This suite sets up a Kubernetes cluster using Kind and asserts the following:
- SPIRE server attests SPIRE agents by verifying Kubernetes Projected Service
Account Tokens (i.e.
k8s_psat
) via the Token Review API. - K8s Workload attestation is successful against a manually registered workload