Kubernetes Ingress-Nginx Security from Beginner to Expert
summary
Walks through a live demo cluster that deploys ingress-nginx, a simple echo app and Service, then shows concrete configs that work: basic auth via Kubernetes Secret returns 401 until curl supplies creds; external auth via HTTPBin proxies auth to an HTTP endpoint; client cert mTLS verified by CA requires a signed cert and allows access only with it; and modsecurity with OWASP CRS logs and blocks scanners. Also covers rate limiting, kernel and annotation tuning to prevent dropped connections and an ingress lint/debug plugin via krew.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:31About me
- 0:54Demo project
- 1:30Agenda
- 1:55What is ingress
- 2:25Ingress overview
- 6:18Ingress controller overview
- 6:48Deployment options
- 7:19Annotations
- 7:48Basic Authentication
- 9:53External Authentication
- 11:25Mutual Authentication
- 14:03Web Application Firewall
- 14:53OAuth Score
- 16:54Rate Limiting
- 17:33Tuning
- 18:17Troubleshooting
- 19:23Questions
related talks
32mKubernetes Ingress: Your Router, Your Rules
49mAdvanced Ingress for Your Kubernetes Apps
15mSimplify Kubernetes Connectivity
57mBulletproof Microservices with Spring and Kubernetes
48mGo on Kubernetes from scratch
34mKinD, nGinx Ingress Controller & Secured gRPC server
22mCreating an ingress controller
01h 04mGoing 0 to 100 with Kubernetes