The safeguards map / 3.6 Identity and authorization
SPIRE
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
An implementation of the SPIFFE APIs that attests nodes and workloads and issues SVIDs, the verifiable identities that workloads use to authenticate to each other.
Where it sits
3.6 Identity and authorization (primary): Attests nodes and workloads and issues each workload a SPIFFE identity (an SVID) when the owner's registration entries match, so other services can verify who is calling.
SPIRE is a production-ready implementation of the SPIFFE APIs that performs node and workload attestation in order to securely issue SVIDs to workloads
captured
It stores registration entries (which specify the selectors that determine the conditions under which a particular SPIFFE ID should be issued)
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.