~/talk

SPIFFE Deep Dive

on YouTube 37m
Talkat KubeCon + CloudNativeCon Europe 2018 · 2018-05-02..05-04· B4-M2+4· [security, kubernetes]

speakers

name:Andrew Jessup
links:none on file
name:Emiliano Berenbaum
links:none on file
name:Neel Shah
x:shahneel2409

resources

video:https://youtu.be/sXwFB34BBrM
slides:none on file

summary

Explains how SPIRE implements SPIFFE with a gRPC workload API 1.0, pluggable server/agent plugins, and a demoed Kerberos node-attestor that joins a host to Lightwave KDC, validates service tickets, and returns X.509 SVIDs to workloads. Shows key manager generating CSRs, CA signing, and a local cache of attestation policies backed by a SQLite datastore. Demo proves automated node attestation, registration of a UNIX workload selector (UID 1002), and successful certificate issuance to nginx via the workload API.

AI-written summary · about

chapters (5)

  1. 0:00Start
  2. 1:38SVID: SPIFFE Verifiable Identity Document
  3. 2:35Workload API
  4. 6:02SPIRE Server Plugins
  5. 8:24SPIRE Agent Plugins

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.