-
Notifications
You must be signed in to change notification settings - Fork 385
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(translator): use SDS to deliver system trust store to support dynamic reload #5084
Conversation
Signed-off-by: Guy Daich <guy.daich@sap.com>
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #5084 +/- ##
==========================================
- Coverage 66.92% 66.83% -0.09%
==========================================
Files 210 210
Lines 32995 32979 -16
==========================================
- Hits 22081 22041 -40
- Misses 9579 9596 +17
- Partials 1335 1342 +7 ☔ View full report in Codecov by Sentry. |
Signed-off-by: Guy Daich <guy.daich@sap.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM thanks !
would be good to optimize this in the future to have 1 system secret rather than 1 per policy
Signed-off-by: Guy Daich <guy.daich@sap.com>
cc @arkodg |
Signed-off-by: Guy Daich <guy.daich@sap.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM thanks!
Signed-off-by: Guy Daich <guy.daich@sap.com>
@@ -44,6 +44,34 @@ var BackendTLSTest = suite.ConformanceTest{ | |||
http.MakeRequestAndExpectEventuallyConsistentResponse(t, suite.RoundTripper, suite.TimeoutConfig, gwAddr, expectedResponse) | |||
}) | |||
|
|||
t.Run("with a backend TLS Policy using Truststore", func(t *testing.T) { | |||
// the upstream used is the eg site which doesn't support IPv6 at this time | |||
if IPFamily == "ipv6" { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
cc @zirain
…namic reload (envoyproxy#5084) * use SDS to deliver system trust store Signed-off-by: Guy Daich <guy.daich@sap.com> * fix manifests Signed-off-by: Guy Daich <guy.daich@sap.com> * skip test for IPv6 as target doesn't support it Signed-off-by: Guy Daich <guy.daich@sap.com> --------- Signed-off-by: Guy Daich <guy.daich@sap.com>
What type of PR is this?
What this PR does / why we need it:
Which issue(s) this PR fixes:
Fixes #5074
Release Notes: Yes