Listing 1: SPIRE-Server konfigurieren

server {
bind_address = "127.0.0.1"
bind_port = "8081"
trust_domain = "example.org"
data_dir = "./data/server"
ca_ttl = "168h"
default_x509_svid_ttl = "48h"
}
plugins {
DataStore "sql" {
plugin_data {
database_type = "sqlite3"
connection_string = "./data/
server/datastore.sqlite3"
}
}
KeyManager "disk" {
plugin_data {
keys_path = "./data/server/keys.json"
}
}
NodeAttestor "join_token" {
plugin_data {}
}
}


Listing 2: SPIRE-Agent konfigurieren

agent {
data_dir = "./data/agent"
log_level = "DEBUG"
trust_domain = "example.org"
server_address = "spiffe.example.org"
server_port = 8081
}
plugins {
KeyManager "disk" {
plugin_data {
directory = "./data/agent"
}
}
NodeAttestor "join_token" {
plugin_data {}
}
WorkloadAttestor "unix" {
plugin_data {}
}
WorkloadAttestor "docker" {
plugin_data {}
}
}


Listing 3: Workload-Identität registrieren

spire-server entry create \
-parentID spiffe://example.org/my-agent \
-spiffeID spiffe://example.org/docker/
my-workjob \
-selector docker:label:paymentapplication:billing-job