-
Notifications
You must be signed in to change notification settings - Fork 5.3k
QuicDownstreamTransport never requests SDS certificate #15034
Copy link
Copy link
Closed
Labels
Description
Title: QuicDownstreamTransport never requests SDS certificate
Description:
I defined a transport_socket for my quic listener:
"transport_socket": {
"name": "envoy.transport_sockets.quic",
"typed_config": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.quic.v3.QuicDownstreamTransport",
"downstream_tls_context": {
"common_tls_context": {
"alpn_protocols": [
"h2",
"http/1.1"
],
"tls_certificate_sds_secret_configs": [
{
"name": "kubernetes://sds-credential",
"sds_config": {
"ads": {},
"resource_api_version": "V3"
}
}
]
},
"require_client_certificate": false
}
}
}
}Secret shows up as WARMING in the config dump, but no
Repro steps:
See config above
Reactions are currently unavailable