v2

latestOpenAPI 3.0.3Apache 2.0raw.githubusercontent.com2026-01-12412664.0 KB
Bootstrap

Bootstrap Agent Identity from Kubernetes

Bootstrap an agent identity using a Kubernetes Service Account Token (SAT). This allows agents running in Kubernetes to automatically obtain cryptographic identities.

post/auth/bootstrap/kubernetes

Request body

satstring required

Kubernetes Service Account Token

Example request

{
  "sat": "eyJhbGciOiJSUzI1NiIs..."
}

Response

Agent identity bootstrapped successfully

agent_idstring
private_key_b64string base64

Base64 encoded private key (returned only once)

public_key_b64string base64

Base64 encoded public key

Example response

{
  "agent_id": "agent-bootstrapped-1234",
  "private_key_b64": "MC4CAQAwBQYDK2VwBCIEIA...",
  "public_key_b64": "MCowBQYDK2VwAyEA..."
}