Skip to main content

Fetch

warning

This feature is experimental.

Make sure spirlctl in a version of at least v0.18.0 is used.

Unified Access allows developers to fetch SVIDs and bundles locally for development and integration purposes. See serve for a dynamic Workload API variant.

X509-SVID & Bundles​

Use spirlctl to fetch an X509 SVID and its bundle for a specific trust domain

spirlctl exp unified-access fetch x509-svid --trust-domain my-trust-domain

The resulting files will be stored in

  • $HOME/.spirl/unified-access/my-trust-domain/svids/x509-svid-key.pem
  • $HOME/.spirl/unified-access/my-trust-domain/svids/x509-svid.pem

JWT-SVID & Bundles​

Use spirlctl to fetch an JWT SVID for a specific audience and trust domain

spirlctl exp unified-access fetch jwt-svid --trust-domain my-trust-domain --audience my-audience

The resulting SVID will be stored in $HOME/.spirl/unified-access/my-trust-domain/svids/jwt-svid