Skip to content

CertificateProxySpiffeOptions

Defined in: src/http/spiffe.ts:417

Shared configuration for nginx and Azure certificate-header adapters.

readonly optional certificateHeader?: string;

Defined in: src/http/spiffe.ts:423

Override for the proxy header containing the encoded leaf certificate.


readonly optional maxHeaderBytes?: number;

Defined in: src/http/spiffe.ts:427

Maximum encoded certificate-header size.


readonly trustDomains: Iterable<string>;

Defined in: src/http/spiffe.ts:419

SPIFFE trust domains accepted from validated workload IDs.


readonly trustedProxyAddresses: Iterable<string>;

Defined in: src/http/spiffe.ts:421

Exact normalized proxy IP literals permitted to assert evidence.


readonly optional verificationHeader?: string;

Defined in: src/http/spiffe.ts:425

Override for the proxy header reporting certificate verification.