SPIRE's answer to GetAuthorizedEntries: the entries reachable from an agent's own SPIFFE ID through the node aliases its selectors match.
the agent's SPIFFE ID
the trust domain
the live entries the agent is authorized for
SPIRE's answer to GetAuthorizedEntries: the entries reachable from an agent's own SPIFFE ID through the node aliases its selectors match.