Workload Onboarding Agent Credential Plugin

Workload Onboarding Agent Credential Plugin procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

CredentialPlugin

Plugin that procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

GetCredential

GetCredentialRequest

Request to procure a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

Field	Description	Validation Rule
audience	string REQUIRED Credential audience, i.e. UID of the Workload Onboarding Plane the workload is onboarding to. Is used to prevent replay attacks that attempt to reuse compromised credential to authenticate to a different Workload Onboarding Plane.	string = {   min_len: 1 }

GetCredentialResponse

Response to the credential request.

Field	Description	Validation Rule
credential	google.protobuf.Any REQUIRED Platform-specific credential that authenticates the requesting workload to the Workload Onboarding Plane.	–
expiresAt	google.protobuf.Timestamp REQUIRED Expiration time of the credential.	–