Dmitriy Kalinin
Dmitriy Kalinin
We have recently changed how bosh lite boxes are built and this feature was skipped. None of our tests caught this so we decided to postpone it until someone asks...
Tracker story in CF Garden: https://www.pivotaltracker.com/story/show/79557632
@keymon i've just got a build thru though we've lost our virtualbox builder (hence somewhat manual interaction required). have you considered using github.com/cloudfoundry/bosh-deployment to install bosh-lite? (example: https://github.com/cloudfoundry/bosh-deployment/blob/master/test.sh#L141)
I would still prefer to have an env variable to opt out since majority of bosh-lite envs have internet access (almost all CF teams use bosh-lite for testing).
im still not quite sold on the feature tbh (also it's would be backwards incompat). i think this might be a good issue to discuss in community meeting.
one late constraint ill throw that i just thought of... we should ensure that registry replication can be used with this feature. ie if bundle that uses images.location gets replicated...
smi-spec for traffic split: https://github.com/deislabs/smi-spec/blob/master/traffic-split.md
@ron1 that would be good. do you happen to know some recommended ways to generate that type of certificate in go?
ah i see some prior art in here: https://go.dev/src/crypto/tls/generate_cert.go
that seems like a good feature to have. though we may run into a validation problem for destinatino secret since some types require to have X keys present. (may be...