From Cloud to IoT Device Authenticity under Kubernetes Management

The proliferation of headless IP devices has posed serious security issues. These gadgets, which include sensors, smart meters, and industrial controllers, frequently lack builtin security protections and are susceptible to cyber attacks. Understanding these risks and establishing effective management techniques is vital for safeguarding critical infrastructure and data. Many IoT devices lack suitable authentication measures, leaving them vulnerable to unwanted access, particularly when the Kubernetes management framework is used at the edge. To connect to the network, headless IoT devices need to re-key and validate their credentials. This requires easy scalability and a trusted platform module (TPM) to build a chain of trust and protect all credentials. To maintain data security in Internet of Things environments, we provide a totally trusted infrastructure utilizing the SPIFFE/SPIRE framework that can ensure that, additionally to authentic workloads, only verified, trusted IoT devices may participate in data transmission.