Securing Your Applications Without Touching Code
Tools like HashiCorp Vault and Consul work using configuration outside your application code.
Speakers
Nicolas EhrmanStaff Solutions Engineer, HashiCorp
Today, securing your apps is a must-have but it's difficult to introduce it without modifying code if you didn't think about it at the very beginning. Luckily, the new cloud-native pattern brought by containers offers simple ways to address security concerns without touching code.
In this session, HashiCorp solutions engineer Nicolas Ehrman will demonstrate how an existing application can leverage advanced features of OpenShift, Vault Dynamic Secrets and Red Hat SSO to enhance its security only by modifying its configuration.
Outline
0:00 — Understanding the transition from static to dynamic IT environments
16:12 — Secrets management and HashiCorp Vault
18:02 — Network security with HashiCorp Consul
19:06 — Demo: Introducing network security and credential management on a Kubernetes / OpenShift environment using Vault, Consul, Key
51:17 — Q&A
