Community Integrations and other Works in Progress
Talkat Production Identity Day: SPIFFE + SPIRE 2020 · on Tuesday, 2020-11-17· at 12:05· Virtual, Virtual·
summary
SPIRE is shown replacing Istio’s identity issuance by rerouting the proxy sidecar to the SPIRE node agent over a Unix domain socket and merging small SPIRE patches into upstream so the PoC issues Istio-compatible SVIDs and works end-to-end. A transitive identity working group publishes a delegated authentication token proposal and prototypes extensions to the SPIFFE spec after collecting real-world case studies. ByteDance prototypes SCT-embedded X.509 SVIDs with an internal CT log for audible SVID issuance. Parsec integration is mostly complete with a Rust SPIFFE client and upstreaming underway.
AI-written summary · about
chapters (6)
- 0:00Community integrations
- 11:03transitive identity
- 15:27transitive identity working group
- 20:56certificate transparency
- 24:30certificate example
- 26:04Parsec
related talks
30mIntro: SPIFFE
41mSPIFFE Project Intro
49mReal World SPIFFE Scenarios and Outcomes
34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE
36mFederated Identity for Distributed Systems: Understanding SPIFFE
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]
32mProduction Workload Identity with SPIRE
33mUniform Workload Identity Everywhere: SPIRE Integrations and Extensibility