Skip to main content
logoTetrate Service BridgeVersion: 1.10.x

Workload Onboarding Agent Credential Plugin

Workload Onboarding Agent Credential Plugin procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

CredentialPlugin

Plugin that procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

GetCredential

GetCredentialRequest

Request to procure a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

FieldDescriptionValidation Rule

audience

string
REQUIRED
Credential audience, i.e. UID of the Workload Onboarding Plane the workload is onboarding to.

Is used to prevent replay attacks that attempt to reuse compromised credential to authenticate to a different Workload Onboarding Plane.

string = {
  min_len: 1
}

GetCredentialResponse

Response to the credential request.

FieldDescriptionValidation Rule

credential

google.protobuf.Any
REQUIRED
Platform-specific credential that authenticates the requesting workload to the Workload Onboarding Plane.

expiresAt

google.protobuf.Timestamp
REQUIRED
Expiration time of the credential.