The original implementation used hashicorp/go-plugin directly with a custom handshake, which SPIRE rejected. Switch to spire-plugin-sdk's pluginmain.Serve() for correct WorkloadAttestor protocol negotiation, implement ConfigServer for plugin_data parsing, and return selector values in key:value format (SPIRE infers the type prefix from the plugin name). Config decoding tries JSON first (chart renders YAML as JSON) then falls back to HCL. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| governance-notifier | ||
| gsap-attestor | ||
| keylime-attestor | ||
| oidc-attestor | ||
| ssh-credential-composer | ||
| substrate-keymanager | ||