Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2237

Federation Service Discovery traffic encryption

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Not a Bug
    • Icon: Minor Minor
    • maistra-2.1.0
    • None
    • None
    • None
    • Sprint 6, Sprint 7, Sprint 8

      As a mesh administrator, I want all traffic between meshes to be encrypted, so that no external party can read or modify it.

      Currently, federation discovery traffic between istiod and the federation gateways is not encrypted. Existing certs (istiod: webhook cert/workload cert, gateway: workload cert) can be used to achieve this.

      Acceptance Criteria:

      • Any service discovery traffic must be encrypted, even within the cluster

              dgrimm@redhat.com Daniel Grimm
              dgrimm@redhat.com Daniel Grimm
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: