SPIFFE Project Intro
summary
Overview of the SPIFFE spec and the SPIRE implementation: SPIRE runs as a SPIRE agent/server pair with a node‑local workload API exposed over a UNIX domain socket, issues short‑lived x.509 SVIDs (verifiable identity documents), and attests nodes via plugs like the EC2 instance identity document; key material is generated on‑node and never leaves it. Use cases include secure introduction to secret stores, ambassador proxies for service identity, and multi‑cloud federation. SPIFFE spec defines the ID URI/trust domain model.
AI-written summary · about
chapters (5)
- 0:00Start
- 7:18Model 2: Platform mediated identity
- 14:12SPIFFE Workload API
- 21:22Workload attestation
- 29:18Things we didn't talk about
related talks
30mIntro: SPIFFE
33mSPIFFE and SPIRE: Architecture Deep Dive
26mSPIFFE at GitHub
36mSPIFFE: In Theory and in Practice
49mReal World SPIFFE Scenarios and Outcomes
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]
34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE
36mFederated Identity for Distributed Systems: Understanding SPIFFE