* skeleton out rfd
* Restrucutre to highlight the selected options over alternatives
* identify edge cases
* Explain backend key format
* Add spec for heartbeat rpc
* Add API for BotInstance resource
* Add notes on analytics
* Add a brief summary of out of scope improvements
* Add output/services to heartbeat
* Remove services/outputs
* Expand on `tctl` command changes
* Update RFD with revised persistent identity and other changes
This adds a new section on the security requirements for the
persistent bot identity, alongside an updated preference for UUID
identifiers.
This also includes revisions to the "changes to the `token` join
method" to include join count limits by default and set sane
defaults to encourage short lived tokens.
Lastly, various other small changes were applied, like removing
the implementation details for bot instance names in favor of an
explicitly specified bot name and instance identifier.
* Apply code review feedback
* Use consistent field names for authentications and heartbeats
* Apply suggestions from code review
Co-authored-by: Zac Bergquist <[email protected]>
* Address review feedback: mention TPM joining, alternatives, audit
* Update rfd/0162-machine-id-token-join-method-bot-instance.md
* Add details on bot authentication process as it was implemented
We discovered a third authentication option during implementation, so
add details on what we ended up using.
---------
Co-authored-by: Tim Buckley <[email protected]>
Co-authored-by: Zac Bergquist <[email protected]>
rosstimothy