SPIFFE

SPIFFE with Kanvas

Collaborative and visual infrastructure as design for SPIFFE

Features

  • Design and apply policy for node and workload attestation.
  • Configure your signing framework for securely issuing and renewing SVIDs.
  • Simplify access from identified services to secret stores, databases, services meshes and cloud provider services.

Overview

The SPIFFE Project

Meshery deploys and manages SPIRE (the SPIFFE Runtime Environment). SPIRE is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms. SPIRE exposes the SPIFFE Workload API, which can attest running software systems and issue SPIFFE IDs and SVIDs to them. This in turn allows two workloads to establish trust between each other, for example by establishing an mTLS connection or by signing and verifying a JWT token. SPIRE can also enable workloads to securely authenticate to a secret store, a database, or a cloud provider service.

Collaboratively and visually diagram your cloud native infrastructure with GitOps-style pipeline integration. Design, test, and manage configuration your Kubernetes-based, containerized applications as a visual topology.

Looking for best practice cloud native design and deployment best practices? Choose from thousands of pre-built components in Kanvas. Choose from hundreds of ready-made design patterns by importing templates from Meshery Catalog or use our low code designer, Kanvas, to create and deploy your own cloud native infrastructure designs.

See Documentation

Kubernetes Orchestration and Diagramming software

Orchestrate and design Kubernetes architecture diagrams easily with predefined templates and symbols designed for professionals.

  • Extensive library of integrations
  • Infrastructure orchestration
  • Multi-player editing
  • Ready-to-use templates
  • Visual drag & drop
  • Operate with No Code

How it Works

See It in Action

Better together - SPIFFE with Meshery

Wrangle the Workload API

Expertly use the Workload API specification to issue and retrieve SVIDs.

Slide 1

Related Integrations

390+ Built-In Integrations

Support for your Cloud Native Infrastructure and Apps

All (382)

Provisioning (68)

App Definition and Development (82)

Platform (6)

Cloud Native Network (42)

Database (19)

    Layer5 is the steward of Meshery and creator of Kanvas, the collaborative canvas for cloud-native infrastructure. We bridge the gap between design and operation, allowing engineers to create, configure, and deploy orchestratable diagrams in real time. Whether managing Kubernetes or multi-cloud environments, Layer5 provides the tooling needed to oversee modern infrastructure with confidence.