SPIRE
RU: SPIRE
SPIFFE Runtime Environment: the reference implementation of the SPIFFE specification. A SPIRE Server acts as the signing authority and workload registry; SPIRE Agents run on each node, attest workload identity using platform metadata (Kubernetes, AWS, Unix process attributes), and expose the SPIFFE Workload API to deliver short-lived SVIDs.