SPIRE

SPIFFE gives every workload a verifiable identity without pre-shared secrets. See how SPIFFE IDs, SVIDs, trust domains, and the Workload API fit together.