From Adoption to Innovation - LinkedIn's SPIRE Journey

Explore LinkedIn's large-scale implementation of SPIRE (SPIFFE Runtime Environment) for secure workload identity management in this conference talk from CNCF. Learn how LinkedIn engineers addressed the unique challenges of deploying SPIFFE and SPIRE at massive scale, issuing certificates for hundreds of thousands of hosts and workloads across on-premises production clusters. Discover the innovative solutions developed to bridge gaps between standard SPIRE capabilities and LinkedIn's specific security requirements, including establishing hardware-based root of trust across diverse hardware environments, implementing secure bootstrapping processes for Kubernetes clusters from bare metal to applications, and enabling agentless workload attestation and certificate issuance. Gain insights into how LinkedIn leveraged SPIRE's extensibility features and developed additional custom components to build a robust Zero Trust architecture that handles the scale and complexity of their ecosystem. Understand the practical considerations and engineering decisions involved in transforming open-source SPIRE into a production-ready identity infrastructure solution for one of the world's largest professional networks.