X.509-SVID Cache and Renewal

X.509-SVID Cache and Renewal A sequence diagram generated by Archify. 1. Request SVID 2. Attest caller 3. Attested selectors 4. Entries and cache 5. Valid cache may serve 6. On miss / renewal 7. Authorize agent / entry 8. Sign certificate 9. Certificate chain 10. Synchronize certificate 11. Certificate · key · bundle 12. API stream update Local attestation and cache Conditional issuance/renewal path Update delivery Application · Workload · Sequence participant Application Workload Workload API · SPIRE Agent · Unix Socket · Sequence participant Workload API SPIRE Agent · Unix Socket Agent Cache · Entries · SVIDs · keys · Sequence participant Agent Cache Entries · SVIDs · keys Attestor · SPIRE Agent · Workload · Sequence participant Attestor SPIRE Agent · Workload Registration · SPIRE Server · entries · Sequence participant Registration SPIRE Server · entries Node API · SPIRE Server · Sequence participant Node API SPIRE Server CA Signing · SPIRE Server · Sequence participant CA Signing SPIRE Server Legend request return default message