istio-csr

istio-csr copied to clipboard

cant install chart v0.5.0

5

h1 there i cant install v0.5.0. I got error: ```yaml Error: template: cert-manager-istio-csr/templates/serviceaccount.yaml:3:7: executing "cert-manager-istio-csr/templates/serviceaccount.yaml" at : error calling ne: incompatible types for comparison Use --debug flag to render out...

isality

Istio-csr pods were hung unable to handle request causes entire cluster downtime for new pods/expired pods.

5

We are running with cert-manager-istio-csr 2 pods , one pods was hung at ``` 2022-03-24T18:59:47.311227Z info klog tls-provider "msg"="renewing serving certificate" 2022-03-24T18:59:47.556644Z info klog tls-provider "msg"="serving certificate ready" 2022-03-24T18:59:47.556869Z info...

anannaya

Namespace cannot be overwritten with helm template

1

It would be awesome if the chart allowed overwriting the namespace of the: - deployment.apps/cert-manager-istio-csr - service/cert-manager-istio-csr - service/cert-manager-istio-csr-metrics - the istio-csr pod (replica set) - service account Currently, when...

rgruchalski-klarrio

certificateDuration is not used for the Istio CSR generated certificate requests

4

istio-csr generated certificates for the workloads is not using the "certificateDuration" parameter from the values.yaml. The certificaterequests generated by the istio-csr are generated with "duration: 24h0m0s" instead of using the...

hari-vamsikrishna

Integrating with istio helm chart installs

14

Does anyone have any example values inputs when integrating istio-csr with an istio setup installed using Helm https://istio.io/latest/docs/setup/install/helm/ I see istio-csr refers to this https://github.com/cert-manager/istio-csr/blob/main/hack/istio-config-1.10.0.yaml but does anyone have a...

sepulworld

A service isn't a requirement for the servicemonitor

5

We shouldn't enforce the creation of the metrics service for the servicemonitor. The servicemonitor also picks up the default istio-csr service and when the metrics service is created, the metrics...

MattiasGees

updating ConfigMap data doesn't stop

6

helm chart version:v0.4.2 for istio-csr The log entry updating ConfigMap data just keeps repeating for all the namespaces in the cluster. 2022-06-13T16:23:06.577141Z info klog "msg"="-----------------------------------------------------------------" 2022-06-13T16:23:06.577166Z info klog "msg"="Using root...

ceastman-r7

It is possible to have several CAs within the same cluster.

4

Is it possible to have more than one CA within istio-csr? How do configure it? The second question is how can I configure which CA my sidecar will get certificates...

Fr0zenBoy

Invalid certificate chain when using Vault with Intermediate CA

4

Versions: * Istio: 1.13.2 * Cert-Manager: 1.8.0 * Istio CSR: 0.4.2 (chart), 0.4.0 (app) * Vault: 1.9.2 I'm using the following script to try to test using Vault for my...

atoy3731

Documentation on rotating the root certificate

3

While it is not common, there is always the possibility that one would have to rotate the root CA. Could you add documentation on how to do it without downtime?

srinisudharsan