2024-07-23 Meeting notes (SPIFFE demo 2)

Owned by Rahul
Last updated: Jul 23, 2024
1 min read

Date

Jul 23, 2024

Attendees

  • @Rahul

  • @Prashant 

  • @Byung-Woo Jun 

  • @Shiv Bhagavatula 

  • @Wim Henderickx 

Goals

Discussion items

Time

Item

Who

Notes

Time

Item

Who

Notes

10min

Demo

Shiv/Prashant









SPIFFE Demo discussion points:

  • Spire Server Agent created as part of the Nephio Install

  • Node attestation for nodes in other clusters

  • Node attestation for regional/edge clusters initiated by workload identity reconciler

  • Library getting SVID, authenticating to vault, reading and writing to Vault

  • Secrets CSI controller

  • TODO

    • Nail down the SPIFFE ID format

    • Registration of the SVIDs - package variants / Secrets schema ?

    • Tornjak for Nephio ?

Action items