keycloak realm configuration

Intercepting client requests to establish identity realms, role definitions, and appropriate front end redirects.

#7 about 5 min

Processing JSON web tokens in the front end

Extracting access tokens and decoding payload claims directly from the JavaScript SDK.

#8 about 4 min

Protecting Java microservices with role-based access

Securing backend REST endpoints by automatically forwarding and validating authentication headers via MicroProfile constructs.

#9 about 7 min

Platform security fundamentals using Istio service mesh

Intercepting cross-cluster communications by proxying traffic via transparent Envoy sidecars to enforce ingress limits.

#10 about 7 min

Enforcing mutual TLS and routing within Istio

Isolating workloads explicitly by encrypting peer-to-peer traffic and ensuring complete zero trust observability.

#11 about 11 min

Accessing the cloud shell and Kubernetes cluster

Leveraging managed Kubernetes services and browser-based interfaces to eliminate local prerequisite configurations.

#12 about 7 min

Cloning repository and preparing cloud terminal

Provisioning workspace environment variables and handling git sources securely within the cloud console window.

#13 about 8 min

Installing Istio programmatically with bash scripts

Automating service mesh deployments by executing bash pipelines to bootstrap required Kubernetes control elements.

#14 about 15 min

Configuring TLS certificates for external ingress gateways

Injecting DNS secrets directly into the Istio namespace to activate authorized Let's Encrypt certificates.

#15 about 6 min

Initializing Keycloak and creating identity management realms

Injecting automated authentication states by provisioning the cluster user directory via API uploads.

#16 about 8 min

Deploying article services and front end config maps

Exposing containerized backing services connecting unified API routes via Kubernetes primitives smoothly.

#17 about 7 min

Validating internal zero trust with strict mutual TLS

Emulating unauthorized access attempts to confirm strict mesh policies safely terminate unencrypted connections.

#18 about 9 min

Restricting internal access using service account policies

Replacing permissive mesh identities to lock HTTP operations by strictly enforcing dedicated API service accounts.

#19 about 5 min

Observing microservice traffic telemetry with Kiali

Visualizing explicit mesh routing flows to detect anomalies while actively inspecting live cluster components.

Matching moments

1:18 min

Technology stack for building robust microservices applications

Niklas Heidloff · LIVE

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · WWC 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:39 min

Understanding the four Cs of cloud native security

Rico Komenda Rico Komenda · WWC 2025

8:20 min

Deploying native Quarkus applications to a Knative cluster

Alex Soto Alex Soto · LIVE

4:12 min

Utilizing pre-integrated observability and authentication platform tools

Aarno Aukia · LIVE

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

Microservice Cognitive Index for Deploy Diagnosis and Change Impact

Sachin Gupta

Member of Technical Staff 2 at eBay

Sachin Gupta
Open session

World Congress 2026 North America

From Cloud Native to Multi-Cloud Native: Write Once, Deploy Anywhere

Sandeep Pal

Principal Member of Technical Staff at Salesforce

Sandeep Pal
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations

Borko Djurkovic

Member of Technical Staff at Cohere

Borko Djurkovic
Open session

World Congress 2026 North America

Look What Java Can Do Now: Live-Coding a GenAI MCP Server with the JAQ Stack

Suren Konathala

Senior Engineering Leader, Marketing & AdTech, AI GTM & Digital Experience Platforms, Java x AI

Suren Konathala

Related videos

2021: Familiar APIs on Kickass Runtimes #slideless thumbnail
37:55
LIVE • over 5 years ago

2021: Familiar APIs on Kickass Runtimes #slideless

Adam Bien

Kubernetes Security Best Practices thumbnail
23:08
WWC 2025 • 12 months ago

Kubernetes Security Best Practices

Rico Komenda

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips thumbnail
27:11
WWC 2024 • almost 2 years ago

Serverless Java in Action: Cloud Agnostic Design Patterns and Tips

Daniel Oh, Kevin Dubois

Development of reactive applications with Quarkus thumbnail
39:10
LIVE • over 5 years ago

Development of reactive applications with Quarkus

Niklas Heidloff

Serverless-Native Java with Quarkus thumbnail
41:04
LIVE • almost 5 years ago

Serverless-Native Java with Quarkus

Alex Soto

Keycloak case study: Making users happy with service level indicators and observability thumbnail
27:15
WWC 2025 • 12 months ago

Keycloak case study: Making users happy with service level indicators and observability

Alexander Schwartz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.