Add can_reattest field to AgentAttributes (spiffe#17)

Signed-off-by: Daniel Feldman <[email protected]>
guilhermocc · Nov 15, 2021 · 1cc72b2 · 1cc72b2
1 parent 63f1e51
commit 1cc72b2
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 16 deletions.
diff --git a/proto/spire/plugin/server/nodeattestor/v1/nodeattestor.pb.go b/proto/spire/plugin/server/nodeattestor/v1/nodeattestor.pb.go
diff --git a/proto/spire/plugin/server/nodeattestor/v1/nodeattestor.proto b/proto/spire/plugin/server/nodeattestor/v1/nodeattestor.proto
@@ -52,4 +52,11 @@ message AgentAttributes {
     // Optional. Selectors values to ascribe to the agent. The type of the
     // selectors will be inferred from the plugin name.
     repeated string selector_values = 2;
+
+    // Optional. If can_reattest is true, then this attestation method
+    // allows an agent to attest multiple times with the same
+    // attestation payload without operator intervention.
+    // This also allows the server to clear out old entries automatically
+    // since they can be easily recreated.
+    bool can_reattest = 3;
 }