Gabriele Bartolini
Gabriele Bartolini
> Would calling this mTLS be misleading. The presence and validity of a client certificate should be enforced. I guess the reason is for back compatibility.
This feature is really awesome! Do you think there’s a chance we’ll see it merged soon? Thank you!
> I still think there should atleast be a flag to enforce client presence and validation. Could you please elaborate on that? I believe that if the feature were actually...
> If there's a new flag that enables full mTLS (enforces client certificates), then it wouldn't disrupt existing deployments. My interpretation is that if you want to enforce it, you...
@jkowalski thoughts about merging this PR? Thanks!
Can someone with Linkerd experience review this?
We defer this feature implementation to when the CNPG-I pluggable interface is defined for restore capabilities (similar use case: restore plugins must prepare the volumes from backup data and when...