undefined | Better HN

0 pointsants_everywhere5mo ago0 comments

Lots of projects use SPIFFE, but lots of people don't like the new tech because they think the old ways are simpler

0 comments

After trying to get SPIFFE mTLS to work with Python asyncio and giving up, I'm sure "lots of projects" is an overstatement.

Even basic parts of the tech stack aren't there yet.

Several big CNCF security projects use it. Normally you'd just add sidecars to your asyncio service.

No, normally you would just add a parameter to your ssl context constructor.

"Sidecars" is a crazy hack that only applies if you use k8s and containers, which I'm obviously not.

j / k navigate · click thread line to collapse

After trying to get SPIFFE mTLS to work with Python asyncio and giving up, I'm sure "lots of projects" is an overstatement.

Even basic parts of the tech stack aren't there yet.

Several big CNCF security projects use it. Normally you'd just add sidecars to your asyncio service.

No, normally you would just add a parameter to your ssl context constructor.

"Sidecars" is a crazy hack that only applies if you use k8s and containers, which I'm obviously not.

j / k navigate · click thread line to collapse