- Cool idea I don't have time for: use AWS's Nitro TPM for Kubernetes node authentication. Get an instance to sign some material with it's TPM, and verify it from the K8s API by retrieving the public endorsement key. docs.aws.amazon.com/AWSEC2/lates...
- I spoke with a SPIFFE maintainer about something similar the other day. He prototyped an example of the token equivalent here github.com/spiffe/k8s-s... I wrote in my thesis that it'd be fun to see how far retrofitting SPIFFE into k8s would go in practice.
Jul 1, 2025 08:38
