spiffe

There are 4 repositories under spiffe topic.

• spiffe / spiffe

  The SPIFFE Project

  spiffeidentitycncf
  Language:Shell 1395

• AthenZ / athenz

  Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

  rbacrole-based-access-controlauthorizationcontainerscloudservice-identitytlsspiffeaccess-tokendynamic-infrastructures
  Language:Java 858
• secrets-manager

  vmware-tanzu / secrets-manager

  VMware Secrets Manager for Cloud-Native Apps is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/

  cloud-nativeedgekubernetessecret-managementsecrets-managersecurityspiffespirezero-trust
  Language:Go 128

• philips-labs / spiffe-vault

  Integrates Spiffe and Vault to have secretless authentication

  bottom-turtlecode-signingcosignhacktoberfesthashicorphelmk8skubernetessecretsspiffespireterraformvaultzero-trust
  Language:Go 76

• bloomberg / spire-tpm-plugin

  Provides agent and server plugins for SPIRE to allow TPM 2-based node attestation.

  spiffespiretpm2tpm-attestation
  Language:Go 70

• quicsec / quicsec

  HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).

  cloud-nativehttphttp3kubernetesmtlssecurityspiffezero-trustcert-managerquicgrafanalokimetricsprometheusauthenticationauth0oidcoktaopen-policy-agentwaf
  Language:Go 67

• open-policy-agent / opa-envoy-spire-ext-authz

  OPA-Envoy-SPIRE External Authorization Example.

  authenticationauthorizationenvoyproxyopen-policy-agentservice-meshspiffespire
  Language:Go 46

• bloomberg / vault-auth-spire

  vault-auth-spire is an authentication plugin for Hashicorp Vault which allows logging into Vault using a Spire provided SVID.

  spirepluginauthngospiffevault
  Language:Go 41

• accuknox / cilium-spire-tutorials

  Tutorials about Cilium and SPIRE integration

  accuknoxciliumkubernetesminikubespiffespiretutorials
  Language:Shell 23

• traiana / kafka-spiffe-principal

  SPIFFE based Kafka authentication

  authkafkaspiffe
  Language:Java 19

• HewlettPackard / galadriel

  SPIFFE Federation the easy way

  spiffespire
  Language:Go 15

• Venafi / kubernetes-demos

  cert-managercsi-driverkubernetesmtlspolicysecurityservice-meshspiffevenafi
  Language:Makefile 10

• davidsbond / arrebato

  A gRPC based pub/sub messaging system

  grpcpubsubsigningspiffe
  Language:Go 9

• jsiebens / spire-tailscale-plugin

  Provides agent and server plugins for SPIRE to allow Tailscale node attestation.

  pluginspiffespiretailscale
  Language:Go 9

• zlabjp / envoy-spire-opa-service-mesh

  Demo to build Service Mesh on Kubernetese using Envoy as data plane and SPIRE and OPA as control plane.

  envoyspiffespireopenpolicyagentopaservice-mesh
  9

• zlabjp / spire-openstack-plugin

  An OpenStack-based SPIRE plugins

  spiffespireopenstack
  Language:Go 9

• flobuehr / spire-envoy-kafka

  Demo of Kafka integrated with Envoy proxy sidecars and SPIRE on K8s

  hpespiffekafkaidentityk8sgaia-x
  Language:Python 7

• qaware / cloudid-showcase

  Cloud Native Identity Management Showcase.

  spiffespirevaultjavajsasecuritykubernetescloud-native
  Language:Java 7

• summerwind / spire-plugin-datastore-k8s

  Kubernetes datastore plugin for SPIRE server

  spiffespiregolangkubernetes
  Language:Go 7

• zlabjp / spiffejp-demo

  Demo to build Service Mesh on Kubernetes using Envoy as data plane and SPIRE as control plane.

  spiffespireenvoyservice-mesh
  7

• JackOfMostTrades / spiffe-user-demo

  Proof of concept SPIFFE implementation that provides user SVIDs based on web SSO integration.

  spiffe
  Language:Go 6

• arielroque / stellaris

  Using SPIRE to authenticate applications and get sensitive information about a rocket launched into space

  authenticationcloud-computingidentitykubernetesmicroservicesspiffespire
  Language:Shell 5

• zlabjp / spire-vault-plugin

  This repository has been merged into https://github.com/spiffe/spire. The Vault plugin is now a build-in plugin.

  spiffespirevault
  Language:Go 5

• elinesterov / spiffe-demo-app

  SPIFFE Demo Applicaiton

  spiffespireworkload-identity
  4

• flobuehr / spire-federation

  Demo of SPIRE federation of two trust domains in two different K8s clusters

  spiffek8shpegaia-xidentity
  Language:Shell 4

• nishantapatil3 / spire-federation-kind

  Demonstration of SPIFFE/SPIRE authentication on Kind cluster

  kubernetesdockerhelmspiffespire
  Language:Go 4

• rgl / spire-vagrant

  SPIFFE/SPIRE playground

  spiffespiretpmtpm2
  Language:Shell 4

• depot / node-spiffe

  A SPIFFE Workload API client for Node.js

  spiffe
  Language:TypeScript 3

• hiyosi / svid-helper

  Fetching and Rotating Pod's SVID from SPIRE Workload API as Sidecar

  spiffespiresvidsidecar
  Language:Go 3

• simar7 / gospiffe

  REST go bindings for workload api for SPIFFE

  gogolangspiffe
  Language:Go 2

• vurhanau / csharp-spiffe

  C# library for SPIFFE support

  csharpjwtmtlsspiffespiresvidx509aspnetcoreauthenticationauthorizationdotnettls
  Language:C# 1

• hellerda / spire-kubernetes-cluster

  A sample deployment of SPIRE in Kubernetes

  spirespiffekubernetes
  Language:Shell 0

• edwbuck / helm-charts-flex

  Simple, fast, flexible SPIRE deployments

  helmspiffespire
  Language:Smarty

• jsiebens / spire-gcp-helper

  gcpgolanggoogle-cloudgoogle-cloud-platformspiffespire
  Language:Go

• rgl / devid-provisioning-tool-vagrant

  test environment for running devid-provisioning-tool

  devidtpmtmp2spiffespire
  Language:Go

• rumenvasilev / tlsgen-dev

  Minimalistic certificate minting tool, to ease development of apps with mTLS security for authN/Z

  authnauthzmtlsspiffe
  Language:Go