Attestation

Register new workload

The endpoint creates a new instance id from a template. This allows creating a new workload instance. For each image in the template, the most current version is stored to fix a workload to a specific version. There is no way to update the versions, but newer versions are allowed during attestation.

POSThttp://localhost:8200/v1/auth/ratls/attestation/create

Body

application/json

template*string

project*string

webhook*string

Response

200

Created Instance

Body

application/json

data*object

Request

JavaScriptCurl

const response = await fetch('http://localhost:8200/v1/auth/ratls/attestation/create', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "template": "text",
      "project": "text",
      "webhook": "text"
    }),
});
const data = await response.json();

Response

{
  "data": {
    "instance": "text"
  }
}

Ask for challenge nonce

The endpoint creates a nonce to prevent replay of outdated attestation reports. It is associated with an instance id to bind the attestation to an instance id.

POSThttp://localhost:8200/v1/auth/ratls/attestation/nonce

Body

application/json

instance*string

Response

200

Created Nonce

Body

application/json

data*object

Request

JavaScriptCurl

const response = await fetch('http://localhost:8200/v1/auth/ratls/attestation/nonce', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "instance": "text"
    }),
});
const data = await response.json();

Response

{
  "data": {
    "nonce": "text"
  }
}

Verify attestation report

The endpoint verifies the attestation report. It is associated with an attestatuib quote, instance id and resource.

POSThttp://localhost:8200/v1/auth/ratls/attestation/verify

Body

application/json

quote*string

instance*string

resource*string

Response

200

Attested for Metadata

Body

application/json

auth*object

Request

JavaScriptCurl

const response = await fetch('http://localhost:8200/v1/auth/ratls/attestation/verify', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "quote": "text",
      "instance": "text",
      "resource": "text"
    }),
});
const data = await response.json();

Response

{
  "auth": {
    "client_token": "text",
    "metadata": {
      "instance": "text",
      "measurement": "text",
      "image": "text",
      "version": "text",
      "project": "text"
    }
  }
}