End-to-End Security With gRPC in Kubernetes#
KubeCon + CloudNativeCon North America 2025 digest Program Adjacent pick 10–13 November 2025
Shiva & Abhishek Agrawal, Google — Adjacent
- Why: A practical consolidation of the moving parts for securing gRPC service-to-service traffic — TLS/mTLS, JWT/OAuth2, cert lifecycle — relevant to the identity/authn remit.
- What: Best-practices walkthrough for end-to-end gRPC security in Kubernetes. (from abstract only)
- How: TLS/mTLS for transport, JWT and OAuth2 for authentication, cert-manager and Secrets for certificate management, and Istio for automating the security config. (from abstract only)
- Where applicable: gRPC microservices on Kubernetes; general. Likely practitioner-level rather than deep internals.
