-
Story
-
Resolution: Done
-
Normal
-
cert-manager-1.18
-
None
Extend `istiocsr.operator.openshift.io` with an option to configure Istio cluster ID, which will be included in `IstioCertificateRequest` arg to `CreateCertificate` gRPC method used by Istio to request certifcates. The cluster ID on istio-csr side will be used to verify whether the incoming the certificate request from the Istio is allowed.
Cluster ID is passed as the process arg `--cluster-id` in the istio-csr deployment object.
Acceptance Criteria:
- User configured Cluster ID is present as part of the arg list and when not found `Kubernetes` is used as default value.
- e2es and UTs are added.
- is related to
-
OCPSTRAT-1974 [GA] istio-csr integration for cert-manager
-
- In Progress
-
- links to