The repo: github.com/ryanspletzer...

Much like the OAuth/OpenID Connect/JWT specs from the past, digesting these types of specifications can be a lot, which is why I took a stab at digesting this myself and distilling it into a blog post for all of you to enjoy.

SPIFFE/SPIRE give us a novel way to derive trust and authentication from the environment itself, which opens up a new world of possibilities and solves several classic problems related to secrets management at scale.

Creating secrets that can rotate other secrets can often feel like a "turtles all the way down" situation... But it doesn't have to be that way!