SPIRE provides a means to secure communication between microservices in the same environment or across a variety of providers such as AWS, GCP, Azure, bare metal, and so on. These examples demonstrate using SPIRE with the Envoy service mesh. SPIRE authentication communication can be implemented with X.509 certificates (most secure) or JWT tokens (good for proxy situations).

• Using Envoy with SPIRE

  How to configure the Envoy proxy with SPIFFE and SPIRE

• Using Envoy with X.509-SVIDs

  Securing Microservice Communication with Envoy Using X.509 SPIFFE IDs

• Using Envoy with JWT-SVIDs

  Securing Microservice Communication with Envoy Using JWT SPIFFE IDs

• OPA Authorization with Envoy and X.509-SVIDs

  Secure Communication Using Envoy with X.509-SVIDs and Open Policy Agent Authorization

• OPA Authorization with Envoy and JWT-SVIDs

  Secure Communication Using Envoy with JWT-SVIDs and Open Policy Agent Authorization