Uploaded image for project: 'Zero Trust Workload Identity Manager'
  1. Zero Trust Workload Identity Manager
  2. SPIRE-134

Make Server CA_TTL configurable

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • None
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • OAPE Sprint 275, OAPE Sprint 276
    • 2

      It's an associated requirement with Upstream Authority feature (SPIRE-129)

      This would be an important function for admin to configure when managing CA hierarchy and rotation.

      Currently the SPIRE Server uses a hardcoded CA TTL value as 24h: https://github.com/openshift/zero-trust-workload-identity-manager/blob/dfcaa616ce964ac292b3109c9ed9d41603e9ffea/pkg/controller/spire-server/configmap.go#L145

       

      Additionally we also need to evaluate if `default_jwt_svid_ttl` and `default_x509_svid_ttl` should support customized in this time. https://github.com/openshift/zero-trust-workload-identity-manager/blob/dfcaa616ce964ac292b3109c9ed9d41603e9ffea/pkg/controller/spire-server/configmap.go#L147-L148

              rh-ee-aagnihot Anirudh Agnihotri
              rh-ee-yuewu Yuedong Wu
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: