-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add delegated identity API support to spire-api package #43
Add delegated identity API support to spire-api package #43
Conversation
Signed-off-by: Eitan Yarmush <[email protected]>
Signed-off-by: Eitan Yarmush <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for this work, @EItanya!
@@ -15,10 +15,25 @@ categories = ["cryptography"] | |||
keywords = ["SPIFFE", "SPIRE"] | |||
|
|||
[dependencies] | |||
spiffe = { version = "0.3.1", path = "../spiffe" } | |||
bytes = { version = "1", features = ["serde"] } | |||
spiffe = { path = "../spiffe" } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Considering that the crates in this repository will be versioned independently, it would be prudent to pin the spiffe
dependency to a specific version when publishing the spire-api
crate. This ensures that anyone using a published version of the spire-api
crate will receive a consistent and known-good version of the spiffe
crate. By explicitly specifying the version, we maintain control over the compatibility of the dependencies.
/// * An error occurs while setting up the stream. | ||
/// | ||
/// Individual stream items might also be errors if there's an issue processing the response for a specific update. | ||
pub async fn stream_x509_svids( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like this name for the streaming method. 👌
&spiffe::spiffe_id::TrustDomain::new("example.org".as_ref()) | ||
.expect("Failed to parse trust domain ="), | ||
) | ||
.expect("Failed to get bundle"); | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There should be tests exercising the streaming methods.
55456ec
to
e2e4e50
Compare
Signed-off-by: Eitan Yarmush <[email protected]>
e2e4e50
to
274781a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
* Refactor repository: new `spiffe` folder, new `spire-api` crate, and `spire-api-sdk` submodule (#42) Signed-off-by: Max Lambrecht <[email protected]> * Add delegated identity API support to spire-api package (#43) Signed-off-by: Eitan Yarmush <[email protected]> * Refactoring `spiffe` crate: Introducing `spiffe-types` and `workload-api` features (#44) Signed-off-by: Max Lambrecht <[email protected]> * Add Releasing Process Documentation for Crates (#45) Signed-off-by: Max Lambrecht <[email protected]> --------- Signed-off-by: Max Lambrecht <[email protected]> Co-authored-by: Eitan Yarmush <[email protected]>
No description provided.