Securing Cloud-Native Workloads from the Metal Up

Learn to secure cloud-native workloads running on bare-metal infrastructure by establishing hardware-rooted trust using TPMs (Trusted Platform Modules) in this 28-minute conference talk. Explore the security challenges and considerations when moving Kubernetes workloads from public cloud to on-premises physical servers, understanding why bare-metal deployments require more comprehensive security planning than traditional cloud VM deployments. Discover SPIRE and SPIFFE technologies and their role in creating secure machine identities, then examine how applications can establish trust chains that trace back to the physical hardware they operate on. Understand the implementation of hardware-backed security for cloud-native environments, including coverage of virtual TPM (vTPM) offerings from cloud providers. Gain insights into designing a unified machine-identity architecture that works consistently across both cloud and datacenter environments, enabling secure workload deployment regardless of infrastructure location.