Hardware Backed Security For Multitenancy at the Edge with SPIFFE & PAR...
Talkat Cloud Native Security Day North America 2020 · on Tuesday, 2020-11-17· at 16:00· Virtual , VIrtual·
summary
Demo shows Parsec + SPIFFE/SPIRE integrated so hardware-backed keys are partitioned by workload identity. Two client processes run as Unix UIDs 1002 and 1003, each receives a SPIFFE SVID job token from the SPIRE agent, Parsec verifies it and maps it to a namespace. Client A creates key named "toto" with Parsec keystore partitioning; Client B cannot list or destroy that key. Key destroy succeeds in Client A, proving isolation works end to end.
AI-written summary · about
chapters (7)
related talks
33mSPIFFE and SPIRE: Architecture Deep Dive
34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE
31mCommunity Integrations and other Works in Progress
37mSPIFFE Deep Dive
41mSPIFFE Project Intro
10mParsec
49mReal World SPIFFE Scenarios and Outcomes
18mSecuring Edge Systems with TPM 2.0 and SPIRE