Connecting Dots: Unified Hybrid Multi-Cluster Auth Experience With SPIFFE and Cluster Inventory API

on YouTube ↗31m

" summary

Shows a demoed solution that uses OpenID, SPIFFE/SPIRE, and the Multi-Cluster SIG’s Cluster Inventory API, integrated with OCM and KubeFleet, to centralize Kubernetes identities and credentials across hybrid multi-cluster environments. Explains how this approach replaces per-cluster service account management to reduce credential sprawl, simplify operations, and improve security for teams and multi-cluster apps like Argo and Kueue.

AI-written summary · about

" related talks

• 29mBridging the Great Divide: SPIFFE/SPIRE for Cross-Cluster AuthenticationAndrew Harding · KubeCon + CloudNativeCon North America 2021
• 43mSharing is NOT Caring: Stop Sharing Your Kubernetes Cluster CredentialsLeigh Capili, Nigel Brown · ContainerCon @ Open Source Summit North America 2022
• 27mBridging Trust Between Multi-Cluster MeshesLukonde Mwila, Ovidiu Valeanu · Istio Day North America 2023
• 33mPortable, Universal Single Sign-On for Your ClustersMiguel Martínez · KubeCon + CloudNativeCon Europe 2019
• 21mSecure ArgoCD Multi-Cluster Management Across Clouds Without Static TokensMarc Boorshtein · ArgoCon NA 2024
• 26mUntangling the Multi-Cloud Identity and Access Problem With SPIFFE TornjakB Lum, M Sabath · KubeCon + CloudNativeCon North America 2021
• 34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIREEvan Gilman · KubeCon + CloudNativeCon Europe 2019
• 01h 59mBuilding Secure Kubernetes Clusters with Identity ManagementMarc Boorshtein · All Things Open 2020