Sorin Dumitru
Sorin Dumitru
spire-server becoming unavailable has both immediate and over time effects on spire-agent. The agent will only be able to serve SVIDs from its cache and will not learn about new...
The current spire-agent resolver and load balancer are configured to be DNS with round robin load balancing. gRPC implements that round robin as connecting to each address that the resolver...
**Pull Request check list** - [ ] Commit conforms to CONTRIBUTING.md? - [ ] Proper tests/regressions included? - [ ] Documentation updated? **Affected functionality** spire-agent behaviour in case of eviction...
Running integration tests is completely failing for me because PATH is overwritten to an invalid string (make[1] Entering ...).
If an agent is disconnected from spire-server for a longer period of time it may end up in the situation where the bundle it saved on disk will be out...
When running a nested SPIRE deployment, it can be surprising that the TTL on the CA used by the downstream server does not come from the `ca_ttl` in the configuration...
I'd like to be able to use my own CA for the https_web profile of the bundle endpoint. This is currently not allowed by the specification through [wording such as](https://github.com/spiffe/spiffe/blob/main/standards/SPIFFE_Federation.md#521-web-pki-https_web):...