AI-generated code is 40% more likely to leak a secret. Matt Barker, co-founder of the company that built cert-manager and later led secure workload access at CyberArk, explains why SPIFFE might finally fix workload identity for AI agents.

Matt and William Morgan cover why SPIFFE replaces long-lived secrets with short-lived, cryptographic workload identities, what Matt is building at BoltMCP to control what an AI agent can see and do once it's trusted, and why CISOs are being told to enable AI adoption "at all costs."

Topics covered:

  • Why SPIFFE replaces secrets with short-lived workload identities (SVIDs)

  • Where SPIFFE's job ends and human-delegated authorization begins

  • Why "context window flooding" breaks MCP integrations at scale

  • Why Kubernetes stays the default foundation for agentic AI infrastructure

Read the blog post: SPIFFE Identity for AI Agents on Kubernetes

Find us on:

Rss
Podden och tillhörande omslagsbild på den här sidan tillhör The AI Kubernetes Show. Innehållet i podden är skapat av The AI Kubernetes Show och inte av, eller tillsammans med, Poddtoppen.