AI-Driven DevSecOps: Protecting Kubernetes Microservices with the Kong Ingress Controller

Microservice environments are made up of hundreds (or thousands) of small, independently deployable services, which significantly increases the potential attack surface. Combined with AI coding agents rapidly writing and deploying new services, security teams must implement centralized ingress and egress points to prevent unauthorized access to data.

Join SANS Faculty Fellow Eric Johnson for Part 2 of the AI-Driven DevSecOps series. In this webcast, Eric will install and configure a Kubernetes AI assistant called kubectl-ai to help manage Kubernetes clusters and resources. Using the Kubernetes AI assistant, attendees will discover a microservice API that is insecurely exposed to the Internet. Live demonstrations will show how to install the Kubernetes Gateway API and Kong Kubernetes Ingress Controller (KIC). Then, learn how to configure an external Kong Gateway proxy to protect inbound traffic using the JWT authorizer plugin.

This webcast supports content and knowledge from SEC540: Cloud Native Security and DevSecOps Automation. To learn more about this course and explore upcoming sessions, Click Here.

Watch the rest of this series:

• AI Driven DevSecOps Part 1: Securing Coding Agents with Model Context Protocol (MCP)
• AI Driven DevSecOps Part 3: Agentic Code Review in GitLab & GitHub
• AI Driven DevSecOps Part 4: Observing Microservices with OpenTelemetry and Grafana
• AI Driven DevSecOps Part 5: Zero-Downtime Deployments with Kubernetes