Questions tagged [spiffe-spire]

Use the spiffe-spire tag for configuration and deployment issues of SPIRE, the system that issues service identities. Use the spiffe tag for questions that relate to SPIFFE standards, definitions, and required APIs.

SPIRE is a service identity framework that provides continually rotating secure identities, compliant with SPIFFE standards.

3 questions
2
votes
2 answers

How to implement role-based auth with SPIFFE/SPIRE?

I'm in the process of vetting a move to service mesh. While Istio and Consul Connect are certainly still in the cards, I'm leaning towards building up from a bit lower level with Linkerd and SPIFFE/SPIRE. I want to build a 'hello world' mesh to test…
lmonninger
  • 831
  • 3
  • 13
1
vote
0 answers

Azure AD workload identity federation with SPIFFE and SPIRE

I'm working on a demo to demonstrate Azure AD workload identity federation with SPIFFE and SPIRE. Following this blog. All the steps worked except the verification step. In the verification step - it is supposed to fetch JWT toke exchange for AD…
Ranjit
  • 48
  • 5
0
votes
2 answers

Can SPIFFE/SPIRE Server be installed on GKE's any node?

Can SPIFFE/SPIRE Server be installed on GKE's any node? If yes, one node out of other nodes in cluster will have server and agents both installed. Is it required to have agent running on that node also who is running SPIRE Server? Please explain.