[RFC]: Plugin API for CA key provisioning

intel / trusted-certificate-issuer

Trusted Certificate Service (TCS) is a K8s service to protect signing keys using Intel's SGX technology. K8s CSR and cert-manager CR APIs are both supported. TCS also contains integration samples for Istio service mesh and Key Management Reference Application (KMRA).

Apache License 2.0

29 stars 15 forks source link

[RFC]: Plugin API for CA key provisioning #26

Closed avalluri closed 2 years ago

avalluri commented 2 years ago

Defined a protobuf based plugin api, plugins must expose this API on a UNIX domain socket.
Added KRMA referenced plugin.
Removed QuoteAttestation API

FIXES #23

avalluri commented 2 years ago

I think this is not relevant anymore.