Christian Posta is Field CTO at solo.io, an author, and expert in building scalable, resilient distributed systems. He writes on microservices, cloud-native architectures, DevOps, and service meshes, contributing to open-source projects like Kubernetes, Envoy, and Istio.
25 articles from this blog
A technical guide implementing OAuth 2.1 authorization for an MCP server, part two of a three-part series with practical code examples.
A technical guide to implementing the latest MCP Authorization specification for securing HTTP-based MCP servers, starting with building a compliant server using FastAPI.
Explores using SPIFFE workload identity for AI agents, highlighting technical gaps in current Kubernetes implementations for non-deterministic agent behavior.
AI agents' autonomous and probabilistic nature forces stricter security and authorization models, breaking traditional microservice assumptions.
Explores the challenges of delegating authority to AI agents due to fragmented user identities and ungoverned authorization systems in enterprises.
