Loading…
May 2-4, 2018 - Copenhagen, Denmark
Click Here For Information & Registration
Thursday, May 3 • 14:00 - 14:35
SPIFFE Deep Dive - Neel Shah, VMware; Andrew Jessup & Emiliano Berenbaum, Scytale, Inc., (Intermediate Skill Level) (Slides Attached)

Sign up or log in to save this to your schedule and see who's attending!

Tweet Share
Feedback form is now closed.
SPIFFE (Secure Production Infrastructure for Everyone) and SPIRE are two of the newest projects to join the CNCF. These projects build on designs first championed at Google, Twitter and elsewhere to provide robust authentication and trust between disparate micro-services in heterogeneous operating environments.

This talk will expand on concepts introduced during the SPIFFE Intro Session to explore in detail how SPIRE performs attestation to workloads in diverse infrastructure and middleware settings, how it leans on different secrets storage backends and how PKI material is automatically delivered to a node and workload. The talk also will cover how these capabilities can be extended and customized through SPIRE’s plugin framework.

In this session, we will demo a Kerberos Node-Attestor for SPIRE in a Kubernetes cluster using the pluggable SPIRE model.  Using Project Lightwave—an open source multi-tenanted and enterprise-grade Kerberized identity platform—we will demonstrate how enterprise identity stacks can be used to identify and trust the next generation of cloud-native workloads.
Speakers
avatar for Emiliano Berenbaum

Emiliano Berenbaum

CTO, Scytale
Before co-founding Scytale, Emiliano was a principal engineer at Splunk, where he helped lead the engineering effort to convert Splunk into an entirely SaaS offering and platform. Previously, he was Okta’s founding employee, where he worked on all aspects of the SaaS offering, culminating... Read More →
avatar for Andrew Jessup

Andrew Jessup

Recovering Engineer, Scytale
Recovering Engineer at Scytale
avatar for Neel Shah

Neel Shah

Member of Technical Staff, VMware
Neel Shah is a software engineer in the Cloud Native Group at VMware. At VMware, he has implemented secure dynamic DNS update with Kerberos GSS-API, a multi-tenanted, plugable certificate authority, and actively works on an enterprise grade Kubernetes as a service solution. Outside... Read More →

cncf eu spiffe deep dive kerberos attestor pdf
Thursday May 3, 2018 14:00 - 14:35
B4-M2+4
  Deep Dives for Projects/SIGs/Working Groups, Deep Dive