SPIFFE Overview Concepts Community Presentations Get Involved

SPIRE

Concepts Use Cases Comparisons Case Studies

Quickstart for Linux and MacOS X Quickstart for Kubernetes Quickstart for Docker

Scaling SPIRE Extending

Getting SPIRE Install Server Install Agent Configuring Registering workloads Working with SVIDs SPIFFE Library Usage Examples SPIRE Agent Configuration Reference SPIRE Server Configuration Reference SPIRE Telemetry Configuration

Upgrade/Downgrade SPIRE

Helm Charts Hardened

Installation Upgrading Service Selection

Recommendations Exposing Services Identifiers Namespaces

Federation Local Mirrors

Integrate SPIRE

Securing Microservices

Using Envoy with SPIRE SPIRE with Envoy and X.509-SVIDs SPIRE with Envoy and JWT-SVIDs Spire with OPA + Envoy + X.509-SVIDs Spire with OPA + Envoy + JWT-SVIDs

SVID Authentication

AWS OIDC Authentication Vault Integration Example

SPIRE Architecture

Nested SPIRE Example SPIRE Federation Example

Service Selection

How to enable/disable individual services

Services provided by the chart

There are multiple services provided by the chart. They can be enabled/disabled as needed using helm values.

Production Services

Service Name	Value	Enabled by Default
SPIRE Server	spire-server.enabled	true
SPIRE Agent	spire-agent.enabled	true
SPIRE Controller Manager	spire-server.spireControllerManager.enabled	true
SPIFFE OIDC Discovery Provider	spiffe-oidc-discovery-provider.enabled	true
SPIFFE CSI Driver	spiffe-csi-driver.enabled	true

Experimental Services

Service Name	Value	Enabled by Default
Tornjak Frontend	tornjak-frontend.enabled	false
Tornjak Backend	spire-server.tornjak.enabled	false

Customization Examples

Example: Running the SPIRE Server Standalone:

your-values.yaml snippet:

spire-agent:
  enabled: false
spiffe-oidc-discovery-provider:
  enabled: false
spiffe-csi-driver:
  enabled: false