coddiwomple icon indicating copy to clipboard operation
coddiwomple copied to clipboard

Published 20 hours ago • verified publisher icon istio-ecosystem

FR: Generate config for shared root of trust between clusters

Open ZackButcher opened this issue 7 years ago • 2 comments

In order for services to use mTLS across clusters, Citadel instances in each cluster need to be configured to sign with keys in a common trust domain. The set up required today is rather involved. It would be nice to package up the cert creation and per-cluster config generation into a single tool.

ZackButcher avatar Nov 07 '18 20:11 ZackButcher

Yep, in fact I thought there was an issue for this already. Did a user prompt this, i.e. is there a deadline?

mt-inside avatar Nov 07 '18 20:11 mt-inside

No, was chatting about Shriram with it re https://github.com/istio/istio.io/pull/2847. Also good for you to generally be aware of this PR, we added some stuff upstream in Istio that'll simplify the config CW needs to generate.

ZackButcher avatar Nov 07 '18 21:11 ZackButcher