CloudNativeSecurityCon North America 2024

Today, many teams rely on a service mesh implementation to provide a secure identity model for their environments. But adopting service meshes is a challenging feat, and so many teams are given autonomy to choose their own mesh and, in some cases, completely forgo one. This is great for technical heterogeneity, but it can contribute further to convolution and complexity in the larger software architecture. As the size of this "web of complexity" grows, organizations become increasingly dependent on the network for service to service communication and have to figure out an optimal model for securing workload interactions across the board. But how do you build a standard mechanism of trust between different service mesh technologies? How do you maintain technical heterogeneity with a universal approach to workload security? In this session, Lukonde will walk-through and demonstrate how you can use SPIFFE and SPIRE to securely connect workloads in Istio, and custom envoy meshes.