Kryptkeeper
Path · Platform engineer

Machine and workload identity

Identities for workloads, SSH and code signing, approved before they exist.

4 walkthroughs, in order

  1. Machine and workload identity

    Propose and approve a machine identity

    One person proposes a machine identity and another approves it.

    8 steps
    kryptkeeper.example.com/nhi
  2. Machine and workload identity

    Issue SPIFFE SVIDs

    Issue workload identities from a signing CA.

    4 steps
    kryptkeeper.example.com/spiffe
  3. Machine and workload identity

    Issue SSH certificates

    Sign SSH user and host certificates.

    7 steps
    kryptkeeper.example.com/ssh-certificates
  4. Machine and workload identity

    Use the code-signing inventory

    Track code-signing certificates and who may use them.

    2 steps
    kryptkeeper.example.com/code-signing