spiffe / spire

The SPIFFE Runtime Environment

https://spiffe.io

spiffe/spire Issues

ReplayMissedEvents Incorrectly assumes autoincrement value of 1 for all deployments.
Updated 16 days ago3
Update the docker image from golang:1.22.3-alpine3.18 to golang:1.22.4-alpine3.20
Closed 18 days ago3
Filter cache update reads to only read each entry once, when an entry has two events in the same refresh cycle.
Closed a month ago6
Extend spire-server CLI with "append bundle" command
Updated a month ago4
Remove deprecated ttl flag
Closed 2 months ago5
Force rotation of intermediates using a tainted authority
Closed 2 months ago
Enable OpenSSF Scorecard to enhance security practices across the project
Closed 2 months ago6
Feature to delete individual keys from trust bundle
Closed 3 months ago7
s3 bundlePublisher for other implementations
Updated 3 months ago1
Lack of Automated Test for Batchx509SVID RPC Operation
Updated 3 months ago1
Propagation of the tainted bit in bundleutil and server/api functions
Updated 3 months ago
Allow enabling the LocalAuthority API and related CLI commands through the `forced_rotation` feature flag
Closed 3 months ago
Document SyncAuthorizedEntries experimental flag in agent
Closed 3 months ago
Allow enabling the LocalAuthority API and related CLI commands through an experimental setting instead of a feature flag
Updated 3 months ago
The spire-agent k8s workload attestor wont refresh kubelet ca if it changes on disk
Updated 3 months ago2
Feature Request: Enhance the "unix" workload attestor to allow discovery of symbols
Closed 3 months ago4
Enable SyncAuthorizedEntries by default
Updated 3 months ago
Histogram instead of summary with quantile for latency metrics
Updated 3 months ago3
Remove public key from stored slots
Updated 3 months ago
aws_iid attestation fails when ec2 network interfaces aren't listed in expected order
Closed 3 months ago1
Spire can support config activationThresholdCap?
Updated 3 months ago4
Can support spire-agent use a proxy to invoke spire-server?
Closed 3 months ago6
929 SDS connections for stress testing, Spire agent experience memory leaks.
Closed 3 months ago5
server, agent: Allow specifying CA when fetching bundles
Closed 3 months ago3
Agent health check reports ready prematurely
Closed 3 months ago2
spire-agent health check report spire_agent_rpc_workload_api_fetch_x509_bundles{status="PermissionDenied"} metrics
Updated 3 months ago1
RFC: Hybrid Node Attestor
Updated 4 months ago
[Event-based entry cache] replayMissedEvents queries DB in loop for every missed ID
Updated 4 months ago4
[Event-based entry cache] New server config for `sql_transaction_timeout` is not propagated to endpoints config
Closed 4 months ago
Release SPIRE v1.10.1
Closed 4 months ago
Nested SPIRE Architecture, NestedA workload invoke NestedB worload error in one case.
Updated 4 months ago6
Documentation / deployment walk through for SPIRE on TPM.
Updated 4 months ago1
Consider deprecating and removing usage of rsa-2048
Closed 4 months ago1
The Bottom Turtle Reference Architecture(s)
Updated 4 months ago10
spire go.mod points at non-main branch of spire-api-sdk
Closed 4 months ago3
Consider using gRPC metrics from go-grpc-middleware
Updated 4 months ago1
Fix "Rettestable" typo in telemetry name
Updated 4 months ago
Consider removing anti-tampering checks in aws_iid node attestor
Updated 4 months ago
Same SVID is pushed repeatedly on the FetchX509SVID stream by spire-agent with LRU cache
Closed 4 months ago
Issue with JWT Key Type Change not Being Reflected on SPIRE Server Restarts
Closed 4 months ago2
Downstream spire-server does not honour `ca_ttl` configurable.
Closed 4 months ago2
Rework spire-server validate command to launch plugin instances for validation.
Updated 5 months ago
Additional CA's in regular TrustBundle
Closed 5 months ago4
Extend the plugin Configurer interface to include a Validate func
Updated 5 months ago
Release SPIRE 1.10.0
Closed 5 months ago
Feature: Request for making nodes re-attestable when using NodeAttestor `aws_iid` plugin
Updated 5 months ago13
k8s_psat node attestor: allow empty list of clusters
Closed 5 months ago2
Change example configurations to use a persistent KeyManager
Updated 6 months ago
debug API logs metrics misconfiguration errors
Updated 6 months ago
Integration tests for database events
Updated 6 months ago