INNER CODE UNIT · Java

SERVER_SOCKET

apache/camel-examples · ai-tools-spiffe-opa/spire/entrypoint.sh:24

SERVER_SOCKET=/tmp/spire-server/private/api.sock
TRUST_DOMAIN=example.org
AGENT_ID="spiffe://${TRUST_DOMAIN}/spire-agent"

# 1. the server issues all the identities of the trust domain
"${SPIRE_BIN}/spire-server" run -config /opt/spire/conf/server.conf &

echo "Waiting for the SPIRE server to be ready..."
until "${SPIRE_BIN}/spire-server" healthcheck -socketPath "${SERVER_SOCKET}" > /dev/null 2>&1; do
    sleep 1
done

# the agent verifies the server with the CA bundle of the trust domain
"${SPIRE_BIN}/spire-server" bundle show -socketPath "${SERVER_SOCKET}" > /opt/spire/data/bootstrap.crt

# 2. a registration entry tells SPIRE which workload (selectors) gets which identity (SPIFFE ID).
# The applications of this example each run as a different Unix user, so the uid is the selector.
register() {

View source record →