Guides
In-depth technical guides for Defakto platform topics.
Signing Key Management
Key management options and upstream certificate authorities.
Signing Key Rotation
How signing keys rotate through the keyset lifecycle.
Restrict SVID issuance to labeled namespaces
Gate issuance on namespace labels workloads cannot set.
Extension Examples
Step-by-step extension implementations.