Skip to content

spiffe/spire-controller-manager-dynamic-registration

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 

Repository files navigation

SPIRE Controller Manager Dynamic Registration

Apache 2.0 License Development Phase

A server and agent set of helpers to register non Kubernetes node attestors with the spire server so the spire-controller-manager can use them.

Warning

This code is very early in development and is very experimental. Please do not use it in production yet. Please do consider testing it out, provide feedback, and maybe provide fixes.

How it Works

The registration agent runs as a sidecar to the spire-agent. It loads the agent's svid and contacts the registration server using it and a kubernetes psat.

The registration server verifies the agents svid and k8s psat. If they all check out, it registers it with the spire-server.

About

spire-controller-manager-dynamic-registration

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages