How do workloads prove who they are? Humans have fingerprints and facial recognition, but a process spinning up in Kubernetes starts with nothing. It can’t show a credential it doesn’t have yet.

In this episode of 🌩️Thunder, Volkan Özçelik, Principal Kubernetes Software Engineer at Broadcom, explains how SPIFFE (Secure Production Identity Framework for Everyone) solves this bootstrapping problem by verifying identity through what’s already observable, like which Kubernetes namespace a pod is running in, rather than relying on a pre-shared secret.

Watch here: youtu.be/cCHXRzoTh…

Split thumbnail with Volkan Özçelik (glasses, dark hair, mustache, blue collared shirt) on the left and Whitney Lee (long brown hair with a red streak, black hoodie, smiling) on the right. Between them is a black lightboard covered in colorful handwritten notes and diagrams about SPIFFE and SPIRE, with bold yellow overlay text reading "WHAT IS SPIFFE and SPIRE? WORKLOAD IDENTITY EXPLAINED" and "With VOLKAN ÖZÇELIK." The 🌩️Thunder logo (a cloud with a lightning bolt) appears in the top right corner.