FetchInitialBundleSet fetches a BundleSet of trust bundles from the Auth Server.

IssueJWTWorkloadIdentity uses a given client and selector to issue a single or multiple JWT-SVID workload identity credentials.

IssueX509WorkloadIdentity uses a given client and selector to issue a single or multiple X509-SVID workload identity credentials.

MarshalX509Bundle converts a trust bundle's certs to raw bytes.

NewTrustBundleCache creates a new TrustBundleCache.

WorkloadIdentitiesLogValue returns []slog.Value for a slice of *workloadidentityv1.Credential.

WorkloadIdentityLogValue returns a slog.Value for a given *workloadidentityv1pb.Credential.

TrustBundleCache maintains a local, subscribable cache of trust domains and their trust bundles.

TrustBundleCacheConfig is the configuration for a TrustBundleCache.