DevOps and Docker Talk: Cloud Native Interviews and Tooling

Easy Kubernetes Auth and RBAC with Infra

Feb 3, 2023

Matt Williams, co-founder of Infra, shares insights on simplifying Kubernetes user management, certificate distribution, and revocation. Infra's open-source tool tackles pain points in user authentication and permissions. The podcast covers Infra's history, Datadog's evolution, challenges in managing SSH and certificates in Kubernetes, and a demo of Infra's Kubernetes authentication and RBAC tool.

Ask episode

Chapters

Transcript

Episode notes

Intro

00:00 • 2min

Exploring the Background and Creation of Infra app for Kubernetes Management

02:15 • 5min

Reflecting on the Evolution and Significance of Datadog in Monitoring Tools

06:52 • 2min

Managing User Access in Kubernetes with Infra Cloud

08:38 • 19min

Challenges in Managing SSH and Certificates in Kubernetes

27:32 • 2min

Demo of Kubernetes Authentication and RBAC Tool

29:21 • 14min

Discussing default security measures and the importance of easy-to-use Kubernetes tools

42:51 • 3min

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.
https://courses.bretfisher.com/waitlist 🍾

Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC and auth to Kubernetes and more.

Infra is a new company taking on simplifying centralized infrastructure, user authentication and permissions. Their open source tool by the same name is quite easy to start with. In this episode, Matt does a great job of explaining the pain points of Kubernetes user management, certificate distribution and revocation, and more pain points that Infra is bringing simplicity to.

Streamed live on YouTube on November 10, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #191).

★Topics★
Infra Website
Infra on GitHub
All Day DevOps free conference

Matt Williams
===========
Matt on Twitter
Matt's YouTube Channel

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box

Homepage bretfisher.com

(00:00) - DDT MAIN
(00:04) - Intro
(02:31) - Bret intro
(03:30) - Main show
(03:45) - Introducing Matt
(04:17) - Today on the podcast
(04:43) - Infra HQ and Company History
(05:29) - How Infra came to be
(08:17) - Datadog
(10:11) - Infra and open source
(11:36) - How Infra can help
(12:01) - Core Infra functionality
(13:33) - Bad idea
(14:25) - Can't revoke certificates
(17:48) - Painful Certificate Redistribution
(18:48) - Why you need Infra
(20:18) - Question
(21:15) - Service accounts
(21:59) - kubectl and pronunciations
(23:34) - Question about OIDC
(25:22) - Not just a Kubernetes tool
(27:04) - Dealing with Keys is Hard
(27:45) - Offboarding can be harder than Onboarding
(30:01) - Workflow
(30:58) - Demo intro
(31:28) - End demo
(31:39) - Cloud hosted and self-hosted
(32:12) - Providers, Okta
(33:39) - Is Infra GIOps Compatible?
(36:30) - Quick summary of the demo for audio listeners
(38:21) - Dumbed down roles?
(39:45) - Question
(40:29) - A tool to add to your toolbox
(42:15) - Getting started and contributing
(43:02) - Question
(43:28) - Auditing in the future
(44:26) - A Safe and Secure Model
(45:29) - Wrapping up
(47:19) - Outro

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com