This repository contains a CredentialComposer plugin for SPIRE that extends the functionality of JWT-SVIDs, adding custom claims based on the workload's SPIFFE identity.

Example of running SPIRE with Envoy as a front proxy in a Kubernetes cluster.

Small utility for testing SPIFFE-powered gRPC and mTLS.

Minimalistic certificate minting tool, to ease development of apps with mTLS security for authN/Z

SPIFFE based Kafka authentication

Project Master IT Security SoSe 2021

A sample deployment of SPIRE in Kubernetes

test environment for running devid-provisioning-tool

Simple, fast, flexible SPIRE deployments

A Terraform provider to interact with SPIRE Server through GRPC

REST go bindings for workload api for SPIFFE

Showcasing the potential of SPIFFE with real-life services

Fetching and Rotating Pod's SVID from SPIRE Workload API as Sidecar

Demo of SPIRE federation of two trust domains in two different K8s clusters

SPIFFE Demo Application

SPIFFE/SPIRE playground

Demonstration of SPIFFE/SPIRE authentication on Kind cluster

A SPIFFE Workload API client for Node.js