logo
Dates

Author


Conferences

Tags

Sort by:  

Authors: Eli Nesterov
2022-10-25

tldr - powered by Generative AI

The presentation discusses the keys to a successful SPIRE rollout in production, based on learnings from multiple successful production deployments and commonly asked questions in SPIFFE/SPIRE Slack channels.
  • Understand trust boundaries and how they map into SPIFFE trust domains
  • Consider how this mapping affects your PKI and where to store keys
  • Federation between independent SPIFFE systems can affect performance and bundle size
  • Investment into building your own system depends on how much you trust it
  • Consider architecture patterns, deployment models, logging, monitoring, security, availability, and performance topics when moving from proof of concept to production