trusted-service-identity | Trusted Service Identity is closing the gap | Identity Management library

trusted-service-identity is a Shell library typically used in Security, Identity Management applications. trusted-service-identity has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

Here is the stack that represents the layers of the Universal Workload Identity project. Most of the components are part of the CNCF (Cloud Native Computing Fundation) initiative. Starting from the bottom, we support any Kubernetes Platform, whether this is a native Kubernetes or OpenShift. Then we have SPIFFE, which defines the identity format and specifies how workloads can securely obtain identity. Then we have SPIRE, which implements SPIFFE, and it provides the zero trust attestation of workloads and infrastructure. SPIRE is responsible for issuing and rotating of x509 certificates or JWT tokens that are used for representing identity. SPIRE also provides a single point of federation with OIDC discovery to be used across multi-cloud or multi-cluster deployments. Above the SPIRE, we have Tornjak, a control plane and UI for SPIRE, which together with the K8s workload registrar, defines the organization-wise Universal Workload Identity schema. It provides the identity management across the SPIRE servers. Then on the top layer we have Universal Trusted Workload Identity that is a guiding principle. It's a concept for using workload identity frameworks. This is not a specific technology.