Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FR: Generate config for shared root of trust between clusters #19

Open
ZackButcher opened this issue Nov 7, 2018 · 2 comments
Open

FR: Generate config for shared root of trust between clusters #19

ZackButcher opened this issue Nov 7, 2018 · 2 comments

Comments

@ZackButcher
Copy link
Contributor

In order for services to use mTLS across clusters, Citadel instances in each cluster need to be configured to sign with keys in a common trust domain. The set up required today is rather involved. It would be nice to package up the cert creation and per-cluster config generation into a single tool.
@mt-inside
Copy link
Contributor

Yep, in fact I thought there was an issue for this already. Did a user prompt this, i.e. is there a deadline?

@ZackButcher
Copy link
Contributor Author

No, was chatting about Shriram with it re istio/istio.io#2847. Also good for you to generally be aware of this PR, we added some stuff upstream in Istio that'll simplify the config CW needs to generate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mt-inside @ZackButcher