Loading…
Timezone
Virtual Event
November 17–November 20, 2020
Learn More and Register to Attend This Event

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon North America 2020 - Virtual to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Eastern Standard Time (UTC–05:00). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.
Back To Schedule
Friday, November 20 • 5:05pm - 5:40pm
The Production Identity Control Plane: Recommended Practices for SPIFFE/SPIRE at Scale - Andres Vega, VMware

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Video Stream


“Production identity” is a common set of problems facing distributed systems.  Many systems spend significant time and effort to establish trusted bi-directional communication between parts of the system.  Often these are lacking in many respects: not rooted in sound identity “bedrock”, no ability to rotate credentials, no federation with other systems, and few policy opportunities that are valued and critical for organizations.  SPIFFE and SPIRE aim to solve these problems in a common way that can be leveraged across many different types of systems -- not just containerized or cloud native.

Recently, we’ve also been calling SPIFFE/SPIRE an “identity control plane”.

In this talk, we will leverage the identity control plane to demonstrate recommended practices and considerations for doing identity distribution and attestation for service to service communication in complex and heterogeneous environments.
Speakers
avatar for Andres Vega

Andres Vega

Product Line Manager, VMware
Andres Vega is Product Line Manager for Security in VMware Tanzu. In his role, he helps organizations securely build large-scale distributed software solutions across multi-cloud environments. The focus of his career has been on the intersection of cloud infrastructure, cybersecurity... Read More →

Text Transcript ZJGA 7276 txt
Friday November 20, 2020 5:05pm - 5:40pm EST
Intrado Virtual Event Platform
  Maintainer Track Sessions