AI agents are starting to perform real operational tasks across Cloud Native environments including Kubernetes,CI/CD,observability,security and platform workflows. But many agents still rely on shared tokens, broad credentials or inherited human permissions.This creates risks around over-authorization, invisible delegation,weak auditability and uncontrolled access.
This session presents a Cloud Native security pattern for securing agentic AI with non-human identity and an agent gateway.It explores how Kubernetes service accounts,SPIFFE/SPIRE,Open Policy Agent,Kyverno,GitOps workflows,short-lived credentials and audit logs can help verify agent identity,route agent actions through a controlled gateway,enforce least privilege,bind every tool or API call to policy and require approval for risky operations.
Attendees will leave with a practical blueprint for moving from trusted agents to verified agents without giving them standing access to Cloud Native infrastructure.