Keynote: Introduction to SPIFFE
Talkat Production Identity Day: SPIFFE + SPIRE 2020 · on Tuesday, 2020-11-17· at 11:06· Virtual, Virtual·
summary
Demo shows SPIFFE IDs as simple strings embedded in tokens and certificates and proves end-to-end that they can bootstrap trust across clouds. A Cloud Run service verifies Google IAM ID tokens, looks up a registry mapping service account IDs, and mints a JWT-SVID minting service (custom JOSE, in-memory registry). Consumers send that token to an addition backend which delegates authz to Open Policy Agent policy checks that validate the SVID and allow the request — the serverless demo functions as described and code is headed to GitHub.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:09What Is a Service Identity
- 5:26Secure Verifiable Identity Document
- 10:58How Do I Get the Certificates
- 11:54Open Policy Agent
- 16:13Takeaways
- 17:31How Do You Know that Iem Token Can Receive the Token for the Off Calculator
- 19:44Architecture Diagram
- 22:23How Is Multi-Cluster and Federation Supported in this Kind of Use Case
- 23:57Can We Use an App in One Cloud To Talk to an App in another Cloud Using Spiffy as a Single Trust Provider
related talks
36mFederated Identity for Distributed Systems: Understanding SPIFFE
32mFive Things You Didn’t Know You Could Do with SPIFFE and SPIRE
11mKeynote: Creating with Authenticity & Humility: A SPIFFE Origin Story
40mMulti-Cloud Workload Identity With SPIFFE
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]
36mSPIFFE: In Theory and in Practice
28mCan I Trust You? Service-to-Service Identity with SPIFFE
41mSPIFFE Project Intro