https://github.com/bytedance/spire-workload-rs

APIs to help Rust programs use Spire workload API
https://github.com/bytedance/spire-workload-rs

Last synced: about 1 month ago
JSON representation

APIs to help Rust programs use Spire workload API

• Host: GitHub
• URL: https://github.com/bytedance/spire-workload-rs
• Owner: bytedance
• License: apache-2.0
• Created: 2021-08-04T23:17:57.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2022-08-30T02:35:02.000Z (over 2 years ago)
• Last Synced: 2024-11-11T05:38:13.174Z (about 1 month ago)
• Language: Rust
• Homepage:
• Size: 52.7 KB
• Stars: 8
• Watchers: 7
• Forks: 5
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-spiffe-spire - rust spire-workload-rs

README

        
# Spire Workload

This crate provides a number of useful APIs to help Rust programs use Spire workload API:

- `SpiffeID` and `SpiffeIDMatcher` help parse a Spiffe ID and match against pre-defined patterns

- `init` function helps a workload talk to spire agent and fetch its identity

- `make_client_config` and `make_server_config` helps generate `rustls::ClientConfig` and `rustls::ServerConfig` respectively. These configs support hot reloading of spire provided identites and verify spiffe ID during TLS handshake.

## Examples

1. `examples/dump.rs` shows how to use spire-workload to dump current identities cached by spire agent

2. `examples/verify_jwt.rs` shows how to verify a spire issued JWT token with spire agent.

## License

Apache 2.0