docs: Add note about SPIRE implementing the SDS server protocol (#25889)

Signed-off-by: Sascha Brawer <[email protected]>
envoyproxy · Mar 2, 2023 · b347c90 · b347c90
1 parent 7d86ca7
commit b347c90
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/docs/root/configuration/security/secret.rst b/docs/root/configuration/security/secret.rst
@@ -26,6 +26,16 @@ SDS server
 A SDS server needs to implement the gRPC service :repo:`SecretDiscoveryService <api/envoy/service/secret/v3/sds.proto>`.
 It follows the same protocol as other :ref:`xDS <xds_protocol>`.
 
+.. note::
+
+    `SPIRE <https://spiffe.io/docs/latest/spire-about/>`_,
+    an open-source reference implementation of the
+    `SPIFFE specification for production identity <https://spiffe.io/>`_,
+    can act as an SDS server for Envoy. See the
+    `SPIRE documentation <https://spiffe.io/docs/latest/microservices/envoy/>`_
+    for how to configure Envoy with SPIFFE and SPIRE.
+
+
 SDS Configuration
 -----------------