{ "opencollection": "1.0.0", "info": { "name": "SPIFFE Federation Endpoint Bundle API", "version": "1.0" }, "items": [ { "info": { "name": "Bundle", "type": "folder" }, "items": [ { "info": { "name": "SPIFFE Get trust bundle", "type": "http" }, "http": { "method": "GET", "url": "https://{trust-domain}/spiffe/v1/bundle", "headers": [ { "name": "Accept", "value": "" } ] }, "docs": "Returns the current trust bundle for this SPIFFE trust domain as a JWKS (JSON Web Key Set) document. The trust bundle contains the root CA certificates that are used to validate X.509-SVIDs and JWT-SVIDs issued by this trust domain. Foreign SPIFFE implementations poll this endpoint to stay synchronized with trust bundle updates, enabling cross-domain workload authentication. The response is a standard JWKS document where each key entry represents a root CA certificate encoded as an X.509 certifi" } ] } ], "bundled": true }