Uploaded image for project: 'Cert Manager support for Red Hat OpenShift'
  1. Cert Manager support for Red Hat OpenShift
  2. CM-680

[istio-csr GA] Provision to configure istio clusterID.

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • cert-manager-1.18
    • cert-manager-1.18
    • None
    • OAPE Sprint 275
    • 1

      Extend `istiocsr.operator.openshift.io` with an option to configure Istio cluster ID, which will be included in `IstioCertificateRequest` arg to `CreateCertificate` gRPC method used by Istio to request certifcates. The cluster ID on istio-csr side will be used to verify whether the incoming the certificate request from the Istio is allowed.

      Cluster ID is passed as the process arg `--cluster-id` in the istio-csr deployment object.

       

      Acceptance Criteria:

      • User configured Cluster ID is present as part of the arg list and when not found `Kubernetes` is used as default value.
      • e2es and UTs are added.

              rh-ee-ckyal Chirag Kyal
              bhb@redhat.com Bharath B
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: