January 2024 Summaries

Don't hardcode your secrets in Kubernetes manifests, and other container pitfalls to avoid` is a blog post that highlights common mistakes when using containers and Kubernetes. The author shares their experiences with authentik, an open-source Identity Provider, on how they test and deploy the service using containers, Helm charts, and Kubernetes. Key takeaways include not hardcoding secrets in manifests, configuring Helm charts for customization, reviewing and updating Kubernetes resources, setting up firewall rules from the outset, and considering a sandbox environment for testing infrastructure configurations. The post emphasizes the importance of security, automation, and sanity in container deployments.

Authentic is an open-source Identity Provider that unifies identity needs into a single platform, replacing Okta, Active Directory, and auth0. The biggest security risk is poor access management, not vulnerabilities. Most major breaches in recent years have been due to compromised access. Integrating access reviews into planning cycles can help prioritize this, as well as setting up an Identity and Access Management solution like authentik with Single Sign-on (SSO) and Role-Based Access Control (RBAC). Automating routine tasks such as reviewing long-lived credentials, identifying gaps in coverage, and patching security updates are also crucial. Designating ownership of security responsibilities among teams can help share the load, and it's better to focus on access management than getting bogged down by seemingly alarming reports from SCA tools.

Authentik Security, a public benefit company building on top of the open source Identity Provider project, wishes users a happy new year and thanks them for their support and feedback. The company has released several new features in 2023, including role-based access control (RBAC), enterprise support, SCIM support, RADIUS support, and others. Looking ahead to 2024, Authentik Security plans to add new functionality such as a wizard for defining applications, Remote Access Control (RAC), a mobile authenticator app, and a hosted Enterprise Cloud offering with SaaS features. The company also plans to focus on user experience (DX and UX) improvements, including a redesigned website, improved technical documentation, and stronger integration testing.