Attestations

Create attestation

PUT/v1/auth/ratls/attestations

Body

application/json

created*integer (int64)

Creation timestamp, set by the plugin

description*string

Description for this workload

events*string

A URL to a webhook that is called with the attestation result

name*string

Name for this workload

namespace*string

The target namespace for the auth token after verification

nonce*string

Nonce for the report

policy*string

Policy for this workload

reportstring

Request only. The report to verify, encoded as base64

totpstring

Request only. The update totp for the policy of the workload

updated*integer (int64)

Update timestamp, set by the plugin whenever a change is made to the workload

uuid*string

Workload Identifier, generated by the plugin

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "created": 0,
      "description": "text",
      "events": "text",
      "name": "text",
      "namespace": "text",
      "nonce": "text",
      "policy": "text",
      "updated": 0,
      "uuid": "text"
    }),
});
const data = await response.json();

Response

200

{
  "data": {
    "created": 0,
    "description": "text",
    "events": "text",
    "name": "text",
    "namespace": "text",
    "nonce": "text",
    "policy": "text",
    "report": "text",
    "totp": "text",
    "updated": 0,
    "uuid": "text"
  }
}

Update attestation

POST/v1/auth/ratls/attestations

Body

application/json

created*integer (int64)

Creation timestamp, set by the plugin

description*string

Description for this workload

events*string

A URL to a webhook that is called with the attestation result

name*string

Name for this workload

namespace*string

The target namespace for the auth token after verification

nonce*string

Nonce for the report

policy*string

Policy for this workload

reportstring

Request only. The report to verify, encoded as base64

totpstring

Request only. The update totp for the policy of the workload

updated*integer (int64)

Update timestamp, set by the plugin whenever a change is made to the workload

uuid*string

Workload Identifier, generated by the plugin

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "created": 0,
      "description": "text",
      "events": "text",
      "name": "text",
      "namespace": "text",
      "nonce": "text",
      "policy": "text",
      "updated": 0,
      "uuid": "text"
    }),
});
const data = await response.json();

Response

200

{
  "data": {
    "created": 0,
    "description": "text",
    "events": "text",
    "name": "text",
    "namespace": "text",
    "nonce": "text",
    "policy": "text",
    "report": "text",
    "totp": "text",
    "updated": 0,
    "uuid": "text"
  }
}

List attestations

GET/v1/auth/ratls/attestations/

Query parameters

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations/?list=true', {
    method: 'GET',
    headers: {},
});
const data = await response.json();

Response

200

{
  "data": {
    "keys": []
  }
}

Read attestation

GET/v1/auth/ratls/attestations/{uuid}

Path parameters

uuid*string

Workload Identifier, generated by the plugin

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations/{uuid}', {
    method: 'GET',
    headers: {},
});
const data = await response.json();

Response

200

{
  "data": {
    "created": 0,
    "description": "text",
    "events": "text",
    "name": "text",
    "namespace": "text",
    "nonce": "text",
    "policy": "text",
    "report": "text",
    "totp": "text",
    "updated": 0,
    "uuid": "text"
  }
}

Delete attestation

DELETE/v1/auth/ratls/attestations/{uuid}

Path parameters

uuid*string

Workload Identifier, generated by the plugin

Response

204

empty body

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations/{uuid}', {
    method: 'DELETE',
    headers: {},
});
const data = await response.json();

Update nonce

POST/v1/auth/ratls/attestations/{uuid}/nonce

Path parameters

uuid*string

Workload Identifier, generated by the plugin

Body

application/json

created*integer (int64)

Creation timestamp, set by the plugin

description*string

Description for this workload

events*string

A URL to a webhook that is called with the attestation result

name*string

Name for this workload

namespace*string

The target namespace for the auth token after verification

nonce*string

Nonce for the report

policy*string

Policy for this workload

reportstring

Request only. The report to verify, encoded as base64

totpstring

Request only. The update totp for the policy of the workload

updated*integer (int64)

Update timestamp, set by the plugin whenever a change is made to the workload

uuid*string

Workload Identifier, generated by the plugin

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations/{uuid}/nonce', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "created": 0,
      "description": "text",
      "events": "text",
      "name": "text",
      "namespace": "text",
      "nonce": "text",
      "policy": "text",
      "updated": 0,
      "uuid": "text"
    }),
});
const data = await response.json();

Response

200

{
  "data": {
    "created": 0,
    "description": "text",
    "events": "text",
    "name": "text",
    "namespace": "text",
    "nonce": "text",
    "policy": "text",
    "report": "text",
    "totp": "text",
    "updated": 0,
    "uuid": "text"
  }
}

Write or verify report

POST/v1/auth/ratls/attestations/{uuid}/report

Path parameters

uuid*string

Workload Identifier, generated by the plugin

Body

application/json

created*integer (int64)

Creation timestamp, set by the plugin

description*string

Description for this workload

events*string

A URL to a webhook that is called with the attestation result

name*string

Name for this workload

namespace*string

The target namespace for the auth token after verification

nonce*string

Nonce for the report

policy*string

Policy for this workload

reportstring

Request only. The report to verify, encoded as base64

totpstring

Request only. The update totp for the policy of the workload

updated*integer (int64)

Update timestamp, set by the plugin whenever a change is made to the workload

Response

200

OK

Body

application/json

authobject

dataobject

Request

JavaScriptCurlPython

const response = await fetch('/v1/auth/ratls/attestations/{uuid}/report', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "created": 0,
      "description": "text",
      "events": "text",
      "name": "text",
      "namespace": "text",
      "nonce": "text",
      "policy": "text",
      "updated": 0
    }),
});
const data = await response.json();

Response

200

{
  "data": {
    "created": 0,
    "description": "text",
    "events": "text",
    "name": "text",
    "namespace": "text",
    "nonce": "text",
    "policy": "text",
    "report": "text",
    "totp": "text",
    "updated": 0,
    "uuid": "text"
  }
}