A Multi-Cluster, Multi-Cloud Infrastructure with GitOps at CERN
Explore CERN's multi-cluster, multi-cloud infrastructure using GitOps. Learn about efficient management of distributed systems, cloud-native technologies, and standardized deployments across on-premises and public cloud environments.
A Day in the Life of the GitOps Platform Team
Explore State Farm's GitOps journey, scaling challenges, and continuous improvement strategies across cloud platforms, with insights on team dynamics and overcoming obstacles.
Cloud Native Supply Chain Security with Tekton and Sigstore
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Securing Edge Systems with TPM 2.0 and SPIRE
Explore TPM 2.0 and SPIRE for secure edge and hybrid systems. Learn about threat models, CI systems, and TPM policies. Includes demo and future work discussion.
Secure, Efficient API Plane Traversal for Compute Resources on Exascale Super Computers Using SPIRE
Explore SPIRE's role in securing machine-to-machine communication on Cray Shasta exascale supercomputers. Learn about critical communication requirements and why SPIRE is an ideal solution for this high-performance computing environment.
Managing Kubernetes Webhooks with SPIRE
Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.
Working Out SPIFFE Identity for Cilium CNI
Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.
Supporting Confidential Workloads with SPIRE
Explore integrating confidential computing with SPIRE for enhanced workload protection. Learn challenges, benefits, and implementation strategies for secure attestation and trusted execution environments.
SPIRE Project Updates
Discover the latest developments in the SPIRE project with Ryan Turner from Uber Technologies, exploring advancements in cloud-native identity and access management.
Providing Identities to Serverless Workloads
Explore secure identity management for serverless workloads using SPIRE's SVIDStore plugin, enabling external storage and consumption of identities in environments where agent installation is not feasible.
Integrating SPIRE and Istio
Explore the integration of SPIRE identities with Istio service mesh, enhancing microservices deployment in Kubernetes with improved security and identity management.
Cloud & Cloud Native Identity and Access Management - Challenges & Opportunities
Explore challenges and solutions for identity and access management in hybrid cloud native environments, focusing on achieving continuous identity assurance and zero trust.
The Trials and Success of Adopting Envoy at Tinder
Explore Tinder's journey in adopting Envoy for their Kubernetes infrastructure, covering challenges, custom solutions, and best practices for implementing a robust service mesh.
The Evolution of Twitter's Edge
Explore Twitter's edge architecture evolution, focusing on Envoy's role in handling billions of daily requests, its benefits, and future developments in scalability and performance.
Speeding up Istio - Our Journey Implementing Delta xDS
Explore Istio's journey implementing delta xDS to optimize configuration distribution, addressing challenges and showcasing performance improvements in service mesh environments.
Using Envoy as an Egress Proxy for TLS Enabled Traffic
Explore Envoy as an egress proxy for TLS traffic, combining it with SSLproxy for enhanced security and traffic management in modern cloud-native applications accessing external services.
Lessons Learned - Four Years with Emissary-ingress and Envoy
Explore insights from four years of Emissary-ingress development, including challenges, lessons learned, and best practices for leveraging Envoy in Kubernetes environments.
HTTP/3 in Envoy - End to End Acceleration
Explore HTTP/3 in Envoy: features, integration, best practices for testing and deployment. Learn about QUIC, O-RTT handshake, and upcoming Envoy QUIC GA.
Health Checks - A Boon or a Curse
Explore health checks in distributed systems, their benefits in Envoy, challenges at scale, and mitigation strategies for reliable service operation.
Dedicated Infrastructure in a Multitenant World
Explore Adobe's innovative solutions for dedicated infrastructure in multitenant Kubernetes, using Envoy for secure networking and automated provisioning with Terraform and operators.
What, Why and How of Federated Machine Learning – Implementation Using FATE, KubeFATE, and FATE-Operator for Kubeflow
Explore federated machine learning's principles, use-cases, and implementation using FATE and KubeFATE. Learn about challenges, opportunities, and integration with Kubeflow for real-world applications.