Skip to content

QuicDownstreamTransport never requests SDS certificate #15034

@howardjohn

Description

@howardjohn

Title: QuicDownstreamTransport never requests SDS certificate

Description:
I defined a transport_socket for my quic listener:

         "transport_socket": {
          "name": "envoy.transport_sockets.quic",
          "typed_config": {
           "@type": "type.googleapis.com/envoy.extensions.transport_sockets.quic.v3.QuicDownstreamTransport",
           "downstream_tls_context": {
            "common_tls_context": {
             "alpn_protocols": [
              "h2",
              "http/1.1"
             ],
             "tls_certificate_sds_secret_configs": [
              {
               "name": "kubernetes://sds-credential",
               "sds_config": {
                "ads": {},
                "resource_api_version": "V3"
               }
              }
             ]
            },
            "require_client_certificate": false
           }
          }
         }
        }

Secret shows up as WARMING in the config dump, but no

Repro steps:
See config above

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions