Venafi, the provider of machine identity management, has announced that VMware has integrated its machine identity control plane into the Tanzu Service Mesh. The Venafi integration enables Tanzu users to integrate their Service Mesh with a trusted certificate authority (CA) to support mutual Transport Layer Security (mTLS) between Kubernetes clusters.
VMware Tanzu Service Mesh provides connectivity and security for modern applications across cloud-native Kubernetes environments via advanced, end-to-end connectivity and security, enabling compliance with Service Level Objectives (SLOs) and data protection and privacy regulations. It does so by helping to control both north-south traffic from end users at the application edge through mesh egress and ingress and east-west traffic between application workloads, APIs and data.
The Venafi integration enhances the Tanzu Service Mesh by enabling organisations to automate the management of their machine identity lifecycles as part of their established CA trust chains. This increases observability and control while ensuring compliance in regulated industries.
As a result, customers can automate the issuance and renewal of machine identities via Venafi’s control plane, enabling developers to move at speed whilst remaining secure.
Customers can generate identities from over 40 trusted certificate authorities (CAs) that fit within their organisation’s trust chain instead of relying on self-signed mTLS identities.
Customers can also gain unparalleled observability, consistency, reliability and freedom of choice over machine identity management, ensuring compliance with regulations.
“We are thrilled about the integration with Venafi, enabling our customers to use Tanzu Service Mesh in their own enterprise CA trust chain and use their own registry system,” says Pere Monclus, Vice President and Chief Technology Officer at VMware.
VMware provides multi-cloud services for all apps, enabling digital innovation with enterprise control.
“It's exciting to see VMware simplify customers' cloud native journey while still ensuring enterprise-grade security," says Kevin Bocek, VP of Security Strategy and Threat Intelligence at Venafi.
“Other service mesh, such as Istio, only support self-signed machine identities out-of-the-box, which fall outside of companies’ existing machine identity management infrastructure and trust chains. It’s great to see VMWare is addressing this security gap by tapping into the control plane for machine identity management in a way that’s frictionless and security-team approved.”
From the ground to the cloud, Venafi machine identity management solutions manage and protect identities for all machines, from physical and IoT devices to software applications, APIs and containers. Venafi provides visibility, lifecycle automation and actionable intelligence for all machine identity types and their security and reliability risks.
Jetstack, a Venafi company, is a cloud-native products and strategic consulting company working with enterprises using Kubernetes and OpenShift.
An open-source pioneer, Jetstack has achieved notable industry recognition as the creator of cert-manager, the open-source industry standard for cloud-native machine identity management. Jetstack's open-source products and solutions protect the application environments and platform infrastructure of global banks, multinational retailing companies and defence organisations by providing enterprise platform and security teams the power to build, scale and secure their cloud infrastructure.