Record · corpus.blog/posts/01a0821b-cc48-7000-8f07-b6952b656af2

Secure Workload Identity with SPIRE and OIDC: A Guide for Kubernetes and Istio Users

Indeed · published 3 July 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at engineering.indeedblog.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 48
Words captured: 3,188

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://spiffe.io/docs/latest/spire-about/

spiffe.io

https://spiffe.io/

spiffe.io

https://oauth.net/2/

oauth.net

https://openid.net/

openid.net

https://github.com/spiffe/spiffe/blob/main/standards/X509-SVID.md

github.com

https://jwt.io/introduction

jwt.io

https://www.cncf.io/projects/spire/

cncf.io

https://www.cncf.io/

cncf.io

https://spiffe.io/docs/latest/spire-about/case-studies/

spiffe.io

https://docs.confluent.io/cloud/current/access-management/authenticate/oauth/overview.html

docs.confluent.io

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers.html

docs.aws.amazon.com

https://istio.io/latest/docs/ops/integrations/spire/

istio.io

https://github.com/istio/istio/issues/43105

github.com

https://github.com/istio/istio/blob/c8d5b492e7d6305b1da503a39025c468378c22a0/pkg/security/security.go

github.com

https://www.envoyproxy.io/docs/envoy/latest/configuration/security/secret

envoyproxy.io

https://spiffe.io/docs/latest/planning/scaling_spire/

spiffe.io

https://kubernetes.io/docs/setup/best-practices/cluster-large/

kubernetes.io

https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

kubernetes.io

https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/

kubernetes.io

https://kubernetes.io/docs/concepts/workloads/autoscaling/

kubernetes.io

https://github.com/spiffe/spiffe/blob/main/standards/JWT-SVID.md

github.com

https://github.com/spiffe/spiffe/blob/main/standards/SPIFFE.md

github.com

https://github.com/spiffe/spire/blob/v1.9.5/doc/plugin_server_keymanager_memory.md

github.com

https://spiffe.io/docs/latest/deploying/configuring/

spiffe.io

https://github.com/spiffe/spire/issues/4622

github.com

https://github.com/spiffe/spire/blob/v1.9.5/doc/plugin_server_keymanager_disk.md

github.com

https://github.com/spiffe/spire/issues/4375

github.com

https://github.com/spiffe/spire/blob/v1.9.5/doc/plugin_server_keymanager_aws_kms.md

github.com

https://auth0.com/docs/secure/tokens/json-web-tokens/json-web-key-sets

auth0.com

https://github.com/spiffe/spire/blob/main/support/oidc-discovery-provider/README.md

github.com

https://spiffe.io/docs/latest/planning/extending/

spiffe.io

https://github.com/spiffe/spire-plugin-sdk/blob/a2e5ba68e76045c0ca332264af935ea8c3a59f99/proto/spire/plugin/server/credentialcomposer/v1/credentialcomposer.proto

github.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html

docs.aws.amazon.com

https://spiffe.io/docs/latest/deploying/svids/

spiffe.io

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html

docs.aws.amazon.com

https://github.com/spiffe/spire/issues/4699

github.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html

docs.aws.amazon.com

https://docs.confluent.io/cloud/current/access-management/authenticate/oauth/identity-pools.html

docs.confluent.io

https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html

docs.aws.amazon.com

https://docs.confluent.io/cloud/current/access-management/authenticate/oauth/best-practices.html

docs.confluent.io

https://aws.amazon.com/blogs/security/how-to-use-trust-policies-with-iam-roles/

aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html

docs.aws.amazon.com

https://docs.aws.amazon.com/sdkref/latest/guide/standardized-credentials.html

docs.aws.amazon.com

https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html

docs.aws.amazon.com

https://developer.confluent.io/courses/security/authentication-ssl-and-sasl-ssl/?_gl=1*1qzrpcn*_ga*MTMzNzU2OTM5Ni4xNzA5MDc4OTAy*_ga_D2D3EGKSGD*MTcxNjU4MDQ0My4xNy4wLjE3MTY1ODA0NDMuNjAuMC4w&_ga=2.242659522.1176908876.1716467578-1337569396.1709078902

developer.confluent.io

https://github.com/spiffe/spire/issues/4982

github.com

https://github.com/spiffe/spire/pull/5115

github.com