spiffe / spire

The SPIFFE Runtime Environment
https://spiffe.io
Apache License 2.0
1.78k stars 472 forks source link

Extend spire-server CLI with "append bundle" command #5234

Open azdagron opened 3 months ago

azdagron commented 3 months ago

This command would invoke the AppendBundle RPC.

It should probably support:

This would give standard operators a way to append trusted roots to the bundle without writing a program.

See #5208 for an example

chamodshehanka commented 3 months ago

@azdagron I would like to contribute to this

MarcosDY commented 3 months ago

Thanks! Assigned

kfox1111 commented 1 month ago

Any updates on this?

@azdagron How would removing a ca from the list work? Can you use the appendBundle rpc call to clear things too?