pkg/

Package hintsfilter deduplicates registration entries (and the identities derived from them) so that callers of the agent's local APIs see at most one entry per hint.

The fflag package implements a basic singleton pattern for the purpose of providing SPIRE with a system-wide feature flagging facility.

Package peertracker handles attestation security for the SPIFFE Workload API.

Package sshpop implements ssh proof of possession based node attestation.

The selector package exports functions useful for manipulating and generating spire selectors

The TLS parsing helpers in this file mirror k8s.io/component-base/cli/flag (TLSVersion, TLSCipherSuites, InsecureTLSCiphers, TLSCurvePreferences, and related functions).

Package pubmanager manages the publishing of the trust bundle to external stores through the configured BundlePublisher plugins.

Package azurerds implements a SQL driver wrapper that authenticates to Azure Database for PostgreSQL and Azure Database for MySQL using a Microsoft Entra ID (Azure AD) access token instead of a static password.

Package kmip implements a SPIRE KeyManager plugin that stores and uses signing keys via a generic KMIP 1.4-compliant server (binary TTLV over TCP/TLS).