The microservices security workshop is a deep dive into building secure microservices. Expect lots of labs and hands-on exercises running sample applications. 

While the lessons from this workshop are broadly applicable across stacks, I will use SpringBoot to explain concepts. The goal of this workshop is to explain the protocols (rather than deep diving on any Spring-specific features). With that said, the samples will be rooted in SpringBoot. 

The workshop features design session/discussions where attendees can whiteboard some security design.

Implementing microservices in the real world requires solving some difficult problems. Such as:

• How can a microservices be tested without having to deploy all it's dependencies? 
• How an microservice be deployed without having to regression test every client of the microservice?
• How can microservices be secured?
• How can a microservices securely access credentials / certificates? 
• Where should a microservice store it's configuration? 
• How can configuration of a microservice be changed without having to restart the microservice?
• How can a microservice compose a collection of other microservices?
• How can a microservice fail gracefully?
• Where should a microservice store it's state?
• What should a CD pipeline for a microservice look like?
• How can a microservice be deployed to Kuberenetes?
• How can a microservice be deployed to Cloud Foundry?
• Does a developer run all the microservices they are working on thier laptop during development?

Frameworks such as Spring Cloud, and Platforms like Kuberenets and Cloud Foundry provide highly effective and opinionated ways to implement microservices. This workshop provides a collection of sample applications that illustrate how to solve the above problems. For each sample application we will start with a short deck that explains the architecture of the application, the microservice patterns used, this will be followed by a hands on lab where attendees will get the application running on their laptops and learn how to use the frameworks. The following technologies will be covered:

• Spring Cloud Config 
• Spring Cloud Contract
• Spring Cloud Config 
• Spring Cloud Pipelines
• Micrometer metrics 
• Netflix OSS (Hystrix, Eureka)
• Service Meshes with Envoy & Itsio 
• Security with OAuth2 / OpenId Connect and Spring Security 
• Service Composition with Reactive WebClient 
• Spring Security 
• Cloud Foundry 
• Kubernetes 

Our goal is not in-depth coverage of each framework, rather it's to weave the story of how all these frameworks, and platfroms come together and help you understand how to get rapidly going on your microservices journey.

The microservices security workshop is a deep dive into building secure microservices. Expect lots of labs and hands-on exercises running sample applications. 

While the lessons from this workshop are broadly applicable across stacks, I will use SpringBoot to explain concepts. The goal of this workshop is to explain the protocols (rather than deep diving on any Spring-specific features). With that said, the samples will be rooted in SpringBoot. 

The workshop features design session/discussions where attendees can whiteboard some security design.