saltlick

The peering directory for goatnets that federate with each other.

Listing grants nothing. Each party publishes a signed pointer: who it is, where its signed federation package can be fetched, the package's digest, and an expiry date. A party with no public host of its own keeps its package, its CA certificate and its SPIFFE trust bundle here, beside its entry, each served with the signature of the key that uploaded it. A counterparty's federation driver looks the party up, fetches the files, and checks the signatures, the digest and the CA fingerprint itself. This directory does not vouch for who published an entry; the two parties read each other's verifying key and CA fingerprint aloud once, by voice.

Parties listed

No parties are listed yet.

Using it

Run the goatcore federation driver with FED_DIRECTORY_URL set to this address. In the package-exchange phase it uploads your package and CA certificate here (unless FED_PACKAGE_URL names your own host), publishes your pointer, fetches the counterparty's package and CA, and prints a compatibility report. Nothing else is required of either party.

API

RequestReturns
GET /v1/partiesThe list above, as JSON
GET /v1/parties/<id>The stored entry, byte for byte
PUT /v1/parties/<id>Publish or replace an entry; the first key to claim a name keeps it
DELETE /v1/parties/<id>Remove an entry and the files it hosts, signed by its bound key
GET /v1/parties/<id>/packageThe party's signed federation package, byte for byte
PUT /v1/parties/<id>/packageHost or replace the package, signed by the entry's bound key
GET /v1/parties/<id>/caThe party's CA certificate(s), PEM, byte for byte
PUT /v1/parties/<id>/caHost or replace the CA certificate(s), signed by the entry's bound key
GET /v1/parties/<id>/spiffe-bundleThe party's SPIFFE trust bundle, JSON, byte for byte
PUT /v1/parties/<id>/spiffe-bundleHost or replace the SPIFFE trust bundle, signed by the entry's bound key
GET /v1/specThe entry formats this instance accepts
GET /healthzLiveness

Source: github.com/USAREUR-AF/saltlick ยท Apache-2.0