Adds support for X509 and JWT specific SVID TTLs

This change is in reference to a new SPIRE feature discussed in spiffe/spire#2700 Signed-off-by: Dennis Gove <[email protected]>
spiffe · Sep 21, 2022 · 3c5e450 · 3c5e450
1 parent fa0b17c
commit 3c5e450
Show file tree

Hide file tree

Showing 2 changed files with 84 additions and 27 deletions.
diff --git a/proto/spire/api/types/entry.pb.go b/proto/spire/api/types/entry.pb.go
diff --git a/proto/spire/api/types/entry.proto b/proto/spire/api/types/entry.proto
@@ -53,6 +53,12 @@ message Entry {
 
     // Determines if the issued identity is exportable to a store
     bool store_svid = 12;
+
+    // The time to live for X509-SVID identities issued for this entry (in seconds), overrides ttl if set.
+    int32 x509_svid_ttl = 13;
+
+    // The time to live for JWT-SVID identities issued for this entry (in seconds), overrides ttl if set.
+    int32 jwt_svid_ttl = 14;
 }
 
 // Field mask for Entry fields
@@ -89,4 +95,10 @@ message EntryMask {
 
     // store_svid field mask
     bool store_svid = 12;
+
+    // x509_svid_ttl field mask
+    bool x509_svid_ttl = 13;
+
+    // jwt_svid_ttl field mask
+    bool jwt_svid_ttl = 14;
 }