All IAM glossary termsPrivileged Access · glossary
SPIFFE
Also known as: Secure Production Identity Framework For Everyone
Definition
SPIFFE (Secure Production Identity Framework For Everyone) is an open standard for workload identity, providing each workload with a cryptographically verifiable identity (SVID).
In more depth
CNCF graduated project. Reference implementation: SPIRE. SVIDs are X.509 certificates or JWTs identifying the workload by URI (e.g., `spiffe://example.com/payments-api`).
Foundational for service-mesh mTLS at scale. Adopted across Kubernetes ecosystem, Istio, Envoy.
Want the work, not just the definition?