Workload Onboarding Plane Instance Configuration
Workload Onboarding Plane Instance Configuration
specifies configuration of the
Workload Onboarding Plane
instance.
apiVersion: config.plane.onboarding.tetrate.io/v1alpha1
kind: OnboardingPlaneInstanceConfiguration
onboardingPlane:
uid: ef67c7b9-10da-4542-ad3b-b95acc1e05ba
tokenIssuer:
jwt:
expiration: 1h
signingKeys:
- filename: /path/to/tls.key
onboardingServer:
port: 8443
transportSecurity:
tls:
certDir: /path/to/dir/
OnboardingPlane
OnboardingPlane specifies configuration of the Workload Onboarding Plane
.
Field | Description | Validation Rule |
---|---|---|
uid | string Is used in the workload authentication flow to prevent replay attacks
that abuse compromised workload credentials intended for a different
installation of the | string = { |
OnboardingPlaneInstanceConfiguration
OnboardingPlaneInstanceConfiguration specifies configuration of the
Workload Onboarding Plane
instance.
Field | Description | Validation Rule |
---|---|---|
onboardingPlane | tetrateio.api.onboarding.private.component.plane.config.v1alpha1.OnboardingPlane | message = { |
tokenIssuer | tetrateio.api.onboarding.private.component.plane.config.v1alpha1.TokenIssuer | message = { |
onboardingServer | tetrateio.api.onboarding.private.component.plane.config.v1alpha1.OnboardingServer | message = { |
OnboardingServer
Configuration of the gRPC
server that implements Workload Onboarding API
.
Field | Description | Validation Rule |
---|---|---|
port | int32 | int32 = { |
host | string | – |
transportSecurity | tetrateio.api.onboarding.private.types.config.v1alpha1.ServerTransportSecurity | – |
TokenIssuer
Configuration of the built-in Workload Onboarding Token Issuer
.
Field | Description | Validation Rule |
---|---|---|
jwt | tetrateio.api.onboarding.private.component.plane.config.v1alpha1.TokenIssuer.JwtTokenIssuer oneof _token_issuer | – |
JwtTokenIssuer
Configuration of the built-in JWT Token Issuer.
Field | Description | Validation Rule |
---|---|---|
expiration | google.protobuf.Duration | duration = { |
signingKeys | List of tetrateio.api.onboarding.private.component.plane.config.v1alpha1.TokenIssuer.JwtTokenIssuer.SigningKey | repeated = { |
SigningKey
Signing key.
Field | Description | Validation Rule |
---|---|---|
filename | string | string = { |