Skip to content

Implement SPIFFE Broker Endpoint & API#6915

Draft
matheuscscp wants to merge 1 commit into
spiffe:mainfrom
matheuscscp:broker-api
Draft

Implement SPIFFE Broker Endpoint & API#6915
matheuscscp wants to merge 1 commit into
spiffe:mainfrom
matheuscscp:broker-api

Conversation

@matheuscscp
Copy link
Copy Markdown

@matheuscscp matheuscscp commented Apr 30, 2026

This is a Work In Progress.

Reference implementation for spiffe/spiffe#340 arndt-s/spiffe#1

api-sdk PR: spiffe/spire-api-sdk#96 plugin-sdk PR: spiffe/spire-plugin-sdk#74

Pull Request check list

  • Commit conforms to CONTRIBUTING.md?
  • Proper tests/regressions included?
  • Documentation updated?

Affected functionality

Description of change

Which issue this PR fixes

Supersedes: #6594

@matheuscscp
Copy link
Copy Markdown
Author

@arndt-s @amartinezfayo @MarcosDY @sorindumitru I spiked through the implementation, will add tests and docs after an initial review. PTAL 🙏

@matheuscscp
Copy link
Copy Markdown
Author

@sorindumitru I updated the PR according to the spire-plugin-sdk changes your requested (remove workloadattestorv2), PTAL 🙏

https://github.com/spiffe/spire/compare/1162ed0003f12d4b39bce24229b12fe2432a1101..66717590424544388b3ccd6baa08745d3f5df61f

Copy link
Copy Markdown
Member

@arndt-s arndt-s left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Structural-wise I believe this is looking good.

Comment thread conf/agent/agent_full.conf Outdated
Comment thread pkg/agent/broker/api/service.go Outdated
Comment thread pkg/agent/broker/endpoints.go Outdated
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go Outdated
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go Outdated
@matheuscscp
Copy link
Copy Markdown
Author

@matheuscscp matheuscscp force-pushed the broker-api branch 2 times, most recently from e492e76 to 2a814e3 Compare May 6, 2026 12:00
Comment thread cmd/spire-agent/cli/run/run.go Outdated
Comment thread cmd/spire-agent/cli/run/run.go
Comment thread conf/agent/agent_full.conf Outdated
Comment thread cmd/spire-agent/cli/run/run.go
Comment thread pkg/agent/attestor/node/result.go Outdated
Comment thread pkg/agent/attestor/workload/workload.go
Comment thread pkg/agent/broker/endpoints.go
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go
@matheuscscp matheuscscp force-pushed the broker-api branch 2 times, most recently from 0ba6010 to 97772d7 Compare May 8, 2026 00:11
Comment thread pkg/agent/agent.go Outdated
Comment thread pkg/agent/broker/endpoints.go
Comment thread pkg/agent/broker/api/service.go Outdated
Comment thread pkg/agent/broker/endpoints.go
Comment thread pkg/agent/broker/api/service.go Outdated
Comment thread pkg/agent/broker/api/service.go
Comment thread pkg/agent/broker/api/service.go
Comment thread pkg/agent/broker/api/service.go Outdated
Comment thread pkg/agent/broker/api/service.go Outdated
Comment thread pkg/agent/manager/cache/lru_cache.go
Comment thread pkg/agent/manager/manager.go
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go Outdated
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go Outdated
Comment thread pkg/agent/plugin/workloadattestor/k8s/k8s.go Outdated
@matheuscscp matheuscscp force-pushed the broker-api branch 9 times, most recently from 7ed5c34 to fe96fc1 Compare May 17, 2026 15:53
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants