Главная
Study mode:
on
1
Intro
2
Briefly about Cilium...
3
Cilium: Identity Aware
4
Components of Identity?
5
Our need for SPIFFE
6
Integration Challenges • Cilium deploys Envoy in Node-Singleton Model Does not use side-car model Advantages, Disadvantages?
7
Ensuring appropriate API access spiff
8
Upgrading to secure connections • TLS origination and termination support
9
Other perks of using SPIFFE • Integrated certificate management solution Integrates well with existing CA providers Nested SPIRE allows hard-isolation of resources • Readily integrates with Vault for…
10
To sum up...
11
Credits
12
References
Description:
Explore the integration of SPIFFE identity with Cilium CNI in this informative conference talk from KubeCon + CloudNativeCon Europe 2022. Dive into the world of identity-based authentication and authorization in cloud-native environments. Learn about the advantages of SPIFFE's standard-based identity solution and how it complements Cilium's eBPF-powered network policy enforcement. Discover design considerations, challenges, and extended use cases for integrating SPIFFE with Cilium. Compare identity marking and transport solutions, including k8s-labels, TCP Fast-Open, and certificates. Gain insights into the unique aspects of Cilium's integration compared to Calico's approach. Explore topics such as Envoy deployment models, API access security, TLS support, and the benefits of using SPIFFE for certificate management and integration with existing CA providers and Vault for secrets management.

Working Out SPIFFE Identity for Cilium CNI

CNCF [Cloud Native Computing Foundation]
Add to list