Look Who it Was Random video

Deep Dive: SPIFFE - Emiliano Bernbaum & Andrew Harding, Scytale

426 views · Published 16 December 2018 · 28:51 · Indexed 20 September 2026

Channel: CNCF [Cloud Native Computing Foundation] · 2018 · Film & Animation

Watch on YouTube

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Deep Dive: SPIFFE - Emiliano Bernbaum & Andrew Harding, Scytale 

SPIFFE (Secure Production Infrastructure for Everyone) and SPIRE are two of the newer projects to join the CNCF. These projects build on designs first championed at Google, Twitter and elsewhere to provide robust authentication and trust between disparate micro-services in heterogeneous operating environments. This talk will expand on concepts introduced during the SPIFFE 101 session to explore in detail how SPIRE performs attestation to workloads in diverse infrastructure and middleware settings, how it leans on different secrets storage backends and how PKI material is automatically delivered to a node and workload. The talk also will cover how these capabilities can be extended and customized through SPIRE’s plugin framework. In this session, we will demo two (2) things, specifically: 1) How SPIFFE can be used to secure communication between two workloads running on different Kubernetes clusters running on different clouds. For a twist, we'll demo this for both direct connections as well as those going through load balancers. 2) How to federate SPIRE deployments in different trust domains. This demo will also showcase how we federate JSON Web Tokens (JWT) to facilitate cross-cloud communication.  

To learn more:  https://sched.co/HtKa

More from this channel