Giter VIP home page Giter VIP logo

spiffe's Introduction

About SPIFFE

The Secure Production Identity Framework For Everyone (SPIFFE) Project defines a framework and set of standards for identifying and securing communications between web-based services. At its heart, SPIFFE is:

  • A standard defining how services identify themselves to each other. These are called SPIFFE IDs and are implemented as Uniform Resource Identifiers (URIs).

  • A standard for encoding SPIFFE IDs in a cryptographically-verifiable document called a SPIFFE Verifiable Identity Document or SVIDs.

  • An API specification for issuing and/or retrieving SVIDs. This is the Workload API.

The SPIFFE Project is also producing a reference implementation that, in addition to the above, will:

  • Perform node and workload attestation.
  • Implement a signing framework for securely issuing and renewing SVIDs.
  • Provide an API for registering nodes and workloads, along with their designated SPIFFE IDs.

SPIFFE Standards

Getting Started

  • spiffe: This repository includes the SPIFFE ID, SVID and Workload API specifications, example code, and tests, as well as project governance, policies, and processes.
  • spire: This is a reference implementation of SPIFFE and the SPIFFE Workload API that can be run on and accross varying hosting environments.
  • spiffe-examples: Examples and demonstrations.
  • go-spiffe: Golang client libraries.

Communications

Contribute

SIGs & Working Groups

Most community activity is organized into Special Interest Groups (SIGs), time-bounded working groups, and our monthly community-wide meetings. SIGs follow these guidelines, although each may operate differently depending on their needs and workflows. Each group's material can be found in the /sigs directory of this repository.

Name Leads Group Slack Channel Meetings
Components Oliver Liu (Google, Inc.) Here Here Notes
Integration: AWS Jon Debonis (Blend, Inc.) Here Here Notes
Integration: gRPC Lizan Zhou (Google, Inc.) Here Here Notes
Integration: Kubernetes Vipin Jain (Pensando, Inc.) & Tao Li (Google, Inc.) Here Here Notes
Specification Evan Gilman (Scytale, Inc.) Here Here Notes

Follow the SPIFFE Project You can find us on Github and Twitter.

spiffe's People

Contributors

evan2645 avatar drrt avatar suniljames avatar ajessup avatar y2bishop2y avatar briansmith avatar mlakewood avatar kunzimariano avatar amartinezfayo avatar justinburke avatar justincormack avatar peterlamar avatar preskton avatar sborman avatar jainvipin avatar

Stargazers

 avatar

Watchers

Chris Aniszczyk avatar James Cloos avatar  avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.