github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
19,302 Commits
1,701 Branches
460 Tags
694 MiB
Commit Graph

2 Commits (31d58014fd2eb4a379e3b9f647049cf9d6a76de1)

Author SHA1 Message Date
freddygv 0ea3353537 Add handling in agent cache for server leaf certs 2022-09-16 17:54:34 -06:00
Freddy f4dfd42e0a
Add SpiffeID for Consul server agents (#14485) 
Co-authored-by: Eric Haberkorn <erichaberkorn@gmail.com>

By adding a SpiffeID for server agents, servers can now request a leaf
certificate from the Connect CA.

This new Spiffe ID has a key property: servers are identified by their
datacenter name and trust domain. All servers that share these
attributes will share a ServerURI.

The aim is to use these certificates to verify the server name of ANY
server in a Consul datacenter.
 2022-09-06 17:58:13 -06:00