[
https://issues.apache.org/jira/browse/CAMEL-26834?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on CAMEL-26834 started by Andrea Cosentino.
------------------------------------------------
> camel-spiffe - support explicit local SVID identity selection
> -------------------------------------------------------------
>
> Key: CAMEL-26834
> URL: https://issues.apache.org/jira/browse/CAMEL-26834
> Project: Camel
> Issue Type: Improvement
> Components: camel-spiffe
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Major
> Labels: authorization, camel-spiffe, component-audit
>
> h2. Problem / motivation
> fetchX509Svid always uses the default SVID. A workload entitled to multiple
> identities cannot explicitly select its local X.509 identity through the
> component.
> h2. Proposed scope
> Expose a configuration-only local SPIFFE ID/SVID selector, with corresponding
> JSSE selection where the Java SPIFFE SDK supports it. Verify the exact
> managed SDK capabilities and do not silently fall back when the selected
> identity is absent.
> h2. Acceptance criteria / validation
> * Multi-SVID fixture verifies selected identity for fetch and applicable TLS
> use.
> * Missing/removed selected identity fails clearly.
> * Default selection remains compatible when unset.
> * Selection continues to work across material rotation; document
> configuration and metadata.
> h2. References
> *
> https://github.com/apache/camel/blob/5686684cb418/components/camel-spiffe/src/main/java/org/apache/camel/component/spiffe/SpiffeProducer.java#L53
> * https://github.com/spiffe/java-spiffe/blob/main/java-spiffe-core/README.md
> Source: read-only component audit at 5686684cb418. Recheck current main
> before implementing; historical references identify the audited code.
> _AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
