Skip to content

Add spiffe-inspect test command to tbot#39556

Merged
strideynet merged 3 commits intomasterfrom
strideynet/spiffe-tester-tbot
Mar 25, 2024
Merged

Add spiffe-inspect test command to tbot#39556
strideynet merged 3 commits intomasterfrom
strideynet/spiffe-tester-tbot

Conversation

@strideynet
Copy link
Copy Markdown
Contributor

@strideynet strideynet commented Mar 19, 2024

A small command that can be pointed against a Workload API endpoint to ensure it works correctly. I realised this would be useful in the docs so we can assure people they have set up tbot correctly before moving on to configure their application.

changelog: Adds tbot spiffe-inspect for testing the configuration of Teleport Workload Identity.

teleport git:(strideynet/spiffe-tester-tbot) ✗ build/tbot spiffe-inspect --path unix:///Users/noah/code/gravitational/workload-identity-experiment/workload.sock
INFO [TBOT]      Inspecting SPIFFE Workload API Endpoint path:unix:///Users/noah/code/gravitational/workload-identity-experiment/workload.sock tbot/spiffe.go:31
INFO [TBOT]      Received X.509 SVID context from Workload API bundles_count:1 svids_count:2 tbot/spiffe.go:46
SVIDS
- spiffe://leaf.tele.ottr.sh/bar
  - Hint: test-1
  - Expiry: 2024-03-20 10:55:52 +0000 UTC
  - DNS SAN: example.com
  - DNS SAN: foo.example.com
  - IP SAN: 14.1.1.1
- spiffe://leaf.tele.ottr.sh/foo
  - Hint: test-2
  - Expiry: 2024-03-20 10:55:52 +0000 UTC
  - DNS SAN: example.com
  - IP SAN: 14.1.1.1
Trust Bundles
- leaf.tele.ottr.sh

@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from tcsc March 25, 2024 09:24
@strideynet strideynet enabled auto-merge March 25, 2024 10:29
@strideynet strideynet added this pull request to the merge queue Mar 25, 2024
Merged via the queue into master with commit 6609a84 Mar 25, 2024
@strideynet strideynet deleted the strideynet/spiffe-tester-tbot branch March 25, 2024 11:05
@public-teleport-github-review-bot
Copy link
Copy Markdown

@strideynet See the table below for backport results.

Branch Result
branch/v15 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants