Managing Kubernetes Webhooks with SPIRE

Explore the management of Kubernetes Webhooks using SPIRE in this informative conference talk. Delve into the challenges of operating Webhooks, including certificate, key, and root CA certificate management. Learn how new SPIRE features automate certificate management for Webhooks, integrating them into the same trust chain as regular workload certificates. Discover the process of keeping the caBundle fresh, creating entries, and saving certificates and keys to disk. Gain insights into Webhook refreshers, sample configurations, and the application of these concepts in NGINX Service Mesh. Enhance your understanding of Kubernetes resource management and security practices through this comprehensive presentation.

Intro
Webhook refresher
Sample configuration
Solution: Use SPIRE
Keep the caBundle fresh
Create the entry
Save cert/key to disk
NGINX Service Mesh