Tetrate Service BridgeVersion: 1.13.x

Workload Onboarding Agent Credential Plugin

Procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

CredentialPlugin

Plugin that procures a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

Request to procure a platform-specific credential that authenticates the workload to the Workload Onboarding Plane.

Field Description Validation Rule

Field	Description	Validation Rule
audience	string REQUIRED Credential audience, i.e. UID of the `Workload Onboarding Plane` the workload is onboarding to. Is used to prevent replay attacks that attempt to reuse compromised credential to authenticate to a different `Workload Onboarding Plane`.	string = { min_len: `1` }

audience

string
REQUIRED
Credential audience, i.e. UID of the Workload Onboarding Plane the workload is onboarding to.

Is used to prevent replay attacks that attempt to reuse compromised credential to authenticate to a different Workload Onboarding Plane.

string = {
min_len: 1
}

Response to the credential request.

Field	Description	Validation Rule
credential	google.protobuf.Any REQUIRED Platform-specific credential that authenticates the requesting workload to the `Workload Onboarding Plane`.	–
expiresAt	google.protobuf.Timestamp REQUIRED Expiration time of the credential.	–