Skip to content

SPIFFE in Practice: Universal Identity for WebAssembly Workloads#

KubeCon + CloudNativeCon Europe 2025 (London) digest Program Core pick London · 1–4 April 2025

Abstract Recording

Joonas Bergius, Cosmonic & Colin Murphy, Adobe — Core

Play the recording: SPIFFE in Practice: Universal Identity for WebAssembly Workloads

  • Why: SPIFFE's "universal identity across any workload platform" claim gets tested against a genuinely different runtime model (WASM components, not containers) — useful signal for how far the standard actually stretches.
  • What: The journey of adopting SPIFFE as the identity foundation for WebAssembly workloads on CNCF wasmCloud, from concept to production. (from abstract only)
  • How: Not detailed beyond "lessons learned integrating SPIFFE with a WASM component runtime rather than a container runtime" — the abstract flags this as introducing unique challenges versus a straight lift-and-shift of container-based SPIFFE integration. (from abstract only — thin on mechanism)
  • Where applicable: WebAssembly-based workload platforms (wasmCloud specifically); general lesson for anyone extending SPIFFE beyond containers.