Securing Edge Workloads with Cert-Manager and SPIFFE

Explore the critical aspects of securing edge workloads in this informative conference talk by Sitaram IYER and Riaz Mohamed from Jetstack Ltd. Delve into the increasing trend of workload migration from data centers to edge computing environments, and understand why industries such as telecom, farming, public safety, retail, and medical are embracing this shift. Learn about the challenges and solutions for securing these edge workloads, including ingress security, pod-to-pod (mTLS) communication, and trust domains. Discover how to effectively manage certificates and renewals at scale using cert-manager, and explore the implementation of security policies and postures in edge locations. Gain practical insights as the speakers demonstrate running cert-manager on a Raspberry Pi, showcasing the provisioning and renewal of certificates for both ingress and mTLS use cases. Additionally, understand how SPIFFE (Secure Production Identity Framework for Everyone) can be utilized to manage and distribute trust in edge computing scenarios.