Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.
The SPIFFE SPIRE Agent is a workload attestation component in a SPIRE deployment that runs alongside workloads on each node. It performs node and workload attestation, requests X.509-SVIDs and JWT-SVIDs from the SPIRE Server based on workload selectors, and exposes the SPIFFE Workload API for workloads to retrieve their identities. The agent caches identities locally, automatically rotates SVIDs before expiration, and maintains a secure connection to the SPIRE Server, making it an essential component for zero-trust security in cloud-native environments.