Skip to content

Conversation

@joydeep049
Copy link

@joydeep049 joydeep049 commented Oct 12, 2025

Fixes #223

Local Tests Passing

cc @yogeshbdeshpande @thomas-fossati @setrofim

Copy link
Collaborator

@setrofim setrofim left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: our current K-V store design does not really allow for a reasonable implementation of GET/DELETE APIs. I think it may be worth re-visiting composite keys for the K-V store before tackling this (though that requires some more design work).

@@ -0,0 +1,182 @@
# GET & DELETE APIs for Veraison Provisioning Interface
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not needed here. Instead the REST API docs (in the docs repo) should be updated to document the new REST API.

Internal structures generally do not need to be documented -- they are of no intrest to people wanting to use the API, and anyone who wants to know how the API is implemented can (and should) just read the actual code.

Finally, explanations of what has been changed/added as part of this work should be docunted in the commit messages for the commits that make those changes, not in some random file.

// GetEndorsementsRequest is the request message for GetEndorsements RPC
type GetEndorsementsRequest struct {
// Optional key prefix to filter endorsements. If empty, returns all endorsements.
KeyPrefix string `json:"key_prefix,omitempty"`
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The notion of a "key" should not be exposed in the REST API. The user of the API is not expected to know that endorsements are stored in a key-value store, let alone what the format of keys is (that is a purely internal implementation detail, and is liable to change at any time).

Instead parameters for narrowing down the results should refer to conceptual attributes of the endorsements, e.g. the attestation scheme.

@joydeep049
Copy link
Author

joydeep049 commented Oct 13, 2025

Note: our current K-V store design does not really allow for a reasonable implementation of GET/DELETE APIs. I think it may be worth re-visiting composite keys for the K-V store before tackling this (though that requires some more design work).

Should we revisit this issue at a later time? I can take a look at the Composite Key issue first.

@setrofim
Copy link
Collaborator

Should we revisit this issue at a later time?

Yes, I think so.

I can take a look at the Composite Key issue first.

That issue needs a bit more design consideration/some discussion before it can be implemented. It has a proposal of what composite keys might look like, but it hasn't been fully thought out. And we should also consider what implications (if any) CoSERV has on the design of the K-V store...

I think it may best to shelve this for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature: Implement GET & DELETE APIs for Veraison Provisioning Interface

2 participants