From Adoption to Innovation - LinkedIn's SPIRE Journey

Explore LinkedIn's large-scale implementation and customization of SPIRE (SPIFFE Runtime Environment) for secure workload identity management in this 26-minute conference talk. Learn how LinkedIn engineers addressed the unique challenges of deploying SPIRE across hundreds of thousands of hosts and workloads in production environments, going beyond the standard CNCF project capabilities. Discover the innovative solutions developed to establish hardware-based root of trust across diverse hardware configurations, implement secure bootstrapping processes for Kubernetes clusters from bare metal to application level, and enable agentless workload attestation and certificate issuance. Understand how LinkedIn leveraged SPIRE's extensibility framework while developing additional custom components to meet their specific security requirements and handle the scale and complexity of their ecosystem. Gain insights into practical approaches for adapting open-source security tools like SPIFFE and SPIRE to enterprise-scale Zero Trust architecture implementations.