An unmaintained identity component can remain invisible until a routine Kubernetes upgrade turns it into an incident.
Fabián Sellés Rosa, Platform Engineer and Runtime Tech Lead at Adevinta, explains how his team moved from KIAM to EKS Pod Identities without discarding the security boundaries and application interface that their internal platform depended on.
In this interview:
Why KIAM became urgent to replace after years of stable operation
How Crossplane, a custom controller, and KRO with ACK compared against the team's criteria
Why managed EKS Capabilities reduced toil but introduced observability and rollout trade-offs
How Kyverno preserved namespace-level authorization for IAM roles
Podden och tillhörande omslagsbild på den här sidan tillhör
KubeFM. Innehållet i podden är skapat av KubeFM och inte av,
eller tillsammans med, Poddtoppen.
