Andrea Cosentino created CAMEL-26834:
----------------------------------------
Summary: camel-spiffe - support explicit local SVID identity
selection
Key: CAMEL-26834
URL: https://issues.apache.org/jira/browse/CAMEL-26834
Project: Camel
Issue Type: Improvement
Components: camel-spiffe
Reporter: Andrea Cosentino
Assignee: Andrea Cosentino
h2. Problem / motivation
fetchX509Svid always uses the default SVID. A workload entitled to multiple
identities cannot explicitly select its local X.509 identity through the
component.
h2. Proposed scope
Expose a configuration-only local SPIFFE ID/SVID selector, with corresponding
JSSE selection where the Java SPIFFE SDK supports it. Verify the exact managed
SDK capabilities and do not silently fall back when the selected identity is
absent.
h2. Acceptance criteria / validation
* Multi-SVID fixture verifies selected identity for fetch and applicable TLS
use.
* Missing/removed selected identity fails clearly.
* Default selection remains compatible when unset.
* Selection continues to work across material rotation; document configuration
and metadata.
h2. References
*
https://github.com/apache/camel/blob/5686684cb418/components/camel-spiffe/src/main/java/org/apache/camel/component/spiffe/SpiffeProducer.java#L53
* https://github.com/spiffe/java-spiffe/blob/main/java-spiffe-core/README.md
Source: read-only component audit at 5686684cb418. Recheck current main before
implementing; historical references identify the audited code.
_AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
