implement spire with delegated identity api

Author: MikeZappa87

Cargo.lock

@@ -79,8 +79,9 @@ num_cpus = "1.16"
 ppp = "2.3"
 prometheus-client = { version = "0.24" }
 prometheus-parse = "0.2"
-prost = { version = "0.14", default-features = false }
-prost-types = { version = "0.14", default-features = false }
+prost = { version = "0.14.2" }
+prost-types = { version = "0.14.2" }
+tonic-prost = { version = "0.14.2" }
 rand = { version = "0.9" , features = ["small_rng"]}
 rcgen = { version = "0.14", optional = true, features = ["pem"] }
 rustls = { version = "0.23", features = ["tls12"], default-features = false }
@@ -96,8 +97,7 @@ tls-listener = { version = "0.11" }
 tokio = { version = "1.44", features = ["full", "test-util"] }
 tokio-rustls = { version = "0.26", default-features = false }
 tokio-stream = { version = "0.1", features = ["net"] }
-tonic = { version = "0.14", default-features = false, features = ["codegen"] }
-tonic-prost = { version = "0.14", default-features = false }
+tonic = { version = "0.14.2", features = ["codegen", "transport"] }
 tower = { version = "0.5", features = ["full"] }
 tracing = { version = "0.1"}
 tracing-subscriber = { version = "0.3", features = ["registry", "env-filter", "json"] }
@@ -117,7 +117,11 @@ tracing-core = "0.1"
 tracing-appender = "0.2"
 tokio-util = { version = "0.7", features = ["io-util"] }
 educe = "0.6"
-tempfile = { version = "3.21", optional = true}
+spire-api = "0.3.6"
+spiffe = "0.7"
+tempfile = { version = "3.23", optional = true}
+hyperlocal = "0.9.1"
+mockall = "0.14.0"
 
 [target.'cfg(target_os = "linux")'.dependencies]
 netns-rs = "0.1"
@@ -157,7 +161,7 @@ local-ip-address = "0.6"
 matches = "0.1"
 test-case = "3.3"
 oid-registry = "0.8"
-rcgen = { version = "0.14", features = ["pem", "x509-parser"] }
+rcgen = { version = "0.14", features = ["pem", "x509-parser", "crypto"] }
 x509-parser = { version = "0.17", default-features = false, features = ["verify"] }
 time = "0.3"
 ctor = "0.5"

Cargo.toml

@@ -27,6 +27,7 @@ fn main() -> Result<(), anyhow::Error> {
         "proto/authorization.proto",
         "proto/citadel.proto",
         "proto/zds.proto",
+        "proto/cri-api.proto",
     ]
     .iter()
     .map(|name| std::env::current_dir().unwrap().join(name))