Peter Chen comments

Results 27 comments of


                                            Peter Chen

Build(deps): bump proto-google-common-protos from 2.9.1 to 2.9.2

@dependabot rebase

Fetch metadata in batches

Thank you @andreasf, we have performed an initial review of the issue and this PR. It makes a lot of sense. We do notice that the following commits are not...

Consider supporting client credential flow

The built-in Istio Authorization Policy handles the Service-to-service authZ use case. See this example (https://istio.io/docs/tasks/security/authorization/authz-http/) where they configure rule to make sure "only productpage app can talk to details app."

build(deps): bump versions.springBootVersion from 2.7.3 to 2.7.4

@dependabot rebase

build(deps): bump versions.springBootVersion from 2.7.3 to 2.7.4

@dependabot recreate

build(deps): bump k8s.io/apimachinery from 0.25.1 to 0.25.2 in /k8s

@dependabot recreate

build(deps): bump k8s.io/api from 0.25.1 to 0.25.2 in /k8s

@dependabot recreate

build(deps): bump versions.springBootVersion from 2.6.11 to 2.7.4

@dependabot rebase

Leaf certificate expiration reported by API does not account for CA expiration date

Hi @ae-govau, thank you for reporting the issue. 1. Question about your workflow: You mentioned that: > As part of our CI/CD, we run credhub curl -p /api/v1/certificates, parse the...

Leaf certificate expiration reported by API does not account for CA expiration date

> Me: For whether a leaf certificate's notAfter can be longer than the notAfter of the CA, I haven't found an official RFC about this question. And it seems that...