SPIRE: Intro & Deep Dive Into Windows Support

on YouTube ↗34m

" summary

SPIRE implements SPIFFE identities on Windows as an experimental feature with both server and agent runnable on Windows (tested on Windows Server 2022 and Windows 11). It adds a Windows workload attestor and adapts the Docker attestor; local IPC uses named pipes instead of Unix sockets. Demo creates three registration entries, issues short‑lived SVIDs (demo TTL 60s), shows successful mTLS between services, and then intentionally breaks identity by updating selectors to prove revocation and rotation work. Build uses mingw64/make; demo repo is available.

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 1:45SPIFFE Overview
3. 7:05SPIRE Architecture
4. 9:17SPIRE Adoption
5. 13:13SPIRE on Windows Development
6. 13:48SPIRE on Windows Demo!
7. 27:31Join our community

" related talks

• 37mSPIFFE Deep DiveNeel Shah, Andrew Jessup, Emiliano Berenbaum · KubeCon + CloudNativeCon Europe 2018
• 33mSPIFFE and SPIRE: Architecture Deep DiveEvan Gilman, Andrew Harding · Production Identity Day: SPIFFE + SPIRE 2020
• 41mSPIFFE Project IntroAndrew Jessup, Emiliano Berenbaum · KubeCon + CloudNativeCon Europe 2018
• 30mIntro: SPIFFEEmiliano Bernbaum, Scott Emmons · KubeCon + CloudNativeCon Europe 2019
• 34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIREEvan Gilman · KubeCon + CloudNativeCon Europe 2019
• 26mSPIFFE at GitHubEric Lee · Production Identity Day: SPIFFE + SPIRE 2020
• 36mFederated Identity for Distributed Systems: Understanding SPIFFELeon Krass · ContainerDays Hamburg 2026
• 32mProduction Workload Identity with SPIRERyan Turner · KubeCon + CloudNativeCon North America 2021