Add CA option to use upstream CA for provisioning cert.#3526
Add CA option to use upstream CA for provisioning cert.#3526myidpt merged 1 commit intoistio:masterfrom
Conversation
| if opts.selfSignedCA { | ||
| if opts.upstreamCAAddress != "" { | ||
| log.Info("Rely on upstream CA to provision CA certificate") | ||
| caOpts, err = ca.NewIntegratedIstioCAOptions(opts.upstreamCAAddress, opts.upstreamCACertFile, opts.upstreamAuth, |
There was a problem hiding this comment.
Consider breaking line, this looks long.
There was a problem hiding this comment.
Sure. I will to this in the next PR.
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: wattli The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these OWNERS Files:
You can indicate your approval by writing |
|
@myidpt: The following test failed, say
DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
Include the subzone when computing the locality of Workloads.
This is part of the multi-cluster CA configuration, and it could also support the plug-in CAs.