Skip to content

Commit

Permalink
KubeCON24 recap
Browse files Browse the repository at this point in the history
  • Loading branch information
thomasdarimont committed Mar 26, 2024
1 parent f8052dc commit 7088ea7
Showing 1 changed file with 45 additions and 0 deletions.
45 changes: 45 additions & 0 deletions blog/2024/keycloak-at-kubecon-eu-2024-recap.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
:title: Recap from Keycloak at KubeCON EU 2024 and cloudnativecon
:date: 2024-03-27
:publish: false
:author: Thomas Darimont

After a packed week of awesome talks at https://events.linuxfoundation.org/kubecon-cloudnativecon-europe[KubeCON EU and CloudNativeCon 2024 in Paris] we’d like to share our impressions with the rest of the Keycloak community.

== Keycloak and OAuth2 Token Exchange for Microservice API Security

To us the presence of Keycloak in numerous presentations highlighted its importance in the cloud-native ecosystem. Notably, the talk “OAuth2 Token
Exchange for Microservice API Security” by Ahmet Soormally & Letz Yaara on https://oauth.net/2/token-exchange[OAuth2 Token Exchange (RFC 8693)] underscored its application in
microservice security and pinpointed areas for Keycloak's enhancement. Efforts to advance the support for Token Exchange are underway, and community feedback is
invaluable. Please join the https://github.com/keycloak/keycloak/discussions/26502[discussion on the current usage of Token Exchange] to help us out.

Talk https://kccnceu2024.sched.com/event/1YeLf/oauth2-token-exchange-for-microservice-api-security-ahmet-soormally-letz-yaara-tyk?iframe=no&w=100%&sidebar=yes&bg=no[slides] https://www.youtube.com/watch?v=09GhdXhiv0Q[video]

== Keycloak and the Secrets of the Universe at CERN

A standout moment was learning about Keycloak's role at CERN in the talk “The Hard Life of Securing a Particle Accelerator”, as shared by
Antonio Nappi and Sebastian Lopienski, emphasising its contribution to securing the particle accelerator's IAM infrastructure.
Keycloak supports the research for the nature of the universe, how cool is that?!

Talk https://static.sched.com/hosted_files/kccnceu2024/bf/KubeConEU24_HardLifeSecAccel.pdf[slides] https://www.youtube.com/watch?v=rqDrrTKzNd8[video]

== Keycloak, OpenFGA and Kubernetes Authorizer

Additionally, Jonathan Whitaker's talk “Federated IAM for Kubernetes with OpenFGA” on federated IAM with OpenFGA showcased innovative
approaches for managing access to Kubernetes resources through the combination of Keycloak, https://openfga.dev/[OpenFGA] and a https://kubernetes.io/docs/reference/access-authn-authz/authorization/[custom Kubernetes Authorizer Web Hook]. In particular the demonstration of temporarily elevated access to Kubernetes resources was very well received.

Talk https://static.sched.com/hosted_files/kccnceu2024/0d/Federated%20IAM%20for%20Kubernetes%20with%20OpenFGA.pdf[slides] https://www.youtube.com/watch?v=UaK1EnRgrng[video]

== Keycloak: The Leading Edge of AuthN and AuthZ

Last but not least our session, "The Leading Edge of AuthN and AuthZ by Keycloak" presented by Takashi Norimatsu
and myself, introduced the latest Keycloak advancements, including support for https://passkeys.dev[Passkeys], https://oauth.net/2.1[OAuth 2.1] , and OpenID for Verifiable Credentials (https://oauth.net/openid-for-verifiable-credentials[OpenID4VC]). As part of our talk, we demonstrated the current https://www.keycloak.org/docs/latest/server_admin/index.html#passkeys_server_administration_guide[support for Passkeys] and https://github.com/thomasdarimont/keycloak-opa-authz-demo[some integration options] with https://www.openpolicyagent.org[Open Policy Agent].

Talk https://static.sched.com/hosted_files/kccnceu2024/76/Norimatsu_KubeConEU2024_Paris.pdf[slides1] https://static.sched.com/hosted_files/kccnceu2024/91/15min_Flexible%20Authorization%20for%20Keycloak%20with%20Open%20Policy%20Agent%20Thomas%20Darimont.pdf[slides2] https://www.youtube.com/watch?v=DMwPjsG4wIM[video]

== Summary

Keycloak is an essential pillar of many cloud-native systems and made a significant impact at the conference, attracting thousands of Kubernetes and cloud-native professionals.

The engagement and collaborative spirit of the cloud-native community were genuinely inspiring, underscoring the collective drive to enhance and innovate within this vibrant ecosystem.

We're very proud and happy to be part of this fantastic community.

0 comments on commit 7088ea7

Please sign in to comment.