Skip to content

feat: Add skeleton for the spiffe mTLS integration#695

Merged
gtema merged 1 commit into
mainfrom
spiffe
May 8, 2026
Merged

feat: Add skeleton for the spiffe mTLS integration#695
gtema merged 1 commit into
mainfrom
spiffe

Conversation

@gtema
Copy link
Copy Markdown
Collaborator

@gtema gtema commented May 7, 2026

  • add concept of interfaces with various listener types
  • add spiffe based tls listener for the rest api passing SVID through
    request extensions up to the extractors for evaluation
  • pass interface as extension to the request to be able to analyze it in
    policy
  • prepare raft app for the spiffe support

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 7, 2026

🦢 Load Test Results

Goose Attack Report

Plan Overview

Action Started Stopped Elapsed Users
Increasing 26-05-08 10:19:14 26-05-08 10:19:16 00:00:02 0 → 4
Maintaining 26-05-08 10:19:16 26-05-08 10:19:46 00:00:30 4
Decreasing 26-05-08 10:19:46 26-05-08 10:19:46 00:00:00 0 ← 4

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET 6733 0 17.34 10 41 224.43 0.00
Aggregated 6733 0 17.34 10 41 224.43 0.00

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET 15 17 21 22 24 25 27 41
Aggregated 15 17 21 22 24 25 27 41

Status Code Metrics

Method Name Status Codes
GET 6,733 [200]
Aggregated 6,733 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
ListUsers
0.0 0 0 0.00 0 0 0.00 0.00
0.1 4143 0 14.02 10 25 138.10 0.00
ValidateToken
1.0 0 0 0.00 0 0 0.00 0.00
1.1 2590 0 22.72 18 41 86.33 0.00
Aggregated 6733 0 17.34 10 41 224.43 0.00

Scenario Metrics

Transaction # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
ListUsers 2 4141 14.02 10 25 138.03 2070.50
ValidateToken 2 2588 22.72 18 41 86.27 1294.00
Aggregated 4 6729 17.37 10 41 224.30 3364.50

View full report

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 7, 2026

🐰 Bencher Report

Branchspiffe
Testbedubuntu-latest
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
nanoseconds (ns)
(Result Δ%)
Upper Boundary
nanoseconds (ns)
(Limit %)
Command_Serde/apply/remove📈 view plot
🚷 view threshold
121,460.00 ns
(+0.37%)Baseline: 121,017.77 ns
173,777.68 ns
(69.89%)
Command_Serde/apply/set📈 view plot
🚷 view threshold
130,460.00 ns
(+3.74%)Baseline: 125,752.54 ns
181,150.47 ns
(72.02%)
Command_Serde/pack/delete📈 view plot
🚷 view threshold
127.99 ns
(+3.41%)Baseline: 123.77 ns
142.20 ns
(90.01%)
Command_Serde/pack/delete_index📈 view plot
🚷 view threshold
116.89 ns
(+0.71%)Baseline: 116.07 ns
130.81 ns
(89.36%)
Command_Serde/pack/set📈 view plot
🚷 view threshold
204.07 ns
(+0.53%)Baseline: 202.99 ns
225.30 ns
(90.58%)
Command_Serde/pack/set_index📈 view plot
🚷 view threshold
116.95 ns
(+0.40%)Baseline: 116.49 ns
131.91 ns
(88.66%)
Command_Serde/unpack/delete📈 view plot
🚷 view threshold
186.74 ns
(-0.15%)Baseline: 187.03 ns
215.03 ns
(86.84%)
Command_Serde/unpack/delete_index📈 view plot
🚷 view threshold
157.42 ns
(-3.22%)Baseline: 162.66 ns
183.68 ns
(85.70%)
Command_Serde/unpack/set📈 view plot
🚷 view threshold
245.55 ns
(+0.50%)Baseline: 244.34 ns
261.22 ns
(94.00%)
Command_Serde/unpack/set_index📈 view plot
🚷 view threshold
156.80 ns
(-2.09%)Baseline: 160.14 ns
181.20 ns
(86.53%)
Payload_encryption/pack/inner📈 view plot
🚷 view threshold
64.20 ns
(-3.44%)Baseline: 66.48 ns
74.93 ns
(85.68%)
Payload_encryption/pack/remove_cmd📈 view plot
🚷 view threshold
119.41 ns
(-5.46%)Baseline: 126.30 ns
145.63 ns
(82.00%)
Payload_encryption/pack/set_cmd📈 view plot
🚷 view threshold
246.87 ns
(+2.45%)Baseline: 240.96 ns
272.44 ns
(90.61%)
Payload_encryption/unpack/inner📈 view plot
🚷 view threshold
169.19 ns
(+3.31%)Baseline: 163.76 ns
179.71 ns
(94.14%)
Payload_encryption/unpack/remove_cmd📈 view plot
🚷 view threshold
193.58 ns
(-3.16%)Baseline: 199.89 ns
225.31 ns
(85.92%)
Payload_encryption/unpack/set_cmd📈 view plot
🚷 view threshold
256.98 ns
(-3.55%)Baseline: 266.43 ns
316.52 ns
(81.19%)
Raft_1Node_Latency/prefix/1node📈 view plot
🚷 view threshold
3,384,600.00 ns
(-2.59%)Baseline: 3,474,686.67 ns
6,537,921.86 ns
(51.77%)
Raft_1Node_Latency/read/1node📈 view plot
🚷 view threshold
593.56 ns
(+9.20%)Baseline: 543.55 ns
829.54 ns
(71.55%)
Raft_1Node_Latency/remove/1node📈 view plot
🚷 view threshold
350,560.00 ns
(+1.35%)Baseline: 345,887.33 ns
495,973.38 ns
(70.68%)
Raft_1Node_Latency/write/1node📈 view plot
🚷 view threshold
359,720.00 ns
(+2.76%)Baseline: 350,056.00 ns
508,712.51 ns
(70.71%)
build_snapshot/default📈 view plot
🚷 view threshold
89,493.00 ns
(+3.72%)Baseline: 86,280.62 ns
103,852.84 ns
(86.17%)
fernet token/project📈 view plot
🚷 view threshold
1,474.80 ns
(-0.25%)Baseline: 1,478.55 ns
1,556.49 ns
(94.75%)
get_data_keyspace📈 view plot
🚷 view threshold
0.31 ns
(-2.09%)Baseline: 0.32 ns
0.36 ns
(86.43%)
get_db📈 view plot
🚷 view threshold
0.31 ns
(-1.99%)Baseline: 0.32 ns
0.36 ns
(86.20%)
get_fernet_token_timestamp/project📈 view plot
🚷 view threshold
132.96 ns
(-11.82%)Baseline: 150.78 ns
173.26 ns
(76.74%)
get_keyspace📈 view plot
🚷 view threshold
4.27 ns
(-2.24%)Baseline: 4.37 ns
4.96 ns
(85.98%)
🐰 View full continuous benchmarking report in Bencher

@gtema gtema force-pushed the spiffe branch 8 times, most recently from 4bfdc22 to 09c2e0e Compare May 8, 2026 08:45
- add concept of interfaces with various listener types
- add spiffe based tls listener for the rest api passing SVID through
  request extensions up to the extractors for evaluation
- pass interface as extension to the request to be able to analyze it in
  policy
- prepare raft app for the spiffe support
@gtema gtema merged commit 37acbe0 into main May 8, 2026
31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant