Tag
spiffe
Articles tagged with spiffe.
auth-patterns
8 min read
Workload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min readbest-practices11 min read
SPIFFE/SPIRE Workload Identity: What a Compromised Node Actually Breaks
Unit 42 showed a root-compromised Kubernetes node can spoof SPIFFE/SPIRE workload identities via cgroup tricks. Here is what actually breaks,…
11 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.