Intro: SPIFFE

on YouTube ↗30m

" summary

Defines concrete identity artifacts and a running system: a SPIFFE ID modeled as a URI, x.509 and JWT SVIDs for proof, and a local workload API socket that hands certificates or JWTs after pluggable attestation. SPIRE implements server + per-node agent, supports Kubernetes integration via an envoy SDS path, federation and nested topologies, and plugins like AWS Secrets Manager, telemetry, and a Kubernetes bundle notifier. Recent momentum: spire 0.8: 120+ PRs, 3 releases, 18 contributors, 13 major features, released with those features working.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 3:16SPIFFE Verifiable Document
3. 4:33SPIFFE Workload API
4. 5:36SPIFFE Federation API
5. 8:03SPIRE Server
6. 8:46SPIRE Walkthrough
7. 17:00SIG-SPEC Update
8. 19:17Nested SPIRE

" related talks

• 41mSPIFFE Project IntroAndrew Jessup, Emiliano Berenbaum · KubeCon + CloudNativeCon Europe 2018
• 33mSPIFFE and SPIRE: Architecture Deep DiveEvan Gilman, Andrew Harding · Production Identity Day: SPIFFE + SPIRE 2020
• 36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]Evan Gilman · KubeCon + CloudNativeCon North America 2017
• 36mFederated Identity for Distributed Systems: Understanding SPIFFELeon Krass · ContainerDays Hamburg 2026
• 26mSPIFFE at GitHubEric Lee · Production Identity Day: SPIFFE + SPIRE 2020
• 49mReal World SPIFFE Scenarios and OutcomesAndres Vega, Frederick Kautz · KubeCon + CloudNativeCon Europe 2022
• 33mUniform Workload Identity Everywhere: SPIRE Integrations and ExtensibilityRyan Turner · KubeCon + CloudNativeCon North America 2020 Virtual
• 36mSPIFFE: In Theory and in PracticeEvan Gilman, Andrew Harding · KubeCon + CloudNativeCon North America 2021