Skip to content

Documentation, JWT Builder Workload Identity and JWK Rotation #8529

Description

@jimmy1wu

Feature epic details

Operating systems

Does the documentation apply to all operating systems?

  • Yes
  • No; specify operating systems: ______

** details below are a work in progress **

Summary

Provide a concise summary of your feature. What is the update, why does it matter, and to whom? What do 80% of target users need to know to be most easily productive using your runtime update?

Enhance the JWT Builder to be able to set a workload identity claim, generated by the server, in the JWTs that it issues. This claim cannot be modified via the JwtBuilder API to provide attestation.

Also, add the ability to define the rotation interval of the JWKs used for signing and verifying the JWTs issued by the JWT Builder as well as define the maximum number of JWKs retained by the JWK endpoint for verifying JWTs.

Configuration

List any new or changed properties, parameters, elements, attributes, etc. Include default values and configuration examples where relevant:

Example configuration:

<jwtBuilder
    workloadIdentityClaim="workload-identity"
    jwkRotationTime="60m"
    jwkMaxKeys="3"
/>

Updates to existing topics

To update existing topics, specify a link to the topics that are affected. Include a copy of the current text and the exact text to which it will change. For example: Change ABC to XYZ

Create a new topic

To create a topic, specify a first draft of the topic that you want added and the section in the navigation where the topic should go.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions