Skip to content

Commit

Permalink
- Changed example URL to acme
Browse files Browse the repository at this point in the history
- Fixed branding URLs
- Re-added VMWare Secrets Manager

Signed-off-by: Quintessence <[email protected]>
  • Loading branch information
quintessence committed Apr 2, 2024
1 parent ef5e186 commit 37c2460
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 4 deletions.
2 changes: 1 addition & 1 deletion content/docs/latest/deploying/registering.md
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,7 @@ To learn more about the `spire-server entry delete` command and options, consult
A workload registration entry can have a single parent ID. This could be the SPIFFE ID of a specific node (i.e. the SPIFFE ID of an agent as given through node attestation) or it could also be the SPIFFE ID of a node registration entry (sometimes referred to as a node alias/set). A node alias (or set) is a group of nodes that share similar characteristics that are given a shared identity. The node registration entry has the node selectors that are required in order for a node to qualify for the shared identity. Meaning that any node that has at least the selectors defined by a node registration entry is given that alias (or belongs to that node set). When a workload registration entry uses the SPIFFE ID of a node alias as the parent, any node with that alias is authorized to obtain SVIDs for that workload

```
spire-server entry create -node -spiffeID spiffe://devvm.local/mynodealias -selector aws_iid:tag:<TAG_NAME>:<TAG_VALUE>
spire-server entry create -node -spiffeID spiffe://acme.org/mynodealias -selector aws_iid:tag:<TAG_NAME>:<TAG_VALUE>
```

# Where next?
Expand Down
4 changes: 2 additions & 2 deletions content/docs/latest/spiffe-about/get-involved.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,5 +36,5 @@ Day to day contributions are vetted by the project's maintainers. Overall projec

Find SPIFFE and SPIRE logos here:

* [SPIFFE](https://branding.cncf.io/tree/master/spiffe)
* [SPIRE](https://branding.cncf.io/tree/master/spire)
* [SPIFFE](https://github.com/cncf/artwork/tree/main/projects/spiffe)
* [SPIRE](https://github.com/cncf/artwork/tree/main/projects/spire)
6 changes: 5 additions & 1 deletion data/users.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,10 @@ consumers:
description: Customers can use SPIFFE IDs to establish [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication#mTLS) connections between Ghostunnel proxies with built-in support for obtaining X.509-SVID identities via the [SPIFFE Workload API](/docs/latest/spiffe-about/spiffe-concepts/#spiffe-workload-api)
link: https://github.com/square/ghostunnel
logo: square.jpg
- name: VMware Secrets Manager
description: VMware Secrets Manager is a Kubernetes-first, secure-by-default, cloud-native secrets management solution that uses SPIFFE and SPIRE as its identity control plane.
link: https://vsecm.com/
logo: vsecm.png
adopters:
- name: Amazon
logo: Amazon-logo.svg
Expand Down Expand Up @@ -88,4 +92,4 @@ adopters:
link: https://www.vmware.com/
- name: Yahoo
logo: Yahoo-logo.svg
link: https://www.yahoo.com/
link: https://www.yahoo.com/

0 comments on commit 37c2460

Please sign in to comment.