v4

latestOpenAPI 3.0.32026-07-312,317012.2 MB
SPIFFE Auth

Attach SPIFFE Auth configuration onto machine identity

post/api/v1/auth/spiffe-auth/identities/{identityId}

Path parameters

identityIdstring required

The ID of the machine identity to attach the configuration onto.

Request body

trustDomainstring required

The SPIFFE trust domain (e.g. prod.example.com).

allowedSpiffeIdsstring required

Comma-separated list of allowed SPIFFE ID patterns. Supports picomatch glob patterns (e.g. spiffe://prod.example.com/**).

allowedAudiencesstring required

Comma-separated list of allowed audiences for JWT-SVID validation.

accessTokenTTLinteger

The lifetime for an access token in seconds.

accessTokenMaxTTLinteger

The maximum lifetime for an access token in seconds.

accessTokenNumUsesLimitinteger

The maximum number of times that an access token can be used.

Response

Default Response