Description
Provides SPIFFE workload identities to services on a node through the SPIRE agent. It helps infrastructure issue short-lived identities for service-to-service authentication.
Identity agents are security-critical. Configure trust domains, node attestation, workload selectors, sockets, and permissions carefully because mistakes can grant service identities to the wrong workload.