spire icon indicating copy to clipboard operation
spire copied to clipboard

Extend spire-server CLI with "append bundle" command

Open azdagron opened this issue 1 year ago • 4 comments

This command would invoke the AppendBundle RPC.

It should probably support:

  • SPIFFE bundle for both JWT and x.509 authorities
  • JWKS for JWT authorities
  • PEM-encoded X.509 certificates for x.509 authorities

This would give standard operators a way to append trusted roots to the bundle without writing a program.

See #5208 for an example

azdagron avatar Jun 18 '24 19:06 azdagron

@azdagron I would like to contribute to this

chamodshehanka avatar Jun 19 '24 22:06 chamodshehanka

Thanks! Assigned

MarcosDY avatar Jun 20 '24 19:06 MarcosDY

Any updates on this?

@azdagron How would removing a ca from the list work? Can you use the appendBundle rpc call to clear things too?

kfox1111 avatar Aug 25 '24 16:08 kfox1111

Due to time constraint, I will need to step back from the task and I apologize for any inconvenience this may cause and appreciate the opportunity to contribute. If there’s someone else who might be interested in taking over, I’d be happy to assist with a handoff.

chamodshehanka avatar Oct 16 '24 07:10 chamodshehanka

This issue is stale because it has been open for 365 days with no activity.

github-actions[bot] avatar Oct 16 '25 22:10 github-actions[bot]

This issue was closed because it has been inactive for 30 days since being marked as stale.

github-actions[bot] avatar Nov 15 '25 22:11 github-actions[bot]