SPIRE

SPIRE is a production-ready implementation of the SPIFFE APIs that performs node and workload attestation in order to securely issue SPIFFE Verifiable Identity Documents (SVIDs) to workloads, and verify the SVIDs of other workloads, based on a predefined set of conditions.

• https://github.com/spiffe/spire/blob/v1.0.2/doc/authorization_policy_engine.md

• https://spiffe.io/docs/latest/microservices/envoy-opa/readme/
• https://spiffe.io/docs/latest/microservices/envoy-jwt-opa/readme/

• https://www.styra.com/blog/zero-trust-with-envoy-spire-and-open-policy-agent-opa/

• SPIFFE in the OPA Ecosystem
  • spiffe.io
• SPIRE in the OPA Ecosystem
  • spiffe.io