Struct SpiffeWorkloadGrpc 

pub struct SpiffeWorkloadGrpc { /* private fields */ }

SPIFFE Workload API adapter.

Implementations

impl SpiffeWorkloadGrpc

pub const fn new(state: Arc<BrokerState>) -> Self

Build a Workload API service adapter.

Trait Implementations

impl Clone for SpiffeWorkloadGrpc

fn clone(&self) -> SpiffeWorkloadGrpc

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SpiffeWorkloadGrpc

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SpiffeWorkloadApi for SpiffeWorkloadGrpc

type FetchX509SVIDStream = Pin<Box<dyn Stream<Item = Result<X509svidResponse, Status>> + Send>>

Server streaming response type for the FetchX509SVID method.

type FetchX509BundlesStream = Pin<Box<dyn Stream<Item = Result<X509BundlesResponse, Status>> + Send>>

Server streaming response type for the FetchX509Bundles method.

type FetchJWTBundlesStream = Pin<Box<dyn Stream<Item = Result<JwtBundlesResponse, Status>> + Send>>

Server streaming response type for the FetchJWTBundles method.

fn fetch_x509svid<'life0, 'async_trait>( &'life0 self, request: Request<X509svidRequest>, ) -> Pin<Box<dyn Future<Output = Result<Response<Self::FetchX509SVIDStream>, Status>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch X.509-SVIDs for all SPIFFE identities the workload is entitled to, as well as related information like trust bundles and CRLs. As this information changes, subsequent messages will be streamed from the server.

fn fetch_x509_bundles<'life0, 'async_trait>( &'life0 self, request: Request<X509BundlesRequest>, ) -> Pin<Box<dyn Future<Output = Result<Response<Self::FetchX509BundlesStream>, Status>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch trust bundles and CRLs. Useful for clients that only need to validate SVIDs without obtaining an SVID for themself. As this information changes, subsequent messages will be streamed from the server.

fn fetch_jwtsvid<'life0, 'async_trait>( &'life0 self, request: Request<JwtsvidRequest>, ) -> Pin<Box<dyn Future<Output = Result<Response<JwtsvidResponse>, Status>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch JWT-SVIDs for all SPIFFE identities the workload is entitled to, for the requested audience. If an optional SPIFFE ID is requested, only the JWT-SVID for that SPIFFE ID is returned.

fn fetch_jwt_bundles<'life0, 'async_trait>( &'life0 self, request: Request<JwtBundlesRequest>, ) -> Pin<Box<dyn Future<Output = Result<Response<Self::FetchJWTBundlesStream>, Status>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetches the JWT bundles, formatted as JWKS documents, keyed by the SPIFFE ID of the trust domain. As this information changes, subsequent messages will be streamed from the server.

fn validate_jwtsvid<'life0, 'async_trait>( &'life0 self, request: Request<ValidateJwtsvidRequest>, ) -> Pin<Box<dyn Future<Output = Result<Response<ValidateJwtsvidResponse>, Status>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Validates a JWT-SVID against the requested audience. Returns the SPIFFE ID of the JWT-SVID and JWT claims.