smallstep/step-sds repository overview

⁠step-sds

The secret discovery service (SDS)⁠ simplifies certificate management and was originally created by the Envoy project to provide a flexible API to deliver secrets/certificates to the Envoy proxy.

Step SDS server implements the server-side API of SDS which pushes certificates to the client. Both mTLS and Unix Domain Sockets configuration are supported. Use the one that better suits your environment/requirements.

⁠Signatures

step-sds uses sigstore/cosign⁠ for signing and verifying containers. Here is an example of how to use cosign to verify a container:

COSIGN_EXPERIMENTAL=1 cosign verify smallstep/step-sds:0.2.2

Questions? Ask us on GitHub Discussions⁠ or Discord⁠.