Skip to main content
11 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
1 vote
1 answer
258 views

I have to set up a spire server with postgres database as backend. I am following this document - https://spiffe.io/docs/latest/try/getting-started-k8s. After the setup the spire server and the spire ...
Rahul Satal's user avatar
  • 2,277
0 votes
1 answer
740 views

I'm interested in developing an alternative authentication method for authorizing an agent with Spire, one that involves authenticating the device based on a specific pattern(like the time it takes to ...
Filipe Ramalho's user avatar
  • 1
0 votes
1 answer
4k views

I am running a jar on spark slave with version spark-2.5.6-bin-hadoop where i am getting this error on submitting the jar Exception occurred while create new JwtSource java.lang.NoClassDefFoundError: ...
anand's user avatar
  • 1
1 vote
0 answers
347 views

I'm working on a demo to demonstrate Azure AD workload identity federation with SPIFFE and SPIRE. Following this blog. All the steps worked except the verification step. In the verification step - it ...
Ranjit's user avatar
  • 48
0 votes
1 answer
245 views

I am using this guide for deploying Spiffe on K8s Cluster "https://spiffe.io/docs/latest/try/getting-started-k8s/" One of the steps in this process is running the command "kubectl apply ...
Shubham Gupta's user avatar
  • 11
0 votes
0 answers
492 views

I understand that I can configure Istio for its Citadel component to use a root x509 certificate + private key that I provide. Can I extend this system in a way that I also use the same root to issue ...
CppNoob's user avatar
  • 2,430
2 votes
2 answers
1k views

I'm in the process of vetting a move to service mesh. While Istio and Consul Connect are certainly still in the cards, I'm leaning towards building up from a bit lower level with Linkerd and SPIFFE/...
lmonninger's user avatar
  • 1,011
0 votes
1 answer
2k views

Scenario Istio version 1.5.0 ontop of EKS 1.14. Enabled components: Base Pilot NOTE Istio 1.5.0 deprecates Mixer, moved to telemetry v2, which happens inside the envoy proxy sidecar. I want to use ...
Tran Triet's user avatar
  • 1,359
0 votes
2 answers
498 views

Can SPIFFE/SPIRE Server be installed on GKE's any node? If yes, one node out of other nodes in cluster will have server and agents both installed. Is it required to have agent running on that node ...
Mahendra B's user avatar
  • 362
1 vote
2 answers
2k views

I have a setup using Kubernetes and Istio where we run a set of services. Each of our services have an istio-sidecar and a REST-api. What we would like is that whenever a service within our setup ...
user1168407's user avatar
  • 31
0 votes
1 answer
844 views

In the SPIFFE specification it is stated that Since a workload in its early stages may have no prior knowledge of its identity or whom it should trust, it is very difficult to secure access to ...
Pasan W.'s user avatar
  • 712