The Hardest Part of Building Your Own Cloud: Identity
summary
Claim: identity is the control plane of any sovereign cloud and becomes the hardest engineering problem once you leave hyperscalers. Cozystack replaces outsourced IAM by implementing tenant-aware IAM, service-to-service identity, and extended RBAC with token validation and federation. The team describes handling human users, service accounts, CI/CD tokens, audit logs, and tenant isolation across shared Kubernetes, storage, networking and APIs, and shows those pieces are required to prevent cross-tenant data leaks.
AI-written summary · about
chapters (4)
- 0:00Identity is hardest part
- 3:31Identity powers cloud actions
- 6:43Multi-tenancy needs identity
- 9:52Identity as control plane
related talks
39mManaging Trust Between Multiple Clouds and Non-human Identities Without Passwords
23mKeynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
25mSecurity, Identity - Back to the Drawing Board?
22mHow to Secure Cloud Machine Identities
48mControlling Clouds: Beyond Safety
01h 59mBuilding Secure Kubernetes Clusters with Identity Management
31mEncryption, Identities, and Everything in Between; Building Secure Kubernetes Networks
34mThrow Away Your Passwords: Trusting Workload Identity