SPIRE / spire-headless

Enable this only if you need SPIFFE workload identity delegation for AI agents.

Set:

ICP_SERVICE_URL=http://spire-headless:7001

Then:

• Add spire-headless to a Docker Compose override
• Configure required SPIFFE_* variables in .env