Loading...

XML

Word

Printable

Type: Story
Resolution: Done
Priority: Blocker
Fix Version/s: None
Affects Version/s: None
Labels:
None

Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Hypershift client certificate trusts
Feature Link:
OCPSTRAT-591 - HyperShift Core Component Readiness for GA - Part I

Sprint:
Auth - Sprint 227, Auth - Sprint 230, Auth - Sprint 231

SFDC Cases Links:
SFDC Cases Counter:

~~AUTH-311~~ introduced an enhancement. Implement the signer separation described there.

links to

openshift/hypershift#1831: AUTH-323: Separate Aggregate Client trust chain from rootCA

openshift/hypershift#1837: AUTH-323: separate the cluster-distributed client-ca from the rootCA

openshift/hypershift#1858: AUTH-323: Add etcd and etcd metrics certs, add etcd metrics proxy

openshift/hypershift#1883: AUTH-323: pki: remove root-ca from the aggregator CA bundle

openshift/hypershift#1884: AUTH-323: pki: remove root-ca from the client CA bundle

openshift/hypershift#1891: AUTH-323: pki: split out konnectivity certs from the rootCA

openshift/hypershift#1892: AUTH-323: cpo/ctrl/hostedcp: create etcd-signer,rootCA bundl

openshift/hypershift#1948: AUTH-323: remove rootCA from CA bundle for etcd certs

openshift/hypershift#1979: Revert "AUTH-323: remove rootCA from CA bundle for etcd certs"

openshift/hypershift#2149: AUTH-323: konnectivity: split away the rootCA from konnectivity trust

openshift/hypershift#2156: [release-4.12] AUTH-323: pki: split out konnectivity certs from the rootCA

(6 links to)

Assignee:: Stanislav Láznička

Reporter:: Stanislav Láznička

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2022/10/31 8:31 AM

Updated:: 2023/02/10 3:59 PM

Resolved:: 2023/02/10 8:49 AM