Identity

Workload identity for agents using SPIRE, SPIFFE, and Kubernetes service accounts.

Every agent needs a cryptographic identity to authenticate to other services, sign traces, and prove its provenance. SPIRE provides X.509 SVIDs and JWT SVIDs that are automatically rotated and scoped to the agent's workload.