bloomberg / vault-auth-spire

vault-auth-spire is an authentication plugin for Hashicorp Vault which allows logging into Vault using a Spire provided SVID.

bloomberg/vault-auth-spire Issues

Not all required X509-SVID validations are taking place
Closed 4 years ago1
Add Integration Tests
Updated 5 years ago1
Support Spire as a TrustSource
Updated 5 years ago2
Add Unit Tests
Updated 5 years ago
Ownership of X509-SVIDs are currently unknown
Updated 5 years ago2
SPIFFE ID extracted from SVID is not guaranteed to be for the workload
Closed 5 years ago1
SvidVerifier::Verify assumes an x509-based SVID
Updated 5 years ago
Discussion: Convert SPIFFE ID into a list of Vault policy IDs
Updated 5 years ago