Nick Fox

Add multi-session auth proposal

1

### Describe the change Adds a multi-session auth proposal. This is mostly to document the multi-cluster login flow for the `openshift` auth strategy. ### Issue reference #6360

Multicluster on openshift - each "session" expires separately

3

### What do you want to improve? When using multicluster on openshift, each cluster's session should expire separately and be handled the way that session expiration happens for single cluster....

### What do you want to improve? Kiali's support for [stable revision labels](https://istio.io/latest/docs/setup/upgrade/canary/#stable-revision-labels). ### What is the current behavior? When you use stable revision labels, on the mesh page Kiali...

Multi-cluster - Use any cluster's Kiali service account token for Prom auth

3

### What do you want to improve? Ability to specify a specific Kiali service account token for Prometheus auth in a multi-cluster setup. ### What is the current behavior? You...

Show workload identity information

1

### What do you want to improve? Show information about a workload's identity. This can be helpful when trying to get more details around mTLS for a workload. This info...

### What do you want to improve? In a multicluster openshift deployment when you first access the kiali endpoint, you are immediately redirected to the oauth login for the server...

Autodetect identity domain

1

### What do you want to improve? Kiali should autodetect the identity domain setting rather than forcing users to set this manually: https://kiali.io/docs/configuration/kialis.kiali.io/#.spec.external_services.istio.istio_identity_domain. It comes from istio configmap `trustDomain` field.

### What do you want to improve? There's a number of places in the backend marked as `TODO: multi-primary` or `TODO: multi-cluster` which assume only single primary is running on...

Use the Sail Operator to deploy istio in Kiali's testing pipelines.

Get component status only checks home cluster

1

### What do you want to improve? `IstioStatusService` only checks the status for the Kiali home cluster: https://github.com/kiali/kiali/blob/153dd90d4a56a5c463c59720680efa2804d13aef/business/istio_status.go#L57-L62 ### What is the new behavior? Status is checked for all controlplanes.