Add spire-credentialcomposer-cel support (#587)

* Add spire-credentialcomposer-cel support Signed-off-by: Kevin Fox <[email protected]> * Fix docs Signed-off-by: Kevin Fox <[email protected]> * Bump version Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> * Apply suggestions from code review Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: kfox1111 <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]> Signed-off-by: kfox1111 <[email protected]> Co-authored-by: Faisal Memon <[email protected]>
2025-05-21 11:59:26 -07:00
parent ccfb4905e2
commit d6684bce19
6 changed files with 126 additions and 2 deletions
@@ -0,0 +1,14 @@
+# Details at https://github.com/spiffe/spire-credentialcomposer-cel/blob/main/README.md
+spire-server:
+  credentialComposer:
+    cel:
+      enabled: true
+      jwt:
+        expression: |
+          spire.plugin.server.credentialcomposer.v1.ComposeWorkloadJWTSVIDResponse{
+            attributes: spire.plugin.server.credentialcomposer.v1.JWTSVIDAttributes{
+              claims: request.attributes.claims.mapOverrideEntries(
+                {'newclaim': "value"}
+              )
+            }
+          }