Anton Kaymakchi

So what is estimated date for this feature?

Got same error without any private deps.

@jonringer I've checked briefly and "ideal" json require few tweaks in plugin section to be working ```json { "plugins": { "DataStore": [ { "sql": { "plugin_data": { "connection_string": ".data/datastore.sqlite3", "database_type":...

@azdagron yeah, I guess main point is to have new inactive upstream authority CA certificate to be in distributed to clients bundle. I probably can come up with some additional...

Seems like my particular use case is already kind of covered since AWS PCA has `supplemental_bundle_path` property that I didn't notice (nor was looking for). As I mentioned before this...

> I think this should "just work" if you change your UpstreamCA plugin to point to the new PCA ARN Main concern with that is that certificate changes with this...

Once again `supplemental_bundle_path` works for us in general since we use aws pca. I did not expect this setting to be plugin (implementation) specific so did not check that initially....

@kfox1111 you mentioned some hint based filtering in https://github.com/spiffe/spire/issues/4898. Is it WIP/PoC somewhere or I misinterpreted it or just didn’t find in this repo?

@kfox1111 thanks, I checked and conceptually (didn't look thoroughly through the code) it should work for our use case at least. How will that behave with `ClusterStaticEntry` resources tho? Or...

@yanjunxiang-google @botengyao is there any movement around this? Is it going to be implemented or is there any consensus if this feature is desired at all?