/spire-workload-rs

APIs to help Rust programs use Spire workload API

Primary LanguageRustApache License 2.0Apache-2.0

Spire Workload

This crate provides a number of useful APIs to help Rust programs use Spire workload API:

  • SpiffeID and SpiffeIDMatcher help parse a Spiffe ID and match against pre-defined patterns

  • init function helps a workload talk to spire agent and fetch its identity

  • make_client_config and make_server_config helps generate rustls::ClientConfig and rustls::ServerConfig respectively. These configs support hot reloading of spire provided identites and verify spiffe ID during TLS handshake.

Examples

  1. examples/dump.rs shows how to use spire-workload to dump current identities cached by spire agent

  2. examples/verify_jwt.rs shows how to verify a spire issued JWT token with spire agent.

License

Apache 2.0