spiffe-helper
spiffe-helper copied to clipboard
spiffe
The SPIFFE Helper is a tool that can be used to retrieve and manage SVIDs on behalf of a workload
It would be great if spiffe-helper could be used as a sidecar under Kubernetes. This would require two different modes of operation to function well. 1. a new flag for...
Documented here: https://github.com/spiffe/go-spiffe/blob/main/v2/svid/jwtsvid/source.go#L12
SPIFFE standard already specifies SPIFFE_ENDPOINT_SOCKET as the name for the env var.
In federated mode, peer CA bundles are stored as separate files from the local CA bundle, svid key, and svid cert. Briefly looking at the code, it seems to be...
Add default socket path, using the same than spire (/tmp/spire-agent/public/api.sock)
In current implementation we supports sending signals or running an script in order to communicate process that a SVID was rotated, but now we have windows where signals is not...