Community Day 2026

Celebrating ten years of SPIFFE.

In 2026, SPIFFE turns ten. To mark a decade of open, vendor-neutral workload identity, we're holding a SPIFFE Community Day - a chance to bring the community together, celebrate how far the project has come, and help shape where it goes next.

We'll be hosted by Bloomberg in the City of London, with the event also streamed online via Zoom so you can join from wherever you are.

The afternoon mixes talks from teams running SPIFFE and SPIRE in production, updates from the project maintainers, and more exploratory topics on where workload identity is heading, from AI agents to authorization. Expect plenty of room to learn from - and talk to - the people building and using these projects.

Agenda

All times are UTC, which is London time on the day. Timings are provisional and the running order may change.

  1. -

    Doors open

    In-person attendees are welcome to arrive from 13:30. The stream starts at 14:00.

  2. -

    Welcome and opening remarks

    Noah Stride Teleport

  3. - Keynote

    Title to be announced

    Joe Beda Stacklok

  4. - Maintainer update

    SPIRE Maintainers Update

    Sorin Dumitru Bloomberg

  5. - Maintainer update

    SPIFFE Maintainers Update

    Noah Stride Teleport Arndt Schwenkschuster Defakto

    A look back at what we’ve done over the last six months, and what we’re planning to tackle in the next twelve. We’ll give a high-level overview of the proposed work items - if any of them would be useful to you, we’d love you to get involved.

  6. -

    Break

  7. -

    Operating SPIRE at Wise

    Taras Burko Wise Matthew Kennedy Wise

    SPIRE has been successfully powering our workload identity and mTLS for years. In this session we’re going to show how we’re running it at Wise scale, discuss service mesh and Kafka integrations, and share operational stories.

  8. -

    SPIFFE and AIMS - A foundation for Agentic Identity

    Pieter Kasselman Defakto

    AI agents are workloads. They’re spun up on demand, act for users and for other agents, and decide at runtime which tools and data to reach for. Static API keys and long-lived secrets can’t keep up. Agents need identities and credentials that are verifiable, short-lived and tied to where they run. This is a problem made for SPIFFE.

    The IETF WIMSE working group recently adopted the Agent Identity Management System (AIMS) model. It points to SPIFFE as a critical part of an agentic identity system. This talk walks through the AIMS model layer by layer and shows where SPIFFE slots in and how it enables the other layers in the system. Attendees will leave with a clear picture of how existing SPIFFE/SPIRE deployments become the foundation for agent identity, and where the community can help shape what comes next.

  9. -

    SPIFFE in Flux, or how we reached the KubernetesObjectReference SPIFFE standard

    Matheus Pimenta ControlPlane

    Show our quest in Flux to support SPIFFE complying to our multi-tenancy model. This resulted in the Broker API that was recently introduced by SPIFFE. In particular, it’s the story behind the KubernetesObjectReference SPIFFE standard that we contributed to support Flux.

  10. -

    After the SVID: Emerging Authorization Patterns for SPIFFE Workloads and Agents

    Kevin Sapp Aembit

    SPIFFE deliberately stops at authentication. Every team that adopts it then has to answer “what is this workload allowed to do?” on its own. This talk maps the emerging approaches: SVIDs as OAuth credentials, token exchange and Transaction Tokens, WIMSE, AuthZEN, and AAuth. It covers where each fits, what’s mature, and what’s still a draft.

  11. Drinks and snacks