Add hint string to X509SVID and JWTSVID data structures (#212)

Signed-off-by: Guilherme Carvalho <[email protected]>
spiffe · Feb 25, 2023 · cbbc88f · cbbc88f
1 parent 5e0b692
commit cbbc88f
Show file tree

Hide file tree

Showing 2 changed files with 110 additions and 71 deletions.
diff --git a/v2/proto/spiffe/workload/workload.pb.go b/v2/proto/spiffe/workload/workload.pb.go
diff --git a/v2/proto/spiffe/workload/workload.proto b/v2/proto/spiffe/workload/workload.proto
@@ -74,6 +74,12 @@ message X509SVID {
 
     // Required. ASN.1 DER encoded X.509 bundle for the trust domain.
     bytes bundle = 4;
+
+    // Optional. An operator-specified string used to provide guidance on how this
+    // identity should be used by a workload when more than one SVID is returned.
+    // For example, `internal` and `external` to indicate an SVID for internal or
+    // external use, respectively.
+    string hint = 5;
 }
 
 // The X509BundlesRequest message conveys parameters for requesting X.509
@@ -115,6 +121,12 @@ message JWTSVID {
 
     // Required. Encoded JWT using JWS Compact Serialization.
     string svid = 2;
+
+    // Optional. An operator-specified string used to provide guidance on how this
+    // identity should be used by a workload when more than one SVID is returned.
+    // For example, `internal` and `external` to indicate an SVID for internal or
+    // external use, respectively.
+    string hint = 3;
 }
 
 // The JWTBundlesRequest message conveys parameters for requesting JWT bundles.