Evan Gilman
Evan Gilman
There is a community need for a generalized SPIFFE CLI utility, with many useful features possible. Among them: * Parsing SVIDs and displaying their contents (a-la openssl -text) * Validating...
The [downloads page](https://spiffe.io/downloads/) links to the kubernetes workload registrar, but the registrar has been deprecated and the link is now broken. Instead, we should link to the [spire-controller-manager](https://github.com/spiffe/spire-controller-manager), which has...
He had an [issue](https://github.com/spiffe/spire/issues/2774) opened in SPIRE asking to see the source code of a small helper utility that is used in the Envoy/JWT integration guide. Is this reference still...
SPIRE recently received a docs contribution that included some small config snippets that are required in order to run SPIRE in OpenShift. It's currently living on the SPIRE Agent reference...
Hello. When the OctoPrint UI prompts that this plugin needs an upgrade, it states: ``` Be sure to read through any linked release notes ``` Conveniently, a link to the...
SPIRE has historically not accepted upstream plugin contributions for integration with commercial software. There have been several reasons cited - philosophical questions, difficulty in testing, and maintenance over time, are...
This PR introduces the SPIFFE Bundle Map text that has been making its way through SIG-Spec. A link to that document is below for posterity. https://docs.google.com/document/d/13KHycYIfRC-g42aEfo4_4inF_WauCXOBgZAcUGuxdgs
A configurable agent sync interval has been important for larger deployments because the overhead of a frequent full synchronization can be high at scale. At the same time, increasing the...
The aws_iid node attestor performs a series of anti-tampering checks (e.g. introspecting disk attach times, attached network interfaces, etc) to adhere to a tight threat model that involves attackers with...
We have received many questions and comments in the past relating to pain around having to specify which workloads federate with which trust domains. Sometimes it is desirable to have...