Compliance the Easy Way: Zero-conf mTLS for Dev and smooth Day-2 f...
summary
Finleap Connect implements zero-conf mTLS across a multi-tenant Kubernetes cluster using Linkerd 2.x, automatically encrypting east‑west traffic for compliance without developer changes. The mesh runs across ~5000 injected proxies, adds daily proxy certificate rotation and survived root CA rotations and heavy Helm churn (~50 updates/day). Monitoring moves Linkerd metrics into tenant Prometheus + Thanos for long retention, and certificate ops use cert-manager + Vault operator to automate stable rotation of control plane and webhook chains.
AI-written summary · about
chapters (4)
related talks
37mEnforcing Automatic mTLS With Linkerd and OPA Gatekeeper
30mService Mesh Is Still Hard. The Things we all Did Wrong & Tales of Woe
30mEmbracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars
35mEmissary + Linkerd: A Guide to End-to-end Encryption for your Cluster
01h 12mHands-on Workshop: Zero Trust Networking in Practice with a Service M...
35mIntro: Linkerd
35mDeep Dive: Linkerd
34mZero to Secure: Using Open Service Mesh to Easily...