What is zero trust security and how paralus implements these
summary
Paralus is a CNCF Sandbox project that demonstrates a concrete zero‑trust stack: Kratos and Casbin for identity and policy, mTLS between components with Paralus acting as a CA, and just-in-time service account creation in target clusters. It ships GUI/CLI/API, installs an agent per cluster that dials out, creates ephemeral K8s service accounts (demo shows one created ~24s ago) and records every kubectl action for auditing. The demo shows a namespace‑readonly user correctly denied cross‑namespace access, and the system scales to tens/hundreds of clusters.
AI-written summary · about
chapters (15)
- 0:00Zero trust and Paralus
- 1:05Traditional vs zero trust
- 2:49Zero trust core principles
- 4:11Zero trust principles
- 5:58Zero trust in Kubernetes
- 7:05What is Paralus
- 7:26Paralus zero trust
- 9:52Paralus architecture
- 12:14Demo setup
- 13:27Logging into Paralus
- 14:31Managing clusters
- 15:57Authentication process
- 17:59Live demo access
- 19:44Auditing activities
- 20:47Closing remarks
related talks
30mFrom Perimeter to Zero Trust: Securing Kubernetes with Paralus
26mSecuring Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles
23mEnhanced Security for Multi-Tenant Architectures: Key Components and Best Practices
01h 02mIntroduction to Zero Trust Security
29mZero Trust Security with Service Mesh
35mDemystifying Zero-Trust for Cloud Native Technologies
36mManaged Zero Trust Security With HashiCorp Cloud Platform
39mOn Establish a Production Zero Trust Architecture