Loading…
Attending this event?
Seattle, WA
December 10–13, 2018
Click Here for More Information & Registration
View Venue Map
View analytic
Wednesday, December 12 • 4:30pm - 5:05pm
Navigating Workload Identity in Kubernetes - Michael Danese, Google & Spike Curtis, Tigera

Sign up or log in to save this to your schedule and see who's attending!

Feedback form is now closed.
If your application accepts network connections, you need to know with confidence who is on the other end. If your application is composed of many microservices, it pays to take a managed approach to this identity question.

Identity is a foundational but complex component of secure systems. This talk provides a conceptual overview of how workload identity is established with a focus on practical application. In this talk Mike and Spike will compare and contrast some different options for establishing identity in your Kubernetes cluster.

We will explore recent work in the Kubernetes Container Identity working group and discuss patterns and pitfalls in case studies like Istio and SPIFFE. You'll learn how to decide between these different approaches and how to go about integrating them into your cluster and your application.

Speakers
avatar for Spike Curtis

Spike Curtis

Senior Software Engineer, Tigera
Spike Curtis is a software developer at Tigera. He co-leads the Istio Security Working Group and is a contributing author of SPIFFE specifications.  He is also a core developer for Calico.
avatar for Michael Danese

Michael Danese

Software Engineer, Google
Mike is a software engineer at Google. He has worked on Kubernetes and GKE for over three years and is currently the lead of the GKE Identity Team. He is a chair of the Kubernetes Auth Special Interest Group and an active member in the Container Identity Working Group. He develops... Read More →



Wednesday December 12, 2018 4:30pm - 5:05pm
Ballroom 6B