Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-399

Federated Identity Management [with SPIRE?]

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Maistra
    • Integrate with SPIRE
    • 40
    • False
    • False
    • 0
    • 0% 0%
    • Undefined
    • Sprint 2, Sprint 3, Sprint 4

      Provide federated identity management and new types of workload attestation through the integration with SPIRE. This does not include productisation of SPIRE yet, we're only adding necessary config options, code changes and documentation.

      Upstream enhancements to SDS

      ACs:

      • Workload certificates are provided by SPIRE through SDS
      • When establishing a federation, root certificates have to be exchanged
      • No hostPath mounts are being used by workload pods
      • All unit, integration and acceptance tests pass

        1.
        		 Generate SPIFFE ID for Envoy Sub-task New Major Unassigned
        2.
        		 Integration with Istio/Envoy Sub-task New Major Unassigned
        3.
        		 Injection of SDS plugin Sub-task New Major Unassigned
        4.
        		 Workload usage without special permissions Sub-task In Progress Major Brian Avery (Inactive)
        5.
        		 Workload Registration Sub-task New Major Unassigned
        6.
        		 Deployment of Spire/SPIFFE node and cluster agent Sub-task New Major Unassigned
        7.
        		 Fix SPIFFE ID Sub-task New Major Unassigned
        8.
        		 isolation of tenants Sub-task New Major Unassigned
        9.
        		 transfer of trust bundles for federation Sub-task New Major Unassigned
        10.
        		 multiple trust bundles Sub-task New Major Unassigned

            Unassigned Unassigned
            jlongmui@redhat.com Jamie Longmuir
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated: