Struct WorkloadApiClient 

pub struct WorkloadApiClient { /* private fields */ }

A Workload API client that manages SVID lifecycle.

In SPIFFE/SPIRE deployments, workloads fetch SVIDs from the local SPIRE agent over a Unix domain socket. This client tracks the current SVID(s) and handles rotation.

Implementations

impl WorkloadApiClient

pub fn new(config: WorkloadApiConfig) -> Self

Create a new Workload API client.

pub fn endpoint(&self) -> &str

Return the configured endpoint.

pub fn rotation_interval(&self) -> Duration

Return the rotation interval.

pub async fn store_x509_svid(&self, svid: SvidResponse)

Store an X.509-SVID (e.g., after receiving it from the Workload API).

pub async fn store_jwt_svid(&self, svid: SvidResponse)

Store a JWT-SVID.

pub async fn get_x509_svid(&self, spiffe_id: &str) -> Option<SvidResponse>

Get the current X.509-SVID for a given SPIFFE ID.

pub async fn get_jwt_svid(&self, spiffe_id: &str) -> Option<SvidResponse>

Get the current JWT-SVID for a given SPIFFE ID.

pub async fn get_bundle(&self, trust_domain: &str) -> Option<Vec<Vec<u8>>>

Get the trust bundle for a given trust domain.

pub async fn needs_rotation(&self) -> Vec<String>

Check if any X.509-SVID needs rotation (within 20% of expiry window).

pub async fn cleanup_expired(&self)

Remove expired SVIDs.

pub async fn x509_count(&self) -> usize

Number of stored X.509-SVIDs.

pub async fn jwt_count(&self) -> usize

Number of stored JWT-SVIDs.