EnvoyXfccSpiffeOptions
Defined in: src/http/spiffe.ts:619
Configuration for Envoy’s sanitized X-Forwarded-Client-Cert evidence.
Properties
Section titled “Properties”header?
Section titled “header?”readonly optional header?: string;Defined in: src/http/spiffe.ts:625
XFCC header name; defaults to X-Forwarded-Client-Cert.
maxHeaderBytes?
Section titled “maxHeaderBytes?”readonly optional maxHeaderBytes?: number;Defined in: src/http/spiffe.ts:627
Maximum accepted XFCC header size.
trustDomains
Section titled “trustDomains”readonly trustDomains: Iterable<string>;Defined in: src/http/spiffe.ts:621
SPIFFE trust domains accepted from validated workload IDs.
trustedProxyAddresses
Section titled “trustedProxyAddresses”readonly trustedProxyAddresses: Iterable<string>;Defined in: src/http/spiffe.ts:623
Exact normalized Envoy IP literals permitted to assert evidence.