-
Story
-
Resolution: Unresolved
-
Blocker
-
None
-
None
-
None
-
None
As a mesh administrator, I want to be able to join two meshes into a federation that do not share a root certificate, so that administrative domains can be completely separate
This story covers exchange of certificate chains at Federation initialization- for continuous updates of cert chains, see MAISTRA-2238
Acceptance Criteria:
- Cert chains are communicated between meshes automatically
- Fetching of cert chains only happens once at initialization
- Certificates are written into an emptyDir volume mounted into the istiod pod
- blocks
-
MAISTRA-2238 Certificate Rotation
- Backlog
- clones
-
MAISTRA-2242 Support different root certificates
- Closed
- is related to
-
OSSM-399 Federated Identity Management [with SPIRE?]
- Closed