Hi Everyone! While those who have joined this group already should have received invitations already, I'm cross posting this here for visibility for folks who may join later.
We're excited to announce the first meeting of the SPIFFE Transitive Identity Working Group. Our first speaker will be Dennis Gove of Bloomberg taking us through how the internal shared Solr service at Bloomberg needs a strong transitive identity model to be able to apply robust ACLs to incoming data requests, on Dec 12
Agenda:
1. (~10m) Group introduction (moderated by Andrew Jessup, Scytale)
2. (~15m) Case study "Solr as a Service" (Dennis Gove, Bloomberg)
3. Q&A (everyone)
The Search Infrastructure group at Bloomberg provides Solr as a Service to other teams so those teams can include search in their applications and APIs. Those teams are the "owners" of the data and use search to add value to their APIs and applications. The Search Infrastructure group is charged with providing highly available, resilient, and fault tolerant Solr clusters. Access control, rate limiting, and usage logging are basic precepts of providing such a service and those are dependent on identity. Given that these APIs and applications have clients of their own there are multiple identities with most requests there is a need to track and trust multiple layers of identity.
The meeting will be held remotely over Zoom. All are welcome to participate. For details on how to join (as well as the exact time) you can find them on the group's calendar.
Finally, if you haven't already - don't forget to join the SPIFFE Transitive Identity WG Google Group to receive notifications of future meetings.
Cheers,
AJ