Managing Spring Boot Application Secrets

Explore a comprehensive conference talk from Spring I/O 2023 in Barcelona that delves into managing secrets for Spring Boot applications. Learn about various patterns for securing cloud-native application secrets, including open-source solutions like Conjur. Discover techniques to remove hard-coded credentials, simplify secrets management, and address the secret zero problem. Gain insights on implementing strong authentication and authorization using JWT and cert-based methods, as well as applying least privilege principles through attribute-based access control (ABAC). Understand when to utilize sidecar and init container patterns for enhanced application security in Kubernetes environments, and explore the concept of the Secretless pattern. Find out how to achieve full auditing and control for security teams while balancing the needs of developers and DevOps engineers in securing access to resources and enforcing policies in DevOps pipelines.