SPIFFE Overview Concepts Community Presentations Get Involved

SPIRE About Concepts Use Cases Comparisons Case Studies

Try Quickstart for Linux and MacOS X Quickstart for Kubernetes Quickstart for Docker Compose

Plan Scaling SPIRE Extending

Deploy Getting SPIRE Install Server Install Agent Configuring Registering workloads Working with SVIDs SPIFFE Library Usage Examples SPIRE Agent Configuration Reference SPIRE Server Configuration Reference SPIRE Telemetry Configuration

Maintain Upgrade/Downgrade SPIRE

Helm Charts Hardened About Installation Upgrading Service Selection

Recommendations Exposing Services Identifiers Namespaces

Advanced Federation Local Mirrors

Integrate SPIRE Securing Microservices Using Envoy with SPIRE SPIRE with Envoy and X.509-SVIDs SPIRE with Envoy and JWT-SVIDs Spire with OPA + Envoy + X.509-SVIDs Spire with OPA + Envoy + JWT-SVIDs

SVID Authentication AWS OIDC Authentication Vault Integration Example

SPIRE Architecture Nested SPIRE Example SPIRE Federation Example

Service Selection

How to enable/disable individual services

Services provided by the chart

There are multiple services provided by the chart. They can be enabled/disabled as needed using helm values.

Production Services

Service Name	Value	Enabled by Default
SPIRE Server	spire-server.enabled	true
SPIRE Agent	spire-agent.enabled	true
SPIRE Controller Manager	spire-server.spireControllerManager.enabled	true
SPIFFE OIDC Discovery Provider	spiffe-oidc-discovery-provider.enabled	true
SPIFFE CSI Driver	spiffe-csi-driver.enabled	true

Experimental Services

Service Name	Value	Enabled by Default
Tornjak Frontend	tornjak-frontend.enabled	false
Tornjak Backend	spire-server.tornjak.enabled	false

Customization Examples

Example: Running the SPIRE Server Standalone:

your-values.yaml snippet:

spire-agent:
  enabled: false
spiffe-oidc-discovery-provider:
  enabled: false
spiffe-csi-driver:
  enabled: false