Evan Gilman
where else to find them
what they talk about
where they keep going back
- KubeCon + CloudNativeCon North America4 editions2017–2022
all 6 in the filters
on a stage with
all 7 in the filters
who talks about the same things
- Andrew Jessup6 talks
- Daniel Feldman8 talks
- Andrew Harding5 talks
- Andres Vega16 talks
- Ryan Turner7 talks
- Emiliano Bernbaum3 talks
| title | conference | date |
|---|---|---|
| Don't Mind the Gap: Securely Accessing Cloud Resources From Anywhere With SPIFFE/SPIRE | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Claim: replace long‑lived cloud API keys by exchanging short‑lived SPIFFE SVIDs for cloud creds using OIDC. Implementation uses a SPIRE server + agent… | ||
| What is Zero Trust? What ISN’T Zero Trust? Let’s Make Sense of This! | RSAC 2022 | 2022-06-06 |
Moderator:
Jason Garbis, Chief Product Officer, Appgate
Panelists:
Amanda Berlin, Lead Incident Detection Engineer, Blumira
Jerry Chapman, Engineering Fellow… | ||
| Keynote: Welcome & State of the Union | Production Identity Day: SPIFFE + SPIRE North America 2021 | 2021-10-11 |
Project updates report concrete growth: SPIRE 1.0 and 11 releases in the last year with a roughly five‑week release cadence, contributors up ~50%, and 30% of… | ||
| Closing Remarks | Production Identity Day: SPIFFE + SPIRE North America 2021 | 2021-10-11 |
Closing notes list concrete follow ups: pick up a spiffy book at the HPE booth (PDF is free online), nominations are open for the SPIFFE steering committee… | ||
| SPIFFE Project Updates | Production Identity Day: SPIFFE + SPIRE North America 2021 | 2021-10-11 |
Year-long work focuses on stabilization across SPIFFE and SPIRE with concrete governance and engineering changes: renewed TSC charter that codifies mission and… | ||
| SPIFFE: In Theory and in Practice | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
SPIFFE provides a platform-agnostic workload identity: workloads get cryptographically verifiable SVIDs (supported types X.509 and JWT SVIDs) via a node-local… | ||
| SPIFFE Project Updates | Production Identity Day: SPIFFE + SPIRE 2020 | 2020-11-17 |
Project governance gets concrete: a rewritten TSC charter defines responsibilities and will trigger a composition review; two new working groups (sig community… | ||
| SPIFFE and SPIRE: Architecture Deep Dive | Production Identity Day: SPIFFE + SPIRE 2020 | 2020-11-17 |
SPIRE implements the SPIFFE Workload API with an agent/server model: agents cache SVIDs and bundles, servers hold X.509 and JWT authorities and offload private… | ||
| Securing Communication Between Meshes and Beyond with SPIFFE Federation | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Demonstrates SPIFFE federation enabling cross-domain authentication between an Istio mesh and a SPIRE-managed VM fleet: it exchanges authority public keys via… | ||
| Zero Trust Service Mesh with Calico, SPIRE, and Envoy | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
Builds a Zero Trust mesh by pairing Envoy sidecars with SPIRE-issued identities and Calico policy. SPIRE uses the Kubernetes workload attestor, exposes certs… | ||
| Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
SPIFFE supplies a platform-agnostic identity format and SPIRE is its Go implementation that issues short‑lived x.509 or JWT identities via a local workload API… | ||
| Introducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I] | KubeCon + CloudNativeCon North America 2017 | 2017-12-06 |
Defines a standardized workload identity format (SPIFFE), a node/workload attestation flow, and a local workload API that issues short‑lived X.509 SVIDs… | ||
| Clarifying Zero Trust: The Model, the Philosophy, the Ethos | LISA17 | 2017-10-29 |
PagerDuty documents building a cross‑region access control system that replaces VPN tunnels with a full opportunistic IPSec mesh so mutual auth and… | ||
| nothing matches | ||