An experiment in transaction tokens and generalizable trust architecture.
parsec is an implementation of ext_authz and token exchange. It is intended to be used by the perimeter of a trust domain in order to:
- abstract away validating credentials from external trust domains (removing those credentials for services within the trust domain)
- issue trusted authorization context for a call chain (transaction token)
It is intended to be used as part of a general federated trust architecture that defines a (1) workload trust domain (expected to be abstracted in the network e.g. through a service mesh) and (2) a [potentially wider] transaction trust domain, established by this service as a transction token issuer.
Log in to the required registries, then run the docker-build-push target with your image destination. The base image is pulled from registry.access.redhat.com during the build, so both logins are required.
podman login quay.io # or: docker login quay.io
podman login registry.access.redhat.com # or: docker login registry.access.redhat.com
make docker-build-push IMAGE=quay.io/your-org/parsec
If the build fails with an authentication error mentioning registry.access.redhat.com, ensure you are logged in using your Red Hat Customer Portal credentials. See the Red Hat Registry Authentication guide for details.
podman is used automatically if available, otherwise docker is used. Override with DOCKER=docker make docker-build-push IMAGE=quay.io/your-org/parsec.