SPIFFE Auth

Attach SPIFFE Auth configuration onto machine identity

post/api/v1/auth/spiffe-auth/identities/{identityId}

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/auth/spiffe-auth/identities/{identityId}
  • Auth
    HTTP bearer

Path parameters

identityIdstring required

The ID of the machine identity to attach the configuration onto.

Request body

trustDomainstring required

The SPIFFE trust domain (e.g. prod.example.com).

allowedSpiffeIdsstring required

Comma-separated list of allowed SPIFFE ID patterns. Supports picomatch glob patterns (e.g. spiffe://prod.example.com/**).

allowedAudiencesstring required

Comma-separated list of allowed audiences for JWT-SVID validation.

accessTokenTTLinteger

The lifetime for an access token in seconds.

accessTokenMaxTTLinteger

The maximum lifetime for an access token in seconds.

accessTokenNumUsesLimitinteger

The maximum number of times that an access token can be used.

Response

Default Response

Changes

No recorded changes to this operation across all 65 revisions of this API.