diff --git a/content/docs/latest/deploying/registering.md b/content/docs/latest/deploying/registering.md index f74fe674..94e3cb89 100644 --- a/content/docs/latest/deploying/registering.md +++ b/content/docs/latest/deploying/registering.md @@ -120,7 +120,7 @@ To learn more about the `spire-server entry delete` command and options, consult A workload registration entry can have a single parent ID. This could be the SPIFFE ID of a specific node (i.e. the SPIFFE ID of an agent as given through node attestation) or it could also be the SPIFFE ID of a node registration entry (sometimes referred to as a node alias/set). A node alias (or set) is a group of nodes that share similar characteristics that are given a shared identity. The node registration entry has the node selectors that are required in order for a node to qualify for the shared identity. Meaning that any node that has at least the selectors defined by a node registration entry is given that alias (or belongs to that node set). When a workload registration entry uses the SPIFFE ID of a node alias as the parent, any node with that alias is authorized to obtain SVIDs for that workload ``` -spire-server entry create -node -spiffeID spiffe://devvm.local/mynodealias -selector aws_iid:tag:: +spire-server entry create -node -spiffeID spiffe://acme.org/mynodealias -selector aws_iid:tag:: ``` # Where next? diff --git a/content/docs/latest/spiffe-about/get-involved.md b/content/docs/latest/spiffe-about/get-involved.md index 236cdc7c..7b386eb5 100644 --- a/content/docs/latest/spiffe-about/get-involved.md +++ b/content/docs/latest/spiffe-about/get-involved.md @@ -36,5 +36,5 @@ Day to day contributions are vetted by the project's maintainers. Overall projec Find SPIFFE and SPIRE logos here: -* [SPIFFE](https://branding.cncf.io/tree/master/spiffe) -* [SPIRE](https://branding.cncf.io/tree/master/spire) +* [SPIFFE](https://github.com/cncf/artwork/tree/main/projects/spiffe) +* [SPIRE](https://github.com/cncf/artwork/tree/main/projects/spire) diff --git a/data/users.yaml b/data/users.yaml index dc2d17db..28c60b1d 100644 --- a/data/users.yaml +++ b/data/users.yaml @@ -28,6 +28,10 @@ consumers: description: Customers can use SPIFFE IDs to establish [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication#mTLS) connections between Ghostunnel proxies with built-in support for obtaining X.509-SVID identities via the [SPIFFE Workload API](/docs/latest/spiffe-about/spiffe-concepts/#spiffe-workload-api) link: https://github.com/square/ghostunnel logo: square.jpg + - name: VMware Secrets Manager + description: VMware Secrets Manager is a Kubernetes-first, secure-by-default, cloud-native secrets management solution that uses SPIFFE and SPIRE as its identity control plane. + link: https://vsecm.com/ + logo: vsecm.png adopters: - name: Amazon logo: Amazon-logo.svg @@ -88,4 +92,4 @@ adopters: link: https://www.vmware.com/ - name: Yahoo logo: Yahoo-logo.svg - link: https://www.yahoo.com/ \ No newline at end of file + link: https://www.yahoo.com/