# Spire Workload

This crate provides a number of useful APIs to help Rust programs use Spire workload API:

- `SpiffeID` and `SpiffeIDMatcher` help parse a Spiffe ID and match against pre-defined patterns

- `init` function helps a workload talk to spire agent and fetch its identity

- `make_client_config` and `make_server_config` helps generate `rustls::ClientConfig` and `rustls::ServerConfig` respectively. These configs support hot reloading of spire provided identites and verify spiffe ID during TLS handshake.

## Examples

1. `examples/dump.rs` shows how to use spire-workload to dump current identities cached by spire agent

2. `examples/verify_jwt.rs` shows how to verify a spire issued JWT token with spire agent.

## License

Apache 2.0