Explore recommended practices for implementing SPIFFE/SPIRE at scale in this 25-minute conference talk from KubeCon + CloudNativeCon Europe 2021. Dive into the concept of a "production identity control plane" and learn how to establish trusted bi-directional communication in distributed systems. Discover solutions for common identity challenges, including credential rotation, federation with other systems, and policy implementation. Gain insights on leveraging the identity control plane for service-to-service communication in complex, heterogeneous environments. Examine topics such as PKI/Auth pain points, SPIFFE and SPIRE components, trust domains, security boundaries, deployment strategies, and considerations for scaling your identity infrastructure.
The Production Identity Control Plane - Recommended Practices for SPIFFE-SPIRE at Scale