bobbylite / bobbylite/service-template
Wire SPIFFE/SPIRE workload identity
- 主要语言
- Python
- 星标
- 0
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
描述
Replace NullIdentityProvider in src/app/identity/provider.py with a real implementation backed by py-spiffe (spiffe.WorkloadApiClient or spiffe.X509Source), fetching SVIDs from the SPIRE Workload API socket (SPIFFE_ENDPOINT_SOCKET env var). Routes and MCP tools should keep depending on the IdentityProvider protocol, not SPIFFE directly.
贡献指南
这个仓库没有索引到贡献指南
调研方向
The work is in src/app/identity/provider.py, replacing NullIdentityProvider. Start by reading the existing provider protocol and the py-spiffe documentation for WorkloadApiClient or X509Source. The SPIFFE endpoint is configured via the SPIFFE_ENDPOINT_SOCKET environment variable. Ensure routes and MCP tools continue to use the IdentityProvider interface without direct SPIFFE dependencies. Test by running the service and verifying identity provisioning works.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- python
- 领域
- authentication, backend, security
- Issue 类型
- 功能
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 活跃度
- 活跃
- 描述清晰度
- 描述清楚
- 新手友好度
- 65/100