Episode 151.75: KubeCon Live: Token Exchange Trends

Chat with Marc Boorshtein at KubeCon 25 about new trends in token exchange and his thoughts on Kubnernetes SIG Auth session:

#Speakers

• Host: Mike Schwartz, Founder/CEO Gluu
• Guest: Marc Boorshtein

#Takeaways

• Token Exchange helps achieve the promise of "down-scoping" tokens to achieve least privilege.
• Transaction tokens define a new token exchange flow that can help prevent stolen tokens (see Episode 116), and prevent a swath of attacks.
• Kubernetes is starting to build in token validation features--for example it can validate JWTs from multiple issuers, and map claims to Kubernetes entities.
• Kubernetes Dynamic Resource Allocation (DRA) opens interesting new possibilities for runtime authorization.