<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Workload Identity and Credential Issue" id="29-identity-and-credentials">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1500" pageHeight="800" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.i-pod" value="&lt;b&gt;Build Pod&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico1" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-pod">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.i-agt" value="&lt;b&gt;SPIRE Agent&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="290" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-agt">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.i-srv" value="&lt;b&gt;SPIRE Server&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="530" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-srv">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.i-kc" value="&lt;b&gt;Keycloak&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="760" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-kc">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.i-hbr" value="&lt;b&gt;Harbor&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1000" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-hbr">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.i-ful" value="&lt;b&gt;Fulcio&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1230" y="80" width="210" height="600" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.i-ful">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m7" value="1. workload API" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1533;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1533;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-pod" target="n.i-agt">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m8" value="2. node attestation" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2200;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2200;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-agt" target="n.i-srv">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m9" value="3. entry match" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2867;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2867;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-srv" target="n.i-agt">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="4. SVID · 5 min" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3533;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3533;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-agt" target="n.i-pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="5. token exchange" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4200;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4200;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-pod" target="n.i-hbr">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m12" value="6. validate issuer + claims" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4867;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4867;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-hbr" target="n.i-kc">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m13" value="7. claims accepted" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5533;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5533;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-kc" target="n.i-hbr">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m14" value="8. robot token · 60 min" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6200;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6200;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-hbr" target="n.i-pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m15" value="9. SVID → signing cert" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6867;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6867;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-pod" target="n.i-ful">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m16" value="10. SAN = SPIFFE ID" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7533;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7533;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-ful" target="n.i-pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="11. push apps/checkout" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8200;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8200;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-pod" target="n.i-hbr">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="12. 403 outside scope" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;dashed=1;strokeColor=#b85450;fontColor=#b85450;exitX=0.5;exitY=0.8867;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8867;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.i-hbr" target="n.i-pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Workload Identity and Credential Issue" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1410" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="No push credential exceeds 60 minutes, and no runtime identity is ever issued one. Shared credentials do not exist." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="730" width="1410" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="750" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Security Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="760" width="1410" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
