Production Workload Identity with SPIRE
Explore the implementation of secure workload identity in production environments using SPIRE in this conference talk from KubeCon + CloudNativeCon Europe 2022. Discover how SPIRE, a CNCF Incubating project, provides short-lived, automatically rotated identities for workloads based on the SPIFFE specification. Learn about the core design of SPIRE and its application in cloud-native architectures to enhance defense-in-depth. Gain insights into the journey of service organizations, from three-tier architectures to microservices, and understand the fundamentals of SPIFFE, including workload identity description, SPIFFE ID anatomy, and X.509-SVID structure. Delve into SPIRE's architecture, registration process, and workload attestation. Conclude with an overview of upcoming features that expand SPIRE's capabilities as a production identity platform and discover resources for further learning about SPIFFE and SPIRE.