March 2020
Intermediate to advanced
626 pages
14h 45m
English
In a traditional monolithic environment, identity was defined mostly by hostname or IP addresses. The following are the famous Apache HTTPD server rules:
Deny from AllAllow from 1.2.3.4
In a distributed environment such as Kubernetes, due to its decoupled nature, the workload can be deployed on any machine, so IP addresses may change at any time. As we mentioned earlier, identity is either at origin or transport. At origin, we define identity as a subject (human) that is authenticated in various ways. However, at the transport layer, the old way of using IP addresses is no longer possible due to the dynamic nature of the workload.
The Secure Production Identity Framework for Everyone (SPIFFE) specification is used to assign ...
Read now
Unlock full access