►
From YouTube: SPIRE Project Updates - Agustín Martínez Fayó
Description
SPIRE Project Updates - Agustín Martínez Fayó
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2021 Virtual from May 4–7, 2021. Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
A
A
A
It
also
makes
makes
it
easy
to
obtain
and
validate
both
x5
online
and
just
beats
it
well.
It
also
provides
all
the
resources
needed
to
further
rate
trust
between
trust
domains
using
spf,
bundles
and
all
all
the
functionality
needed
to
perform
things
like
bundle,
management,
spiffidi
handle
or
sv
verification.
A
A
So,
let's,
let's
take
a
look
at
the
the
recent
releases
of
the
fire,
so
the
most
the
most
recent
release
is
0
11
1.
That
will
really
set.
I
think,
at
the
end,
at
the
end
of
september,
that
that
included
an
improvement
in
the
aws
pca
of
upstream
authority,
plugging
and
also
the
option
to
disable
rate
limiting
of
node
attestation
request
among,
among
other
improvements
and
fixes.
A
A
And
in
0
10,
where
we
had
a
bunch
of
new
things
and
improvements,
including
the
the
support
for
test
with
in
nested
spire,
introducing
the
the
upstream
authority
plug-in.
There
were
other
other
improvements
like
the
reduction
of
database
load
in
certain
configurations
and
the
ability
of
asians
to
proactively
rotate
in
the
workloads
aspects.
A
A
A
So
there
are
a
lot
of
proposals
being
discussed
at
this
moment,
which
is
something
great.
One
of
of
them
is
a
proposal
for
tpm
node
at
the
station.
That
is
based
on
on
an
approach
following
a
draft
specification
from
the
trusted
computing
group.
That
deliberations
divide
the
certificate
to
authenticate
each
device.
A
So
again,
a
lot
of
discussion
around
that,
so
obviously
we're
a
bit
short
in
time.
We
have
about
three
minutes
left
three
to
four
okay,
yeah
so
well,
there
are
many
many
different
scenarios
where
installing
expiration
is
not
possible
and
that
that
obviously
is
a
problem
inspired
where
the
the
workloads
running
in
those
environment
can't
access
the
workload
api.
A
So
there
is
a
proposal
under
discussion
to
address
that
problem.
Right
now,
it's
focused
on
providing
support
for
the
for
the
different
serverless
compute
services
provided
by
by
the
by
the
measured
cloud
providers
as
the
like
the
primary
use
case.
But
the
idea
is
to
come
up
with
with
a
solution
or
or
a
set
of
solutions
for
the
different
scenarios.
A
So
the
the
proposal
defines
some
some
steps
to
accomplish
that
and
also
introduces
some
new
apis
in
order
to
achieve
that
process.
So
that's
under
active
discussion.
Now
there
is
a
proposal
to
add
the
certificate
certificate
transparency,
support
inspired
through
a
new
plugin
type.
This
this
is
being
discussed
also,
so
let's
try
to
go
quickly
through
this,
so
we
we
already
talked
about
the
things
that
are
keeping
missing
us
now,
but
there
are
some
other
things
that
we
have
in
the
horizon,
like
in
the
implementation
of
the
break
class
mode.
A
So
there
is
a
currently
a
request
for
comment
issue
for
that,
although
we
haven't
actively
discussed
that
yet
so
that's
something
pending,
so
the
health
check
system
inspire
can
become
improved.
We
recently
added
the
back
end
points
to
get
information
about
the
agent
and
the
server,
but
there
is
room
to
improve
the
current
way
to
to
check
the
health
of
aspire,
server
and
nation
to
make
it
more
reliable
and
complete.
A
We
also
one
of
the
things
that
we
we
have
in
the
roma
is
to
to
review
the
there
are
messages
to
have
that
we
have
to
make
sure
that
they
are
not
only
descriptive
of
the
error,
but
also
that
helps
to
have
a
resolution
for
the
condition
we
have
some
work
to
do
in
order
to
productionize
kubernetes
deployments
to
adhere
to
security,
best
practices,
and
we
also
plan
to
look
at
how
does
the
the
correspond
exposed
service
facilities,
plugins
and
plugins
exposed
services?
Spirocore
can
utilize
in
exchange.
B
Great
augustine,
where
a
time
thanks
for
the
update
this
this
is
a
lot.
There
is
certainly
a
lot
of
momentum
going
on
for
the
project
very
excited
fired
up
to
see
this
slides
will
be
made
available.
I
know
you
had
a
few
extra
spikes,
but
we
do
need
to
move
on
to
the
to
the
next
section.
Is
there
a
place?
You
would
like
to
call
out
folks
to
come
check
out,
perhaps
the
spy
repo
or
where
can
they
find
this
information
you've
been
talking
about.