SPIFFE/SPIRE basics — workload identity at deploy time
Services need identity too, not just users. SPIFFE issues SVIDs (verifiable identity documents) to workloads; SPIRE is the reference issuer. The shape and the first deploy.
#SPIRE
Posts about spire. ← All posts
mTLS at the proxy — Envoy + SPIRE-issued SVIDs
Pushing mTLS into a service mesh removes it from every individual service. Envoy + SPIRE is the canonical pattern; the implementation has fewer moving parts than the architecture diagrams suggest.